Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FA5178EAE411EFB847C65B762E951A.roa
File: 48FA5178EAE411EFB847C65B762E951A.roa (raw, json)
Hash identifier: mQfbGBHtwh56/d7liC7EzzgSyN/j0KIxlOei3OXE8qo=
Subject key identifier: 62:B2:9E:CE:71:BC:9E:23:A3:DF:A6:8C:B4:93:68:E1:2F:85:10:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015745
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FA5178EAE411EFB847C65B762E951A.roa
Signing time: Fri 14 Feb 2025 14:59:27 +0000
ROA not before: Fri 14 Feb 2025 14:59:22 +0000
ROA not after: Fri 28 Mar 2025 14:59:22 +0000
asID: 149440
IP address blocks: 154.91.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87877 (0x15745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 14 14:59:22 2025 GMT
Not After : Mar 28 14:59:22 2025 GMT
Subject: CN=67af5a4f-88d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:3a:35:54:82:ec:bf:63:78:5e:52:1d:25:
00:1f:0f:38:94:59:08:07:c7:9a:49:4e:f6:36:17:
05:d0:c6:9c:73:a5:28:87:3b:5a:70:8b:c5:4c:9d:
c9:52:c0:86:a9:a0:20:a3:6e:5a:8f:80:a9:91:3a:
78:88:33:57:ed:b2:4f:b7:3d:aa:d5:f0:65:a0:81:
30:2f:25:51:68:3f:07:6b:85:7e:48:38:41:4a:05:
c4:cc:3b:77:61:a3:62:8d:00:32:f0:e9:f4:58:1f:
c9:e1:89:a9:bf:8b:68:ef:96:0c:9f:eb:99:5c:c9:
f5:51:67:6d:ec:15:68:53:b3:4c:79:16:6d:87:87:
ba:d9:74:08:df:a5:15:30:be:46:57:d0:69:ee:7a:
4c:20:e5:35:13:99:5c:59:5f:7a:9f:bf:df:78:6c:
fa:c2:ea:b8:7a:39:da:96:5e:8b:15:fd:0d:9a:ad:
e4:f7:3d:01:ba:a5:67:f3:f9:e5:99:26:fd:cb:d9:
6d:aa:be:6d:58:44:cb:73:32:8b:38:78:67:58:0b:
40:1b:e9:53:81:8f:55:65:c5:03:5f:a3:4a:ea:07:
f0:92:1e:1d:ff:d6:0a:80:18:ad:1d:31:83:30:5e:
92:54:f9:3c:95:a7:be:63:1d:d7:af:0d:68:c0:bf:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:9E:CE:71:BC:9E:23:A3:DF:A6:8C:B4:93:68:E1:2F:85:10:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48FA5178EAE411EFB847C65B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.0.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ed:a3:a0:52:e5:e9:a4:2d:7b:33:05:3f:af:ed:56:36:37:
67:5e:c7:e7:2a:99:40:36:62:3c:0a:6d:db:18:6e:53:ec:d4:
ff:65:60:41:16:35:b9:db:6c:5c:95:94:0f:f2:bb:d2:2c:48:
f2:e7:c8:73:9f:b8:70:18:12:66:59:be:33:3c:55:e7:a4:d4:
c3:85:27:23:24:c1:69:70:73:2b:89:19:d3:9c:ad:d3:21:95:
bc:a6:c2:08:8f:18:e2:d8:61:07:5e:5f:92:b0:46:3e:a7:b6:
f3:b0:92:96:35:6d:0f:5b:1b:87:0a:ff:7e:21:3c:29:73:6f:
ed:fb:f9:58:64:35:0d:1a:ce:a6:d9:3a:94:1a:6e:83:05:ef:
06:19:1d:3e:91:2c:3c:e8:cc:1a:6a:ae:93:b2:7d:31:82:d3:
9b:a5:2a:79:35:94:ef:58:3e:12:02:e7:78:39:a8:31:6c:b1:
63:13:74:81:fa:e0:5f:a8:2a:fd:e8:79:c8:40:53:50:86:bd:
44:17:ab:3d:b1:d4:69:5e:e2:af:95:8b:ae:d4:05:e5:64:34:
6f:e3:ca:35:c0:d8:76:22:be:c7:52:3a:be:8c:f4:36:f7:b8:
39:a2:97:d9:f3:cc:71:95:ac:f1:aa:ab:21:d6:e2:df:01:41:
52:89:4a:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVdFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjE0MTQ1OTIyWhcNMjUwMzI4MTQ1OTIyWjAYMRYw
FAYDVQQDEw02N2FmNWE0Zi04OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyv06NVSC7L9jeF5SHSUAHw84lFkIB8eaSU72NhcF0Macc6UohztacIvF
TJ3JUsCGqaAgo25aj4CpkTp4iDNX7bJPtz2q1fBloIEwLyVRaD8Ha4V+SDhBSgXE
zDt3YaNijQAy8On0WB/J4Ympv4to75YMn+uZXMn1UWdt7BVoU7NMeRZth4e62XQI
36UVML5GV9Bp7npMIOU1E5lcWV96n7/feGz6wuq4ejnall6LFf0Nmq3k9z0BuqVn
8/nlmSb9y9ltqr5tWETLczKLOHhnWAtAG+lTgY9VZcUDX6NK6gfwkh4d/9YKgBit
HTGDMF6SVPk8lae+Yx3Xrw1owL+bhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGKy
ns5xvJ4jo9+mjLSTaOEvhRC5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OEZBNTE3OEVBRTQxMUVGQjg0N0M2NUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlsAMA0GCSqGSIb3DQEB
CwUAA4IBAQAW7aOgUuXppC17MwU/r+1WNjdnXsfnKplANmI8Cm3bGG5T7NT/ZWBB
FjW522xclZQP8rvSLEjy58hzn7hwGBJmWb4zPFXnpNTDhScjJMFpcHMriRnTnK3T
IZW8psIIjxji2GEHXl+SsEY+p7bzsJKWNW0PWxuHCv9+ITwpc2/t+/lYZDUNGs6m
2TqUGm6DBe8GGR0+kSw86Mwaaq6Tsn0xgtObpSp5NZTvWD4SAud4OagxbLFjE3SB
+uBfqCr96HnIQFNQhr1EF6s9sdRpXuKvlYuu1AXlZDRv48o1wNh2Ir7HUjq+jPQ2
97g5opfZ88xxlazxqqsh1uLfAUFSiUoT
-----END CERTIFICATE-----
Generated at Fri May 9 17:20:41 2025 by rpki-client