Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49024048F62611EFA7114056762E951A.roa
File: 49024048F62611EFA7114056762E951A.roa (raw, json)
Hash identifier: PVS9OYGhGASmZZRFX0rNaEnN7qpB7vfgSHlj4McSx8Q=
Subject key identifier: 0F:25:CA:FB:99:25:51:0E:81:75:BE:0B:19:8E:DA:D3:E6:32:0D:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49024048F62611EFA7114056762E951A.roa
Signing time: Fri 28 Feb 2025 22:49:37 +0000
ROA not before: Fri 28 Feb 2025 22:49:33 +0000
ROA not after: Wed 26 Mar 2025 22:49:33 +0000
asID: 62240
IP address blocks: 154.194.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93343 (0x16c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:49:33 2025 GMT
Not After : Mar 26 22:49:33 2025 GMT
Subject: CN=67c23d80-ddc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:f4:1c:c5:91:d5:1d:6b:fc:77:49:ae:54:
3f:ca:de:b9:48:4d:65:24:2f:d8:fd:c4:c5:3f:33:
6d:7c:48:9e:a1:10:46:b7:67:6b:eb:65:c5:81:a5:
d0:a1:76:1b:61:ea:54:68:7d:47:45:7a:d5:6e:da:
22:a7:ff:d9:60:6e:48:5c:c5:74:2c:30:14:18:73:
d6:63:71:be:0e:54:c8:d3:c1:a8:3d:25:1b:d9:84:
36:47:81:94:ac:e2:38:a1:15:ac:cc:b1:0d:09:f2:
67:c8:d3:b5:32:df:6f:ad:4e:5f:f4:0d:c1:42:4f:
74:83:90:72:12:e8:ef:20:e7:e9:44:ce:57:55:23:
9c:0e:14:a3:21:c1:86:8e:41:19:ec:55:30:d5:3b:
9b:80:51:98:1d:eb:e1:76:f6:2a:e1:b3:e8:80:72:
70:a5:a5:63:8c:ba:2f:f5:9c:20:6c:b2:ce:f5:78:
22:43:8f:ae:b7:6a:b0:a2:2f:8d:72:04:2c:aa:4a:
b1:74:56:37:e2:d0:ee:ed:70:b2:2b:51:6d:aa:f9:
b9:69:1f:12:ef:9a:72:5a:f1:ba:f9:12:b0:32:5a:
36:6c:ef:83:ce:11:8f:38:aa:a0:37:a9:b3:25:e4:
8b:d2:6b:8b:ff:16:96:19:ec:21:70:ee:a9:9d:54:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:CA:FB:99:25:51:0E:81:75:BE:0B:19:8E:DA:D3:E6:32:0D:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49024048F62611EFA7114056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:96:1d:eb:6d:77:c2:ce:83:90:10:e1:8c:e2:50:37:ad:8c:
24:de:c7:2d:7c:c2:13:46:e0:6c:9f:49:b3:bb:ee:fb:da:9a:
7d:23:98:52:94:8f:76:59:89:89:c2:64:55:b6:c0:1f:cc:65:
93:18:f0:13:21:4e:a8:6d:9f:6f:5f:e7:94:e9:9d:8a:82:03:
a2:8d:01:06:8a:b8:fc:04:ca:04:f7:c4:d9:3f:f9:b2:84:3e:
49:d0:d7:d7:3a:01:1b:7f:ee:08:d7:98:c2:d3:55:4a:de:a3:
e1:8c:e5:cf:e5:74:8d:68:36:41:5a:5c:34:31:c9:d3:f6:00:
e4:71:b4:62:54:e1:99:3d:11:3b:13:78:d1:fc:88:89:ef:0f:
8c:e7:ea:ed:4a:7d:d7:a5:95:fc:fc:34:29:13:a2:d1:b2:c8:
63:9e:da:d1:46:b8:b5:1e:bd:88:9a:be:e3:fe:1f:0e:9c:fa:
5a:c1:4b:cc:2d:9f:eb:62:bf:7b:f7:1f:72:bc:e5:85:ba:34:
76:a0:7d:91:dc:a7:26:50:da:f1:c4:e3:99:9a:bb:fd:42:f5:
65:02:cf:5b:83:55:46:f4:b6:be:1c:48:18:35:bd:9e:f6:0f:
db:2e:55:fb:20:b4:71:96:04:6c:ca:4a:88:67:a4:48:8c:65:
db:cb:27:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWyfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjI0OTMzWhcNMjUwMzI2MjI0OTMzWjAYMRYw
FAYDVQQDEw02N2MyM2Q4MC1kZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzXj0HMWR1R1r/HdJrlQ/yt65SE1lJC/Y/cTFPzNtfEieoRBGt2dr62XF
gaXQoXYbYepUaH1HRXrVbtoip//ZYG5IXMV0LDAUGHPWY3G+DlTI08GoPSUb2YQ2
R4GUrOI4oRWszLENCfJnyNO1Mt9vrU5f9A3BQk90g5ByEujvIOfpRM5XVSOcDhSj
IcGGjkEZ7FUw1TubgFGYHevhdvYq4bPogHJwpaVjjLov9ZwgbLLO9XgiQ4+ut2qw
oi+NcgQsqkqxdFY34tDu7XCyK1Ftqvm5aR8S75pyWvG6+RKwMlo2bO+DzhGPOKqg
N6mzJeSL0muL/xaWGewhcO6pnVTwAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA8l
yvuZJVEOgXW+CxmO2tPmMg1IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OTAyNDA0OEY2MjYxMUVGQTcxMTQwNTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJTMA0GCSqGSIb3DQEB
CwUAA4IBAQBelh3rbXfCzoOQEOGM4lA3rYwk3sctfMITRuBsn0mzu+772pp9I5hS
lI92WYmJwmRVtsAfzGWTGPATIU6obZ9vX+eU6Z2KggOijQEGirj8BMoE98TZP/my
hD5J0NfXOgEbf+4I15jC01VK3qPhjOXP5XSNaDZBWlw0McnT9gDkcbRiVOGZPRE7
E3jR/IiJ7w+M5+rtSn3XpZX8/DQpE6LRsshjntrRRri1Hr2Imr7j/h8OnPpawUvM
LZ/rYr979x9yvOWFujR2oH2R3KcmUNrxxOOZmrv9QvVlAs9bg1VG9La+HEgYNb2e
9g/bLlX7ILRxlgRsykqIZ6RIjGXbyyeq
-----END CERTIFICATE-----
Generated at Fri May 9 12:01:54 2025 by rpki-client