Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/402E3E3AF16811EF9A77BC44762E951A.roa
File: 402E3E3AF16811EF9A77BC44762E951A.roa (raw, json)
Hash identifier: 503yOnwPnfVCSOW8bfH3ddQDKIcav6cx6TyJaV9qgVM=
Subject key identifier: F7:0F:5D:9F:D2:BE:1B:03:2A:47:CA:29:64:2F:C7:B8:9A:92:16:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015AA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/402E3E3AF16811EF9A77BC44762E951A.roa
Signing time: Sat 22 Feb 2025 21:59:13 +0000
ROA not before: Sat 22 Feb 2025 21:59:09 +0000
ROA not after: Tue 25 Mar 2025 21:59:09 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88737 (0x15aa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:59:09 2025 GMT
Not After : Mar 25 21:59:09 2025 GMT
Subject: CN=67ba48b1-5084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:c0:6e:74:28:54:73:d6:bb:1c:15:d9:da:
86:47:7b:30:10:ed:1c:1d:2c:13:a1:49:80:50:c6:
e8:b3:d2:da:bb:75:37:f9:58:ce:7a:6d:9d:8d:77:
3d:de:43:56:70:b3:20:e3:d3:04:8b:35:0c:b6:6f:
ef:bd:d2:91:10:ba:6d:be:c7:dd:23:97:f4:f6:24:
05:1b:9b:39:a0:0c:6f:d9:7c:c2:86:fd:a3:46:8e:
a2:61:b0:26:6c:31:d8:69:ee:a4:4b:37:f5:fd:f8:
ed:2b:75:88:2b:6e:33:e4:51:95:c6:8e:93:ba:16:
c5:1c:58:af:39:0b:86:b0:ce:ab:37:b4:04:16:52:
53:19:a3:d7:91:b5:37:e5:fd:00:95:08:e7:a0:d3:
5a:41:56:d6:5b:7f:22:0d:da:17:6d:6d:0f:c5:ed:
70:6c:08:98:a6:d4:86:96:f1:8b:e0:2a:4a:52:f3:
60:c9:0d:df:b9:1c:89:87:de:e9:bf:ce:03:ed:f1:
df:99:3e:c9:d7:10:13:31:ce:c6:d6:17:3c:35:41:
ae:53:6e:a6:6d:68:e1:e9:f0:c0:7c:79:51:38:50:
bd:2e:ac:37:66:73:65:77:b2:34:5b:96:38:af:a8:
a6:8d:92:6d:20:d5:12:13:6f:8d:cd:cd:9c:20:10:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:5D:9F:D2:BE:1B:03:2A:47:CA:29:64:2F:C7:B8:9A:92:16:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/402E3E3AF16811EF9A77BC44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/24
Signature Algorithm: sha256WithRSAEncryption
85:88:d3:42:9e:16:c3:df:de:ab:d6:18:a6:f9:80:ae:a9:1e:
49:c7:70:1f:d0:f3:62:9e:5d:25:03:05:99:eb:1f:b0:86:86:
f0:15:59:b4:97:2a:2e:aa:8a:d3:9a:dc:48:c9:74:85:0a:d1:
7e:42:3a:11:64:c6:be:e5:8b:89:2a:81:ce:16:2e:4a:71:ed:
4e:6a:0e:64:b8:2d:7d:62:1f:28:ab:50:1e:3e:68:bc:57:4d:
1a:7c:d3:24:1c:e9:ae:92:16:c1:77:a8:b6:3e:81:7b:e6:1b:
1b:11:38:6f:ba:6f:85:90:37:76:66:01:a4:c3:ff:6f:82:23:
05:14:2e:38:a7:49:de:4e:56:88:52:12:19:22:b7:11:c8:f6:
16:90:b5:f9:30:70:2f:a0:2e:96:ea:df:3d:89:56:0e:e8:a4:
5a:65:29:37:a5:82:03:41:81:d9:cc:c8:0f:ea:e2:c7:af:5f:
7d:ea:b0:cf:82:6b:b9:14:30:50:90:d4:9a:9a:60:cc:76:d7:
28:f5:1a:da:8d:2e:55:1f:6a:dd:e8:fa:c1:46:72:ce:72:75:
c2:f2:4a:1a:3d:20:a3:53:8c:2d:d5:12:f6:02:73:0f:7a:86:
cd:61:06:a2:4d:e7:58:5b:14:ed:a5:d0:08:1e:04:24:2a:55:
e6:ca:08:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVqhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIyMjE1OTA5WhcNMjUwMzI1MjE1OTA5WjAYMRYw
FAYDVQQDEw02N2JhNDhiMS01MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtg3AbnQoVHPWuxwV2dqGR3swEO0cHSwToUmAUMbos9Lau3U3+VjOem2d
jXc93kNWcLMg49MEizUMtm/vvdKRELptvsfdI5f09iQFG5s5oAxv2XzChv2jRo6i
YbAmbDHYae6kSzf1/fjtK3WIK24z5FGVxo6TuhbFHFivOQuGsM6rN7QEFlJTGaPX
kbU35f0AlQjnoNNaQVbWW38iDdoXbW0Pxe1wbAiYptSGlvGL4CpKUvNgyQ3fuRyJ
h97pv84D7fHfmT7J1xATMc7G1hc8NUGuU26mbWjh6fDAfHlROFC9Lqw3ZnNld7I0
W5Y4r6imjZJtINUSE2+Nzc2cIBAa+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPcP
XZ/SvhsDKkfKKWQvx7iakhZZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MDJFM0UzQUYxNjgxMUVGOUE3N0JDNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsggMA0GCSqGSIb3DQEB
CwUAA4IBAQCFiNNCnhbD396r1him+YCuqR5Jx3Af0PNinl0lAwWZ6x+whobwFVm0
lyouqorTmtxIyXSFCtF+QjoRZMa+5YuJKoHOFi5Kce1Oag5kuC19Yh8oq1AePmi8
V00afNMkHOmukhbBd6i2PoF75hsbEThvum+FkDd2ZgGkw/9vgiMFFC44p0neTlaI
UhIZIrcRyPYWkLX5MHAvoC6W6t89iVYO6KRaZSk3pYIDQYHZzMgP6uLHr1996rDP
gmu5FDBQkNSammDMdtco9RrajS5VH2rd6PrBRnLOcnXC8koaPSCjU4wt1RL2AnMP
eobNYQaiTedYWxTtpdAIHgQkKlXmyggC
-----END CERTIFICATE-----
Generated at Fri May 9 05:42:38 2025 by rpki-client