Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B5FE38DC0411EFABAD1353762E951A.roa
File: 41B5FE38DC0411EFABAD1353762E951A.roa (raw, json)
Hash identifier: zfhvfTsJxgk9ULjXnq4hWLYAQYqyWkxDdX3g6GCmR9s=
Subject key identifier: 84:79:1C:86:BF:93:D7:23:3B:5E:20:AE:20:7A:EE:DE:BE:20:A6:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B5FE38DC0411EFABAD1353762E951A.roa
Signing time: Sun 26 Jan 2025 16:40:31 +0000
ROA not before: Sun 26 Jan 2025 16:40:28 +0000
ROA not after: Tue 01 Apr 2025 16:40:28 +0000
asID: 63139
IP address blocks: 154.94.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84724 (0x14af4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 16:40:28 2025 GMT
Not After : Apr 1 16:40:28 2025 GMT
Subject: CN=6796657f-81c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:a4:da:55:26:f9:12:6c:d6:d3:fc:7b:b9:
9f:8b:8d:c8:4e:66:1c:b8:8a:02:71:53:80:bd:a1:
3e:c2:63:f0:e2:d9:d6:5d:d3:3e:95:e4:67:c7:ea:
fc:74:d7:c5:6f:54:1d:03:34:9a:d3:4a:d4:e8:fe:
01:a7:70:eb:f6:d2:e3:31:d4:d1:1e:ee:68:bd:47:
d2:87:12:1b:60:76:a9:51:33:c1:8e:e4:5d:25:e9:
f2:d3:e2:d0:1c:0d:e6:a7:b5:57:1f:3d:61:4f:26:
de:2b:d8:6a:a8:ca:c5:4d:0d:b4:d7:fc:79:b9:65:
fa:4e:cb:4c:d5:ea:a5:5d:89:86:36:d7:d8:1e:f9:
f1:16:76:71:d2:61:8e:49:9d:0c:b0:41:32:66:ad:
43:fb:fd:49:62:84:c7:a9:ce:1f:ee:24:9a:cc:b2:
16:66:59:44:98:5e:0d:2c:b7:91:34:2f:5d:6b:ac:
ef:35:cc:b4:d8:0f:22:00:0d:70:e9:01:26:90:3b:
4f:14:f7:11:a8:80:bc:43:38:2b:c4:d3:eb:0b:c0:
4b:f3:c2:d4:b7:77:23:58:c6:a2:91:7b:ca:ed:27:
e8:40:89:eb:aa:db:6e:c1:28:3b:c1:a3:e0:2c:ab:
07:72:a9:08:d6:ce:2e:42:c3:0a:ad:79:e2:71:56:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:79:1C:86:BF:93:D7:23:3B:5E:20:AE:20:7A:EE:DE:BE:20:A6:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B5FE38DC0411EFABAD1353762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7f:4a:52:e3:35:f9:d3:4d:ee:79:76:5a:2b:f2:7c:50:5f:
2b:86:86:85:ea:43:5c:a9:b3:98:bf:bc:91:65:43:51:61:13:
be:af:b4:17:3d:24:f0:e3:cc:c4:05:c8:9b:d9:14:d8:64:05:
29:f6:cf:f6:ee:9b:3b:f5:91:8a:81:87:50:57:ea:46:88:8f:
32:d2:57:21:f6:8a:94:56:18:77:12:cd:8a:d1:75:24:00:4f:
1d:8d:b6:dd:66:9e:c0:05:f0:30:e9:44:b9:c4:63:28:27:fd:
fc:47:37:fd:fd:9c:6f:ad:15:06:bc:bd:05:17:99:c7:ac:cd:
ea:af:f2:c3:4b:b5:be:04:61:90:a5:ac:cd:6f:12:47:c8:cf:
8a:67:72:b1:1c:fe:9d:90:85:b5:c8:d8:7d:ad:5a:93:88:95:
b9:73:cf:58:cc:29:47:dd:ff:8c:f4:52:89:59:1e:3c:d9:47:
2a:b7:c6:57:48:18:f9:c4:2d:0f:1e:a4:34:58:49:09:d9:e9:
b9:8e:bb:63:20:87:95:35:31:ea:5a:c2:5b:80:8a:ce:b6:c1:
48:54:5a:a1:e0:95:41:76:8f:0b:a6:69:95:9e:f4:19:97:b0:
65:85:92:e1:c5:e7:ec:b5:4e:f4:20:a9:41:46:b0:e8:5d:66:
57:19:05:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUr0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTY0MDI4WhcNMjUwNDAxMTY0MDI4WjAYMRYw
FAYDVQQDEw02Nzk2NjU3Zi04MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwa2k2lUm+RJs1tP8e7mfi43ITmYcuIoCcVOAvaE+wmPw4tnWXdM+leRn
x+r8dNfFb1QdAzSa00rU6P4Bp3Dr9tLjMdTRHu5ovUfShxIbYHapUTPBjuRdJeny
0+LQHA3mp7VXHz1hTybeK9hqqMrFTQ201/x5uWX6TstM1eqlXYmGNtfYHvnxFnZx
0mGOSZ0MsEEyZq1D+/1JYoTHqc4f7iSazLIWZllEmF4NLLeRNC9da6zvNcy02A8i
AA1w6QEmkDtPFPcRqIC8QzgrxNPrC8BL88LUt3cjWMaikXvK7SfoQInrqttuwSg7
waPgLKsHcqkI1s4uQsMKrXnicVZUzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIR5
HIa/k9cjO14griB67t6+IKYbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MUI1RkUzOERDMDQxMUVGQUJBRDEzNTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5iMA0GCSqGSIb3DQEB
CwUAA4IBAQA9f0pS4zX5003ueXZaK/J8UF8rhoaF6kNcqbOYv7yRZUNRYRO+r7QX
PSTw48zEBcib2RTYZAUp9s/27ps79ZGKgYdQV+pGiI8y0lch9oqUVhh3Es2K0XUk
AE8djbbdZp7ABfAw6US5xGMoJ/38Rzf9/ZxvrRUGvL0FF5nHrM3qr/LDS7W+BGGQ
pazNbxJHyM+KZ3KxHP6dkIW1yNh9rVqTiJW5c89YzClH3f+M9FKJWR482Ucqt8ZX
SBj5xC0PHqQ0WEkJ2em5jrtjIIeVNTHqWsJbgIrOtsFIVFqh4JVBdo8LpmmVnvQZ
l7BlhZLhxefstU70IKlBRrDoXWZXGQUe
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:58:25 2025 by rpki-client