This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/463B55A48CDF11EEB1D8E4694AD9E6FC.roa
File:                     463B55A48CDF11EEB1D8E4694AD9E6FC.roa (raw, json)
Hash identifier:          OGIE9FDVtcxfte1H2gU+wmvMhZ0fWAJkLkyXh1sklSM=
Subject key identifier:   69:79:E1:1B:B9:CF:E9:B1:9F:EC:4A:45:1F:12:C2:29:AE:23:52:DB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       551F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/463B55A48CDF11EEB1D8E4694AD9E6FC.roa
Signing time:             Mon 27 Nov 2023 04:41:48 +0000
ROA not before:           Mon 27 Nov 2023 04:41:45 +0000
ROA not after:            Tue 26 Dec 2023 04:41:45 +0000
asID:                     62240
IP address blocks:        154.195.173.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21791 (0x551f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 04:41:45 2023 GMT
            Not After : Dec 26 04:41:45 2023 GMT
        Subject: CN=65641e0c-ffa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:ba:c7:b3:5a:f2:35:5f:63:d3:8b:20:b5:
                    7c:cb:ba:1b:7c:4f:bc:97:d1:29:57:d6:4f:0a:97:
                    7b:e3:6e:7d:47:28:f4:a9:f8:d1:23:d8:54:7b:ad:
                    80:03:8f:d2:4a:0b:ac:00:3a:df:a4:1e:8a:a1:3a:
                    39:f1:89:6a:54:c6:7b:6e:76:2d:8c:84:bf:55:95:
                    e5:73:26:67:24:2b:23:85:9e:7f:ae:9d:bb:d1:f1:
                    ba:6c:a8:df:ad:9d:84:90:03:db:80:e2:0f:da:30:
                    ef:19:86:4d:5d:03:13:2a:13:35:f3:ed:1b:79:c7:
                    44:5e:14:ea:d7:24:8b:a8:ca:03:de:b6:e5:57:5c:
                    3a:1c:ee:37:a6:ff:01:d3:0e:66:ac:ec:3c:01:36:
                    a2:a7:c0:eb:b8:46:ee:ef:5f:06:c8:77:98:97:f0:
                    d3:ab:12:7c:f2:8d:4b:de:2f:03:9c:f6:15:39:07:
                    b5:d4:e9:e7:82:e2:17:be:c5:e3:7d:64:77:25:e9:
                    08:8c:90:be:5f:81:a1:c2:cb:53:ad:8b:49:6f:11:
                    8e:0f:ca:05:dd:fa:58:0a:65:45:3e:e0:f0:2c:f0:
                    84:d9:96:07:59:57:f5:db:c8:51:b0:4b:21:d8:f4:
                    f6:b2:bf:12:af:e6:10:10:0f:81:31:64:47:8a:1e:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:79:E1:1B:B9:CF:E9:B1:9F:EC:4A:45:1F:12:C2:29:AE:23:52:DB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/463B55A48CDF11EEB1D8E4694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:a6:66:d3:d4:86:62:95:26:15:9f:f2:8a:08:17:bc:0d:
         e0:9d:9f:8a:73:85:32:ff:d3:50:8f:55:df:a0:5c:93:a4:8d:
         f2:20:f8:33:e8:83:54:db:b0:1c:e4:7c:e0:4f:b2:9c:ba:61:
         19:bc:12:f6:fd:24:f4:a0:88:2a:6b:a9:36:fa:83:4e:6f:e9:
         3d:d6:b3:e7:49:21:73:33:1f:d1:fe:89:79:1b:7a:21:a4:d2:
         d7:02:0f:ef:2a:30:a5:84:79:33:c1:02:e3:0a:de:ec:fa:5a:
         6b:c3:9b:04:03:88:f0:e9:cd:35:09:40:1e:c0:93:82:98:08:
         ad:3d:b2:f8:e2:1c:c4:f7:6f:d2:05:a1:c2:bc:07:e7:be:f8:
         15:dc:99:d2:e3:56:73:3c:11:5f:24:39:e2:81:6d:40:6e:99:
         b2:2f:fa:57:e0:0a:48:4a:61:6d:67:b2:57:62:21:91:a5:93:
         75:16:be:bc:cf:04:22:8a:74:37:6b:34:bc:8a:f1:e7:ee:6c:
         ce:6a:4d:8c:45:19:02:df:b9:66:4b:9e:33:39:a5:d5:22:56:
         09:ed:06:b2:bf:e3:a2:50:37:a6:48:5f:9f:ed:c1:d0:25:3e:
         8f:a5:a0:6e:b3:9d:35:a0:21:b0:bf:75:fe:99:57:95:99:12:
         2b:f1:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----