Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42F18210F52011EFB9F46458762E951A.roa
File: 42F18210F52011EFB9F46458762E951A.roa (raw, json)
Hash identifier: C4tjwR1IJiwI446RHK9+MkX4xUyu0q+IZIswZsMLjFI=
Subject key identifier: 07:5D:40:96:8D:4E:05:1D:AB:37:DA:95:04:FE:3B:2B:81:22:4F:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016910
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42F18210F52011EFB9F46458762E951A.roa
Signing time: Thu 27 Feb 2025 15:33:58 +0000
ROA not before: Thu 27 Feb 2025 15:33:54 +0000
ROA not after: Wed 26 Mar 2025 15:33:54 +0000
asID: 62240
IP address blocks: 154.196.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92432 (0x16910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:33:54 2025 GMT
Not After : Mar 26 15:33:54 2025 GMT
Subject: CN=67c085e6-12a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:84:1f:79:a6:3a:e3:a9:32:4e:b8:c6:dd:
30:09:38:10:f7:85:93:4e:0c:41:70:07:7d:ee:11:
13:b1:70:ae:7b:25:b2:1e:df:e2:59:27:9a:44:d5:
db:88:35:6b:72:cd:b0:57:fa:bb:d3:fd:7f:f8:a4:
b3:13:eb:62:b3:ef:0f:cd:08:68:cb:80:cd:cc:f6:
60:aa:e9:37:64:fa:c6:a8:f2:1e:21:35:55:42:fa:
27:5f:d0:d2:66:19:91:f6:cc:c9:1d:19:2c:7b:58:
2a:20:42:b1:9c:2c:21:c3:a9:eb:bb:df:8f:10:7b:
07:44:41:1c:5e:72:85:7e:1c:fc:bc:54:2f:41:90:
3c:42:4e:76:71:5d:7e:33:65:8e:15:19:83:53:df:
79:24:18:a1:fe:a2:44:7f:33:f7:5f:9e:fc:29:46:
b1:c8:13:1f:3a:8b:09:3a:f1:3a:76:0b:25:3a:55:
83:3b:ec:44:4c:d8:54:53:da:8c:8b:32:30:a6:d2:
df:50:4d:d2:88:df:67:e8:cf:b0:02:93:ee:f8:d7:
7d:ad:17:f2:44:5d:57:ae:2d:25:7e:1b:d5:f4:bc:
c9:a0:97:7f:0c:32:e0:5a:e6:4a:a5:c2:40:57:6d:
ad:6b:38:16:ba:95:38:22:b4:57:02:66:cb:1c:bd:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:40:96:8D:4E:05:1D:AB:37:DA:95:04:FE:3B:2B:81:22:4F:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42F18210F52011EFB9F46458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.73.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:37:dc:64:9e:ec:51:5a:da:70:34:a8:ea:29:fb:6d:a9:88:
f6:8b:2f:19:9c:2c:3a:9c:04:ad:51:a9:ed:e6:1b:21:55:c5:
1f:9d:8f:e0:ac:70:42:ce:2f:91:4a:6e:89:ff:fd:f5:08:31:
01:ec:72:70:f8:3d:07:e9:b5:d6:c8:68:a3:45:f8:83:25:16:
a5:b1:90:d2:04:be:a2:b5:c8:5b:fe:35:db:d9:c9:15:6d:51:
3d:de:f1:c9:4a:fe:38:92:47:35:13:57:7b:09:96:d9:b0:e4:
68:b4:43:b6:2a:9f:b4:66:38:01:52:9c:92:66:7b:33:43:e2:
dc:44:75:ed:8e:23:e6:fb:28:11:da:56:4c:58:01:d9:53:c1:
a9:f9:d5:93:81:0f:3a:c2:ec:fb:ac:e8:14:0b:24:14:67:ef:
65:e1:b1:3e:2f:09:7e:55:56:4c:fa:5b:6b:11:fb:cc:90:87:
36:1c:68:14:1a:4e:4a:b6:eb:eb:58:c5:f3:00:d1:59:da:7d:
3c:18:5c:b0:41:e7:7b:25:6e:b2:6f:af:b7:58:d0:02:1d:81:
67:86:f4:fa:02:97:eb:20:0f:c9:63:33:2e:cb:07:bd:82:b8:
50:0b:b3:99:2c:78:a7:4d:23:4c:77:2d:76:e5:cc:b3:32:94:
8c:33:ef:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWkQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTUzMzU0WhcNMjUwMzI2MTUzMzU0WjAYMRYw
FAYDVQQDEw02N2MwODVlNi0xMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusuEH3mmOuOpMk64xt0wCTgQ94WTTgxBcAd97hETsXCueyWyHt/iWSea
RNXbiDVrcs2wV/q70/1/+KSzE+tis+8PzQhoy4DNzPZgquk3ZPrGqPIeITVVQvon
X9DSZhmR9szJHRkse1gqIEKxnCwhw6nru9+PEHsHREEcXnKFfhz8vFQvQZA8Qk52
cV1+M2WOFRmDU995JBih/qJEfzP3X578KUaxyBMfOosJOvE6dgslOlWDO+xETNhU
U9qMizIwptLfUE3SiN9n6M+wApPu+Nd9rRfyRF1Xri0lfhvV9LzJoJd/DDLgWuZK
pcJAV22tazgWupU4IrRXAmbLHL046QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAdd
QJaNTgUdqzfalQT+OyuBIk+fMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MkYxODIxMEY1MjAxMUVGQjlGNDY0NTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRJMA0GCSqGSIb3DQEB
CwUAA4IBAQDPN9xknuxRWtpwNKjqKfttqYj2iy8ZnCw6nAStUant5hshVcUfnY/g
rHBCzi+RSm6J//31CDEB7HJw+D0H6bXWyGijRfiDJRalsZDSBL6itchb/jXb2ckV
bVE93vHJSv44kkc1E1d7CZbZsORotEO2Kp+0ZjgBUpySZnszQ+LcRHXtjiPm+ygR
2lZMWAHZU8Gp+dWTgQ86wuz7rOgUCyQUZ+9l4bE+Lwl+VVZM+ltrEfvMkIc2HGgU
Gk5KtuvrWMXzANFZ2n08GFywQed7JW6yb6+3WNACHYFnhvT6ApfrIA/JYzMuywe9
grhQC7OZLHinTSNMdy125cyzMpSMM+/K
-----END CERTIFICATE-----
Generated at Fri May 9 06:32:51 2025 by rpki-client