Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4903D2CADA5E11EFA2CE90B3762E951A.roa
File: 4903D2CADA5E11EFA2CE90B3762E951A.roa (raw, json)
Hash identifier: PU23nULQtiASDziD1+7cJCz1LcvFbGWh+4DkGx5KpJA=
Subject key identifier: 56:81:51:DD:43:CE:45:88:6D:33:B1:71:13:60:9F:D2:EE:3D:E8:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01480C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4903D2CADA5E11EFA2CE90B3762E951A.roa
Signing time: Fri 24 Jan 2025 14:19:56 +0000
ROA not before: Fri 24 Jan 2025 14:19:52 +0000
ROA not after: Sat 01 Mar 2025 14:19:52 +0000
asID: 49505
IP address blocks: 154.223.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83980 (0x1480c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:19:52 2025 GMT
Not After : Mar 1 14:19:52 2025 GMT
Subject: CN=6793a18c-0911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:52:98:3c:c9:bd:e9:a9:7e:72:a7:bd:5c:
9a:4a:7a:8d:2b:94:e0:4b:b0:48:96:c1:ac:5e:ac:
58:b8:67:c2:a2:ed:cc:1a:3d:af:ca:52:b8:7a:e4:
68:93:84:40:0b:df:ff:4a:e0:80:30:91:3c:81:c9:
a9:f7:41:4f:a0:e7:13:6c:13:3b:11:8f:8f:6d:56:
ed:59:b9:df:59:54:4e:71:7d:f0:4b:c5:85:c9:51:
85:3a:37:e8:d4:24:9e:0b:f2:13:26:9b:a8:18:5b:
65:fa:03:01:7e:6c:4d:e8:a9:f8:45:36:03:fc:e4:
37:1a:a7:f9:a0:50:ec:ac:f5:ee:81:0f:38:ac:92:
58:f8:46:20:c2:e7:98:4c:0b:10:6d:8f:83:27:a7:
ed:ae:8f:6d:e3:e3:c4:49:2c:d4:3c:0f:72:05:c5:
c0:15:f6:94:fc:bb:6c:39:7c:ce:de:f2:bc:04:d4:
1c:cc:00:08:7e:8a:d8:43:af:ca:6e:e9:d6:73:52:
0c:bf:10:f4:8d:84:5c:40:b7:0f:d5:6a:7a:b2:1c:
92:9a:25:02:7b:8a:bb:4a:22:b8:74:c1:1e:c4:65:
4e:7d:66:e8:45:c4:03:ba:21:67:0f:79:42:a2:c4:
de:81:35:57:6e:e5:ef:ad:19:05:f9:01:25:51:b5:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:51:DD:43:CE:45:88:6D:33:B1:71:13:60:9F:D2:EE:3D:E8:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4903D2CADA5E11EFA2CE90B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.199.0/24
Signature Algorithm: sha256WithRSAEncryption
87:77:7f:9b:ee:05:51:9d:3c:66:f3:fd:36:3d:f7:1b:83:49:
12:67:43:11:6b:76:f7:a2:e6:b5:03:21:6c:a2:89:a6:42:5e:
ff:f6:b1:c1:eb:a6:29:72:03:fd:6e:06:74:30:97:49:71:3c:
71:38:50:b6:0d:db:1b:30:07:18:2c:e4:fd:97:70:c9:c4:71:
c9:6b:e3:a2:26:5c:f7:d4:b3:14:6f:22:a6:df:b2:21:a6:b4:
31:89:2e:7a:fd:c0:1f:2f:64:03:f3:25:98:44:23:db:cb:97:
d2:e2:4b:10:e5:b1:0c:e6:3d:a2:5f:03:ff:04:e7:14:69:a9:
74:f4:18:e7:8f:ec:4d:14:fe:49:22:5b:5f:6e:84:5a:6b:c6:
c0:91:50:3b:ab:7d:58:35:bb:ba:fe:c5:18:81:cd:a2:29:dc:
9a:6e:ab:46:c4:e7:4e:46:65:fe:3e:37:65:6e:28:da:66:3b:
1f:bf:bf:fb:04:c0:23:3b:a0:5b:0c:85:c9:e6:eb:77:28:44:
87:42:c9:6b:fe:4c:4f:e6:84:e6:9c:e0:16:36:de:14:1c:39:
5c:9e:02:bc:0e:71:b0:c4:fc:73:c2:e0:85:34:b4:3a:4f:be:
d7:09:81:75:f6:c1:0e:bb:02:aa:d3:75:97:ad:47:fb:a4:f7:
69:32:d1:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUgMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQxOTUyWhcNMjUwMzAxMTQxOTUyWjAYMRYw
FAYDVQQDEw02NzkzYTE4Yy0wOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusRSmDzJvempfnKnvVyaSnqNK5TgS7BIlsGsXqxYuGfCou3MGj2vylK4
euRok4RAC9//SuCAMJE8gcmp90FPoOcTbBM7EY+PbVbtWbnfWVROcX3wS8WFyVGF
Ojfo1CSeC/ITJpuoGFtl+gMBfmxN6Kn4RTYD/OQ3Gqf5oFDsrPXugQ84rJJY+EYg
wueYTAsQbY+DJ6ftro9t4+PESSzUPA9yBcXAFfaU/LtsOXzO3vK8BNQczAAIforY
Q6/KbunWc1IMvxD0jYRcQLcP1Wp6shySmiUCe4q7SiK4dMEexGVOfWboRcQDuiFn
D3lCosTegTVXbuXvrRkF+QElUbUBswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFaB
Ud1DzkWIbTOxcRNgn9LuPejdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OTAzRDJDQURBNUUxMUVGQTJDRTkwQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/HMA0GCSqGSIb3DQEB
CwUAA4IBAQCHd3+b7gVRnTxm8/02Pfcbg0kSZ0MRa3b3oua1AyFsoommQl7/9rHB
66YpcgP9bgZ0MJdJcTxxOFC2DdsbMAcYLOT9l3DJxHHJa+OiJlz31LMUbyKm37Ih
prQxiS56/cAfL2QD8yWYRCPby5fS4ksQ5bEM5j2iXwP/BOcUaal09Bjnj+xNFP5J
IltfboRaa8bAkVA7q31YNbu6/sUYgc2iKdyabqtGxOdORmX+PjdlbijaZjsfv7/7
BMAjO6BbDIXJ5ut3KESHQslr/kxP5oTmnOAWNt4UHDlcngK8DnGwxPxzwuCFNLQ6
T77XCYF19sEOuwKq03WXrUf7pPdpMtHX
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:54:53 2025 by rpki-client