Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/416EDBAEDC0C11EF8C35548A762E951A.roa
File: 416EDBAEDC0C11EF8C35548A762E951A.roa (raw, json)
Hash identifier: 5L7w3y3gMeQx7jnt4hkySbGBi/FZ1dq7S2WfrW9EDEo=
Subject key identifier: 9D:81:52:9F:D4:E5:A5:C8:FA:EC:28:70:3F:B8:74:EC:EE:DD:16:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/416EDBAEDC0C11EF8C35548A762E951A.roa
Signing time: Sun 26 Jan 2025 17:37:47 +0000
ROA not before: Sun 26 Jan 2025 17:37:43 +0000
ROA not after: Tue 01 Apr 2025 17:37:43 +0000
asID: 63139
IP address blocks: 154.94.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84776 (0x14b28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:37:43 2025 GMT
Not After : Apr 1 17:37:43 2025 GMT
Subject: CN=679672eb-a6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:7d:49:8d:c5:2b:d3:68:f6:fa:ae:ea:e7:
33:74:ca:5f:a2:0c:a6:e1:14:1e:8c:5e:ef:fb:2c:
9c:e3:22:c8:1f:fe:fd:eb:8e:02:99:0f:5b:c7:51:
a6:3c:17:76:e7:c0:26:28:58:7c:4c:04:4b:e7:39:
f0:1b:06:1a:e2:73:a2:ca:6d:d0:0f:ad:70:39:2c:
83:5e:d3:c8:34:b4:d4:37:4c:b3:78:8e:81:89:4e:
0b:01:ca:08:e4:46:f4:12:fe:e6:b3:6c:80:62:78:
19:26:d5:b0:d5:7d:d4:23:7a:ec:56:2d:86:ca:29:
0a:90:e5:43:14:35:53:86:d4:05:98:89:da:c0:74:
79:9e:cb:35:36:ff:1e:0c:f0:66:e5:60:b5:3e:c0:
0e:a0:4a:e6:14:3c:62:28:c8:13:e1:12:88:25:4f:
fe:0f:1b:47:84:0d:dd:1e:17:31:0b:01:b5:83:e2:
90:35:70:26:d9:90:2e:63:78:30:82:3f:e9:1b:20:
1e:9c:ad:40:eb:74:71:52:41:80:0c:a5:e5:72:02:
dc:db:8c:73:a1:3f:63:43:4b:95:85:a5:25:78:5e:
68:5b:18:8f:81:b6:cb:de:a6:9b:e0:32:dd:8c:f5:
1e:7d:4a:94:47:55:d0:1a:d4:f2:33:ff:43:fb:cc:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:52:9F:D4:E5:A5:C8:FA:EC:28:70:3F:B8:74:EC:EE:DD:16:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/416EDBAEDC0C11EF8C35548A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.65.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:14:73:e8:09:cb:29:e9:ee:9b:4a:28:35:b7:24:b1:52:77:
90:1f:c4:c4:ea:cb:7c:61:69:f5:aa:eb:28:75:44:33:3c:c8:
c3:7f:08:e2:25:91:0a:70:43:4f:b8:1e:53:b9:e7:93:fc:b6:
39:3e:1b:21:b5:69:60:4f:1a:66:94:a7:6e:3b:73:b0:30:10:
ac:d5:d2:56:40:14:a3:50:65:d7:77:e0:a8:79:8d:5d:b5:a7:
be:78:4d:4e:39:30:d1:97:b1:5a:b9:a0:a9:39:d7:b7:6b:c2:
a4:65:92:4b:fd:98:dc:11:6d:64:81:38:15:66:25:51:5d:4d:
16:ae:31:80:e8:06:0e:45:c6:8b:29:5f:82:cb:cc:db:0d:78:
af:e4:69:e8:8b:7e:6c:37:76:71:ba:66:bc:4c:88:0f:19:f3:
6b:1b:b6:f3:68:7b:b2:e2:51:4d:10:1c:27:e3:1a:d4:19:60:
78:03:39:01:6b:cb:db:f7:6b:45:de:10:c4:2d:cb:05:b9:46:
00:8c:f4:c3:f4:01:8b:a9:56:4e:f8:88:5c:8e:ca:31:6d:30:
d3:4f:e8:6e:3f:3d:ac:0f:6c:92:e5:49:5d:10:a5:ce:44:de:
46:49:eb:2a:4d:8b:e0:00:81:71:44:04:1b:25:63:0d:47:34:
30:9d:11:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUsoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTczNzQzWhcNMjUwNDAxMTczNzQzWjAYMRYw
FAYDVQQDEw02Nzk2NzJlYi1hNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxb99SY3FK9No9vqu6uczdMpfogym4RQejF7v+yyc4yLIH/79644CmQ9b
x1GmPBd258AmKFh8TARL5znwGwYa4nOiym3QD61wOSyDXtPINLTUN0yzeI6BiU4L
AcoI5Eb0Ev7ms2yAYngZJtWw1X3UI3rsVi2GyikKkOVDFDVThtQFmInawHR5nss1
Nv8eDPBm5WC1PsAOoErmFDxiKMgT4RKIJU/+DxtHhA3dHhcxCwG1g+KQNXAm2ZAu
Y3gwgj/pGyAenK1A63RxUkGADKXlcgLc24xzoT9jQ0uVhaUleF5oWxiPgbbL3qab
4DLdjPUefUqUR1XQGtTyM/9D+8zmMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ2B
Up/U5aXI+uwocD+4dOzu3Ra7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MTZFREJBRURDMEMxMUVGOEMzNTU0OEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5BMA0GCSqGSIb3DQEB
CwUAA4IBAQCxFHPoCcsp6e6bSig1tySxUneQH8TE6st8YWn1qusodUQzPMjDfwji
JZEKcENPuB5TueeT/LY5PhshtWlgTxpmlKduO3OwMBCs1dJWQBSjUGXXd+CoeY1d
tae+eE1OOTDRl7FauaCpOde3a8KkZZJL/ZjcEW1kgTgVZiVRXU0WrjGA6AYORcaL
KV+Cy8zbDXiv5Gnoi35sN3Zxuma8TIgPGfNrG7bzaHuy4lFNEBwn4xrUGWB4AzkB
a8vb92tF3hDELcsFuUYAjPTD9AGLqVZO+IhcjsoxbTDTT+huPz2sD2yS5UldEKXO
RN5GSesqTYvgAIFxRAQbJWMNRzQwnRGL
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:56:53 2025 by rpki-client