Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4967963882B311EEB667411A4AD9E6FC.roa
File: 4967963882B311EEB667411A4AD9E6FC.roa (raw, json)
Hash identifier: 7IzzVh4x8W881wMiWib5TaeYxgbDnaJ1mfzq1nLwGRU=
Subject key identifier: 66:9D:A8:6D:EA:45:BD:C8:2A:39:E1:ED:04:8B:AD:DE:5A:30:AF:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4F98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4967963882B311EEB667411A4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:01:44 +0000
ROA not before: Tue 14 Nov 2023 06:01:40 +0000
ROA not after: Sat 16 Dec 2023 06:01:40 +0000
asID: 211826
IP address blocks: 154.89.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20376 (0x4f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:01:40 2023 GMT
Not After : Dec 16 06:01:40 2023 GMT
Subject: CN=65530d48-653b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:58:53:8b:fb:47:9c:b8:a3:5c:1b:00:e7:
a6:fa:25:e8:6e:be:c3:b6:74:61:b1:b1:15:b0:a3:
05:89:42:ef:27:ee:6f:46:04:9a:65:25:4a:b0:d7:
45:12:fb:83:e3:ee:04:26:7a:e5:54:8f:57:a9:55:
6b:4d:c6:da:f2:7c:6d:76:f2:9a:69:56:cd:8b:c4:
cb:92:f9:67:a8:34:4f:06:c9:7d:1d:a5:01:1f:87:
86:cb:71:ff:25:96:ff:4b:5c:c0:0e:3f:ef:04:d7:
93:be:49:2b:1a:3b:2a:a5:df:a6:a7:78:6f:60:f0:
6b:0a:6a:79:14:c3:6d:5c:37:4c:6a:95:57:6c:72:
85:e2:4f:a3:1c:b4:5e:82:09:61:6e:0a:fc:14:62:
cb:73:64:d5:93:63:36:5c:fe:2f:8a:d2:d1:50:2b:
c8:73:d9:4c:3e:f0:f8:db:63:de:5c:52:5d:23:be:
1c:2f:f8:de:c8:92:d6:fa:11:b2:a0:ca:7c:df:92:
51:06:b3:f7:5b:00:97:07:0a:d6:f0:10:5b:d5:3c:
7d:8d:14:9d:72:f5:67:a3:20:71:f8:81:b2:bd:58:
29:4b:83:33:81:3c:97:e7:09:3f:72:55:1f:e7:2b:
14:e6:33:a6:60:e3:7f:f1:bd:ed:e0:28:ef:13:28:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:A8:6D:EA:45:BD:C8:2A:39:E1:ED:04:8B:AD:DE:5A:30:AF:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4967963882B311EEB667411A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.2.0/24
Signature Algorithm: sha256WithRSAEncryption
25:25:75:f6:c5:8e:6d:69:0d:4b:b6:d2:20:ca:27:da:ac:f5:
d1:36:69:b7:c1:21:2c:12:3d:e0:4d:28:13:e9:6d:19:52:36:
79:da:47:e4:c9:fc:80:57:55:ad:f9:78:ce:27:70:9b:0c:68:
75:db:3f:ce:b8:ce:f2:86:04:b9:cb:a0:4b:44:d7:e3:81:ce:
17:dd:68:0e:a4:32:3e:26:80:76:b9:d8:25:c5:ec:bb:5d:02:
ae:6e:d5:e3:a9:85:c9:8b:78:0e:7a:9c:53:67:0f:c3:bd:c0:
43:34:89:e5:bc:05:ff:19:00:c9:21:1a:73:d1:db:3e:bd:fe:
7c:8a:6a:58:d7:84:45:60:8f:10:ee:c9:a1:0c:5b:8f:12:d0:
cb:6b:33:33:25:51:8b:f9:21:35:0f:2f:11:0a:56:2b:ba:ba:
00:d6:05:64:e9:c0:bf:6a:f5:ec:a8:f3:ca:83:8f:96:28:45:
1c:18:ad:6d:da:e5:d2:39:b3:8f:5a:1f:ab:31:0b:e9:70:1a:
cb:e1:cb:01:59:d3:9e:e2:83:bd:ca:12:c0:d4:01:a9:e3:c8:
42:89:bb:21:1f:25:fe:e7:f4:2f:61:6f:71:35:7f:dc:70:e5:
cf:0b:e1:dc:c6:81:2d:52:f8:fc:a7:b7:1e:53:40:46:37:a2:
79:c8:5c:d1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICT5gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNjAxNDBaFw0yMzEyMTYwNjAxNDBaMBgxFjAU
BgNVBAMTDTY1NTMwZDQ4LTY1M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUU1hTi/tHnLijXBsA56b6JehuvsO2dGGxsRWwowWJQu8n7m9GBJplJUqw
10US+4Pj7gQmeuVUj1epVWtNxtryfG128pppVs2LxMuS+WeoNE8GyX0dpQEfh4bL
cf8llv9LXMAOP+8E15O+SSsaOyql36aneG9g8GsKankUw21cN0xqlVdscoXiT6Mc
tF6CCWFuCvwUYstzZNWTYzZc/i+K0tFQK8hz2Uw+8PjbY95cUl0jvhwv+N7Iktb6
EbKgynzfklEGs/dbAJcHCtbwEFvVPH2NFJ1y9WejIHH4gbK9WClLgzOBPJfnCT9y
VR/nKxTmM6Zg43/xve3gKO8TKGirAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZp2o
bepFvcgqOeHtBIut3lowr4kwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ5Njc5NjM4ODJCMzExRUVCNjY3NDExQTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaWQIwDQYJKoZIhvcNAQEL
BQADggEBACUldfbFjm1pDUu20iDKJ9qs9dE2abfBISwSPeBNKBPpbRlSNnnaR+TJ
/IBXVa35eM4ncJsMaHXbP864zvKGBLnLoEtE1+OBzhfdaA6kMj4mgHa52CXF7Ltd
Aq5u1eOphcmLeA56nFNnD8O9wEM0ieW8Bf8ZAMkhGnPR2z69/nyKaljXhEVgjxDu
yaEMW48S0MtrMzMlUYv5ITUPLxEKViu6ugDWBWTpwL9q9eyo88qDj5YoRRwYrW3a
5dI5s49aH6sxC+lwGsvhywFZ057ig73KEsDUAanjyEKJuyEfJf7n9C9hb3E1f9xw
5c8L4dzGgS1S+Pyntx5TQEY3onnIXNE=
-----END CERTIFICATE-----
Generated at Fri May 9 11:38:56 2025 by rpki-client