Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A825F44F6C011EFBA605A79762E951A.roa
File: 4A825F44F6C011EFBA605A79762E951A.roa (raw, json)
Hash identifier: V+E2/paut2KJ3xYGHhkEgnNLTOfMETNGmuhdLCNeFdU=
Subject key identifier: 42:5B:E0:BA:D1:A8:A4:F9:1D:FB:AA:7F:CC:76:E2:9C:6F:DF:8C:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A825F44F6C011EFBA605A79762E951A.roa
Signing time: Sat 01 Mar 2025 17:12:02 +0000
ROA not before: Sat 01 Mar 2025 17:11:58 +0000
ROA not after: Sat 05 Apr 2025 17:11:58 +0000
asID: 203020
IP address blocks: 154.207.254.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93977 (0x16f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 17:11:58 2025 GMT
Not After : Apr 5 17:11:58 2025 GMT
Subject: CN=67c33fe2-275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:5c:73:5f:1d:fe:7f:93:4f:e0:84:ba:87:
53:4e:32:de:d6:7b:bf:09:10:2e:2b:67:94:cc:6c:
8c:ce:c2:bb:47:2f:2c:d8:0c:7b:88:c6:07:ef:69:
2c:fb:57:c9:b7:4b:6c:fb:a8:82:a0:5f:28:16:f8:
73:0a:c3:d5:fe:0b:27:94:f3:ee:24:fc:2b:36:8f:
8e:8f:a3:6f:06:87:4f:5d:d1:08:b2:4b:d4:55:02:
6e:fc:db:6c:20:2d:92:b2:12:67:80:f3:23:b4:16:
54:c7:93:69:e9:a3:5e:fb:60:cc:e5:c6:51:af:e2:
98:3b:39:d7:5b:2d:85:76:08:90:3a:ea:79:f9:34:
71:3c:a7:20:42:31:2a:8b:dc:01:10:ab:2d:63:be:
20:e0:57:6e:2e:eb:9a:3e:8b:42:2c:4c:05:77:18:
28:00:24:9d:c4:a4:50:76:a1:17:69:4b:2d:10:c4:
68:95:e7:65:dd:b9:2c:27:55:d8:38:e3:5b:90:bf:
57:53:ae:c7:fb:3e:7c:a3:7e:34:04:a7:46:ff:24:
9a:13:b2:ba:0c:f8:70:33:d1:f8:99:7c:f4:88:92:
3a:ee:dd:d3:74:18:5f:cf:97:30:8b:25:ad:18:54:
51:be:5f:3d:5d:14:6e:fc:a1:e3:9f:47:b5:70:e2:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:E0:BA:D1:A8:A4:F9:1D:FB:AA:7F:CC:76:E2:9C:6F:DF:8C:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A825F44F6C011EFBA605A79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.254.0/23
Signature Algorithm: sha256WithRSAEncryption
83:50:72:7e:ce:3c:1d:70:9d:a8:4f:e1:8f:a9:c9:df:4d:77:
fd:43:98:70:e9:7e:3e:a7:3d:2e:a7:3e:72:26:f0:85:7e:ba:
91:d8:85:1c:1a:66:05:e4:ff:9e:35:89:a8:77:25:79:20:63:
b6:f7:18:85:61:f4:aa:f8:cd:30:8e:54:30:c8:bf:a9:05:37:
28:cc:3c:6e:ed:22:c3:12:34:a6:23:8d:7b:e1:cf:4e:8f:5c:
31:07:cb:1d:ab:a3:25:51:e4:68:7b:4d:a8:93:d7:e7:8a:98:
15:c2:db:c4:a3:08:85:c5:df:fc:af:e7:53:ec:0a:09:9b:24:
5c:18:e2:5c:c6:70:4d:b3:f8:ae:0a:d7:24:fb:94:74:fe:53:
7f:28:29:9c:e5:92:86:90:69:56:a9:68:c6:69:b5:4a:6f:12:
72:72:8b:75:6c:dc:99:57:21:aa:e3:f9:16:64:d9:85:6c:a6:
ff:6b:80:51:4b:79:c5:06:ed:7a:3f:25:3e:c3:62:3b:2b:5f:
1d:ed:3e:33:d6:b4:8d:d1:a3:c3:84:00:c3:28:1b:78:d3:6b:
3e:98:61:ea:75:5d:72:5a:71:4a:28:ef:b6:d7:31:c8:ff:9a:
74:7e:ee:89:a5:39:8d:bf:02:3f:cb:ef:b8:8a:00:cc:d6:73:
b0:04:76:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW8ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTcxMTU4WhcNMjUwNDA1MTcxMTU4WjAYMRYw
FAYDVQQDEw02N2MzM2ZlMi0yNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA175cc18d/n+TT+CEuodTTjLe1nu/CRAuK2eUzGyMzsK7Ry8s2Ax7iMYH
72ks+1fJt0ts+6iCoF8oFvhzCsPV/gsnlPPuJPwrNo+Oj6NvBodPXdEIskvUVQJu
/NtsIC2SshJngPMjtBZUx5Np6aNe+2DM5cZRr+KYOznXWy2FdgiQOup5+TRxPKcg
QjEqi9wBEKstY74g4FduLuuaPotCLEwFdxgoACSdxKRQdqEXaUstEMRoledl3bks
J1XYOONbkL9XU67H+z58o340BKdG/ySaE7K6DPhwM9H4mXz0iJI67t3TdBhfz5cw
iyWtGFRRvl89XRRu/KHjn0e1cOJ8iQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEJb
4LrRqKT5Hfuqf8x24pxv34xRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QTgyNUY0NEY2QzAxMUVGQkE2MDVBNzk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms/+MA0GCSqGSIb3DQEB
CwUAA4IBAQCDUHJ+zjwdcJ2oT+GPqcnfTXf9Q5hw6X4+pz0upz5yJvCFfrqR2IUc
GmYF5P+eNYmodyV5IGO29xiFYfSq+M0wjlQwyL+pBTcozDxu7SLDEjSmI4174c9O
j1wxB8sdq6MlUeRoe02ok9fnipgVwtvEowiFxd/8r+dT7AoJmyRcGOJcxnBNs/iu
Ctck+5R0/lN/KCmc5ZKGkGlWqWjGabVKbxJycot1bNyZVyGq4/kWZNmFbKb/a4BR
S3nFBu16PyU+w2I7K18d7T4z1rSN0aPDhADDKBt402s+mGHqdV1yWnFKKO+21zHI
/5p0fu6JpTmNvwI/y++4igDM1nOwBHbf
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:07:27 2025 by rpki-client