Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D54B5DAF69611EFA5022A5D762E951A.roa
File: 3D54B5DAF69611EFA5022A5D762E951A.roa (raw, json)
Hash identifier: ZCZXtYv4RIGVna9IBq7V2LCqPgfQJalJChn3FtxCjZ8=
Subject key identifier: CC:65:AE:E3:8C:E2:B2:82:6D:D9:F7:EF:30:1B:A0:30:4A:D4:24:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D54B5DAF69611EFA5022A5D762E951A.roa
Signing time: Sat 01 Mar 2025 12:11:01 +0000
ROA not before: Sat 01 Mar 2025 12:10:57 +0000
ROA not after: Mon 31 Mar 2025 12:10:57 +0000
asID: 202656
IP address blocks: 154.221.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93744 (0x16e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:10:57 2025 GMT
Not After : Mar 31 12:10:57 2025 GMT
Subject: CN=67c2f955-3bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:ad:9f:a5:d8:c0:7e:64:22:b7:50:2f:33:
76:f4:0a:68:5c:8f:a6:83:46:29:79:7a:9a:8c:1b:
b6:74:96:c5:25:1e:d4:66:9a:f4:17:d6:fc:29:d8:
a4:4a:be:77:95:c3:4b:95:3c:a0:a4:07:1b:3f:8d:
80:3b:9d:ea:77:9b:9d:76:e7:42:d2:7f:0c:df:7c:
c6:68:77:ce:01:3b:f8:3a:c3:50:21:42:e7:02:34:
93:a8:fe:fd:d0:51:7c:0a:42:00:95:51:e9:3d:62:
2b:f0:4f:52:5b:29:13:ab:9c:08:a2:df:9f:5c:45:
6a:18:f3:b7:4e:be:19:f4:1b:77:dc:0c:6a:8d:6c:
12:89:64:28:ea:3a:14:5c:fe:36:cb:e0:d9:e6:29:
fe:2c:38:20:30:6f:29:5e:67:d3:db:b6:81:82:14:
b1:ce:f4:18:79:01:25:98:0b:3b:e6:25:45:6e:1d:
80:a1:80:08:7f:c5:9c:64:5c:dc:b8:b4:ae:29:88:
c9:b0:b3:91:f9:6e:01:99:6b:bd:87:1e:b0:01:30:
26:de:8a:56:32:18:f4:ba:ed:64:40:a7:d6:6c:7f:
d5:bc:6e:6b:e6:23:a1:2d:ee:f4:0e:1d:e7:83:bd:
51:0c:d5:d6:2c:ac:b8:36:d3:67:f3:fa:7f:5c:89:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:65:AE:E3:8C:E2:B2:82:6D:D9:F7:EF:30:1B:A0:30:4A:D4:24:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D54B5DAF69611EFA5022A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.53.0/24
Signature Algorithm: sha256WithRSAEncryption
72:45:1b:9c:86:3b:4d:be:d5:d9:97:35:28:6d:7f:3e:a6:32:
df:be:fd:69:89:58:30:de:9d:bd:97:1a:e5:62:6b:ff:bc:f1:
66:91:8d:4f:52:4e:a2:0e:b4:b8:16:f6:8f:15:df:cc:b0:75:
c5:8d:bf:9b:bf:9a:56:c7:73:3d:f9:b9:ba:14:d4:0e:d9:1c:
09:e7:6e:45:e4:94:cd:10:ac:4f:ef:61:1f:49:4f:80:fe:88:
8f:61:86:e4:1a:39:31:9f:b0:62:9b:a3:c6:94:ff:57:11:63:
bf:24:5d:d1:e8:6a:29:54:6f:99:d8:92:4c:fd:bd:b5:84:fc:
c7:87:ec:2c:a4:51:bd:da:eb:e9:fb:38:91:02:ee:f8:34:4c:
13:4a:e1:d5:fe:d4:bd:65:7f:37:93:c9:ab:25:14:fb:a5:6f:
37:ff:9e:5d:34:85:49:25:e2:23:8d:ef:bd:47:b9:ba:c9:cf:
59:25:64:36:9b:5f:67:98:7a:90:bc:98:b3:e8:49:b2:95:f2:
1d:1b:6e:2f:40:25:0d:87:75:c2:09:cd:19:76:4d:3b:7b:7d:
9c:56:d1:94:98:64:a5:6a:bc:75:17:3d:e0:c4:23:0d:67:9e:
46:88:5a:5d:6c:49:57:4b:a0:fd:2c:b7:e2:bc:e2:14:c1:ea:
7b:b3:83:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW4wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTIxMDU3WhcNMjUwMzMxMTIxMDU3WjAYMRYw
FAYDVQQDEw02N2MyZjk1NS0zYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzgqtn6XYwH5kIrdQLzN29ApoXI+mg0YpeXqajBu2dJbFJR7UZpr0F9b8
KdikSr53lcNLlTygpAcbP42AO53qd5uddudC0n8M33zGaHfOATv4OsNQIULnAjST
qP790FF8CkIAlVHpPWIr8E9SWykTq5wIot+fXEVqGPO3Tr4Z9Bt33AxqjWwSiWQo
6joUXP42y+DZ5in+LDggMG8pXmfT27aBghSxzvQYeQElmAs75iVFbh2AoYAIf8Wc
ZFzcuLSuKYjJsLOR+W4BmWu9hx6wATAm3opWMhj0uu1kQKfWbH/VvG5r5iOhLe70
Dh3ng71RDNXWLKy4NtNn8/p/XImYGQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMxl
ruOM4rKCbdn37zAboDBK1CRgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRDU0QjVEQUY2OTYxMUVGQTUwMjJBNUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt01MA0GCSqGSIb3DQEB
CwUAA4IBAQByRRuchjtNvtXZlzUobX8+pjLfvv1piVgw3p29lxrlYmv/vPFmkY1P
Uk6iDrS4FvaPFd/MsHXFjb+bv5pWx3M9+bm6FNQO2RwJ525F5JTNEKxP72EfSU+A
/oiPYYbkGjkxn7Bim6PGlP9XEWO/JF3R6GopVG+Z2JJM/b21hPzHh+wspFG92uvp
+ziRAu74NEwTSuHV/tS9ZX83k8mrJRT7pW83/55dNIVJJeIjje+9R7m6yc9ZJWQ2
m19nmHqQvJiz6EmylfIdG24vQCUNh3XCCc0Zdk07e32cVtGUmGSlarx1Fz3gxCMN
Z55GiFpdbElXS6D9LLfivOIUwep7s4MM
-----END CERTIFICATE-----
Generated at Fri May 9 11:59:29 2025 by rpki-client