Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41F6F84CF29E11EFB40609AB762E951A.roa
File: 41F6F84CF29E11EFB40609AB762E951A.roa (raw, json)
Hash identifier: DKQd7VOZIY0K7MXkVhjGIFam5Dd59cK2VIXOoMjQbl4=
Subject key identifier: E1:78:38:08:5E:9C:F2:23:4A:A0:1F:72:EE:91:D4:6F:7E:A3:79:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41F6F84CF29E11EFB40609AB762E951A.roa
Signing time: Mon 24 Feb 2025 10:58:20 +0000
ROA not before: Mon 24 Feb 2025 10:58:16 +0000
ROA not after: Wed 26 Mar 2025 10:58:16 +0000
asID: 5065
IP address blocks: 154.94.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89032 (0x15bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:58:16 2025 GMT
Not After : Mar 26 10:58:16 2025 GMT
Subject: CN=67bc50cc-cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:b3:37:bf:0f:85:be:63:37:c0:df:92:5e:
0f:41:ab:01:0b:fd:bd:80:28:c3:75:0f:f1:0d:d3:
27:4d:84:e3:72:58:d5:b6:27:1d:bd:48:f7:7e:8b:
05:57:7f:a3:51:21:e4:b4:34:25:e3:67:dd:7d:ad:
f7:c0:11:f0:e7:64:bc:4b:f6:7e:90:0a:3a:22:14:
af:02:ba:04:e1:70:09:11:2a:2e:eb:68:6f:8d:9d:
56:2d:b2:d0:f6:d3:e7:f7:08:f4:f4:61:c3:94:d9:
a8:fe:bf:b4:a2:72:7a:7d:df:5b:54:fd:ab:cd:cc:
7f:6c:0a:4f:09:d9:80:dc:77:6b:d4:d6:b8:05:d5:
c6:a4:ce:6f:42:aa:3b:1b:2c:65:e2:8a:ce:10:35:
02:32:af:7f:6d:e4:d9:06:62:80:89:10:34:f2:92:
85:b8:0f:f6:85:1e:a8:fe:63:fc:9b:75:1c:ff:68:
47:9b:6a:d9:30:c9:1e:06:0c:c8:64:b2:fd:58:c0:
6a:ae:07:f6:f3:3b:d8:ca:ba:4d:77:67:96:2c:b2:
b0:26:11:78:bb:74:7f:25:ca:20:3a:8b:a0:58:50:
92:4f:08:0f:1e:23:3e:40:06:ac:16:5d:4f:7a:17:
9e:65:c8:73:4f:95:8f:fa:c3:27:f9:b4:3c:05:f8:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:38:08:5E:9C:F2:23:4A:A0:1F:72:EE:91:D4:6F:7E:A3:79:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41F6F84CF29E11EFB40609AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.36.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5e:69:00:bb:5e:aa:f7:da:55:2e:97:59:98:a0:04:82:3a:
8d:d9:3c:95:a9:c1:fa:85:66:7f:85:f1:2d:e1:8f:c1:d3:ba:
62:db:0c:72:6f:ea:57:95:c4:88:39:42:70:d9:92:db:a6:83:
23:da:dd:bb:d4:96:c5:ca:e2:cc:d6:b6:ff:cc:eb:16:9b:4a:
b9:f1:4f:a3:c7:26:b6:df:33:b7:fc:c1:08:47:65:4d:b3:88:
e4:3f:94:99:ca:b7:d0:3b:fa:2e:92:e3:26:21:1f:16:d4:c5:
e6:1d:9c:f5:2c:1c:63:6a:24:82:a6:c8:0b:bf:af:96:b6:cc:
dc:66:55:07:49:8e:04:48:9f:54:fe:aa:51:ee:da:25:4a:16:
70:cd:19:b5:dc:cd:d3:5e:fc:95:81:02:fb:4f:0f:ab:44:0c:
e2:2f:8e:5a:1b:58:ab:21:48:f5:30:ae:02:6c:f6:95:1d:f5:
91:f8:47:cd:63:3b:65:96:7e:94:c9:77:30:5d:4d:f1:d6:30:
8f:57:b8:d4:ca:ab:ee:70:07:f0:94:7c:7b:3d:69:b5:1b:3a:
58:5f:27:b9:03:34:d7:18:9b:a6:89:b5:af:17:54:43:d4:19:
6b:fe:34:15:d1:b7:c7:86:4b:69:12:61:bd:e2:db:a0:72:80:
32:7a:36:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVvIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTA1ODE2WhcNMjUwMzI2MTA1ODE2WjAYMRYw
FAYDVQQDEw02N2JjNTBjYy1jYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA032zN78Phb5jN8Dfkl4PQasBC/29gCjDdQ/xDdMnTYTjcljVticdvUj3
fosFV3+jUSHktDQl42fdfa33wBHw52S8S/Z+kAo6IhSvAroE4XAJESou62hvjZ1W
LbLQ9tPn9wj09GHDlNmo/r+0onJ6fd9bVP2rzcx/bApPCdmA3Hdr1Na4BdXGpM5v
Qqo7Gyxl4orOEDUCMq9/beTZBmKAiRA08pKFuA/2hR6o/mP8m3Uc/2hHm2rZMMke
BgzIZLL9WMBqrgf28zvYyrpNd2eWLLKwJhF4u3R/JcogOougWFCSTwgPHiM+QAas
Fl1PeheeZchzT5WP+sMn+bQ8Bfi0vwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOF4
OAhenPIjSqAfcu6R1G9+o3l0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MUY2Rjg0Q0YyOUUxMUVGQjQwNjA5QUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4kMA0GCSqGSIb3DQEB
CwUAA4IBAQATXmkAu16q99pVLpdZmKAEgjqN2TyVqcH6hWZ/hfEt4Y/B07pi2wxy
b+pXlcSIOUJw2ZLbpoMj2t271JbFyuLM1rb/zOsWm0q58U+jxya23zO3/MEIR2VN
s4jkP5SZyrfQO/oukuMmIR8W1MXmHZz1LBxjaiSCpsgLv6+WtszcZlUHSY4ESJ9U
/qpR7tolShZwzRm13M3TXvyVgQL7Tw+rRAziL45aG1irIUj1MK4CbPaVHfWR+EfN
Yztlln6UyXcwXU3x1jCPV7jUyqvucAfwlHx7PWm1GzpYXye5AzTXGJumibWvF1RD
1Blr/jQV0bfHhktpEmG94tugcoAyejb1
-----END CERTIFICATE-----
Generated at Fri May 9 06:45:50 2025 by rpki-client