Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B215890F4DD11EFA15EE48E762E951A.roa
File: 4B215890F4DD11EFA15EE48E762E951A.roa (raw, json)
Hash identifier: 8vx2daxeEEdS9yA6oLzqbgX23fSNYyptkcST1a71DDA=
Subject key identifier: 50:72:3D:05:57:A7:07:0A:A0:9E:95:03:00:C8:28:7F:3D:32:0C:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B215890F4DD11EFA15EE48E762E951A.roa
Signing time: Thu 27 Feb 2025 07:34:36 +0000
ROA not before: Thu 27 Feb 2025 07:34:32 +0000
ROA not after: Wed 26 Mar 2025 07:34:32 +0000
asID: 62240
IP address blocks: 154.195.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91823 (0x166af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:34:32 2025 GMT
Not After : Mar 26 07:34:32 2025 GMT
Subject: CN=67c0158c-9dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:6d:d0:11:6a:1e:41:3c:87:da:48:b5:c7:
94:e4:78:e1:43:41:2d:4e:49:89:ea:b6:89:7e:43:
c9:8b:d3:32:7a:7d:83:aa:ab:52:26:64:a2:f8:7e:
a4:af:dd:3d:78:26:8f:91:f6:55:83:26:e7:40:35:
f9:42:42:d4:76:26:fa:22:38:2d:ff:ae:d8:cb:d6:
93:6b:1f:1e:54:44:22:e9:4e:56:76:63:b1:9b:b7:
b6:d0:90:45:20:d0:0b:a3:4e:e9:1e:f1:33:9a:75:
37:b3:f1:b7:79:e6:e7:c1:a3:a0:50:9a:c2:f4:02:
7b:ec:eb:13:0c:91:d5:a2:6f:ec:4b:50:5b:57:c1:
d6:d3:70:e3:e0:2b:16:c5:98:f3:a2:73:d9:a6:a6:
d8:14:35:4b:d6:c2:88:5b:08:47:72:d9:8a:dd:9a:
a2:4e:e5:ff:33:9b:fd:af:ff:2d:fb:3b:8a:2f:08:
48:05:10:8c:de:3f:5e:72:ab:ed:07:4c:04:14:ed:
97:da:86:9e:6b:0f:5f:b7:1b:ed:92:b0:ef:7f:ba:
f1:b5:78:9e:f7:3f:de:72:08:34:e2:4f:df:6a:2c:
44:35:7f:3e:e0:86:41:98:42:65:c6:75:ad:47:4c:
31:f1:bb:ad:04:7a:a6:06:f0:f0:e6:68:12:2f:94:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:72:3D:05:57:A7:07:0A:A0:9E:95:03:00:C8:28:7F:3D:32:0C:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B215890F4DD11EFA15EE48E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b0:d7:ca:d9:a8:e0:47:b2:84:4f:f4:7c:85:9b:21:0b:94:
f0:6b:3b:bb:a3:5b:4d:09:c7:ce:ff:88:b2:cf:7b:28:cc:76:
e0:4b:80:a7:d7:8c:ac:2b:c6:0e:fb:8a:ba:2f:58:ea:bd:28:
2f:bb:2c:d3:09:ee:b6:a5:47:4c:d8:f0:79:0c:2d:da:6c:19:
55:36:fa:65:b3:19:6f:b9:a8:d6:52:45:f0:46:71:06:37:85:
77:0a:0d:55:38:d6:af:04:cd:bf:42:eb:b2:0b:38:a7:c7:8f:
84:8b:7f:fc:cf:08:7d:49:fd:b9:a1:70:ce:62:9d:76:fb:3e:
59:c1:81:6b:9d:45:57:c7:1a:39:33:7f:5f:c5:bd:5f:34:ea:
76:95:e0:3f:4e:28:82:13:00:99:64:22:10:f5:74:f5:ca:46:
45:a6:b6:84:bb:81:d1:e0:aa:c5:14:5d:eb:28:12:ec:03:7d:
12:7a:64:8d:fa:34:ef:c9:bc:34:d3:de:c0:97:a6:d0:96:f6:
e3:16:13:4b:a4:d9:e4:4f:df:51:24:d9:79:23:75:fe:29:82:
84:50:9f:4d:ec:11:17:03:79:7b:3b:31:87:9f:74:ad:1e:94:
1e:42:f9:e5:73:d7:b4:41:46:54:38:d1:6c:e7:22:d2:e8:1e:
8b:f9:cc:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWavMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDczNDMyWhcNMjUwMzI2MDczNDMyWjAYMRYw
FAYDVQQDEw02N2MwMTU4Yy05ZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA16Zt0BFqHkE8h9pItceU5HjhQ0EtTkmJ6raJfkPJi9Myen2DqqtSJmSi
+H6kr909eCaPkfZVgybnQDX5QkLUdib6Ijgt/67Yy9aTax8eVEQi6U5WdmOxm7e2
0JBFINALo07pHvEzmnU3s/G3eebnwaOgUJrC9AJ77OsTDJHVom/sS1BbV8HW03Dj
4CsWxZjzonPZpqbYFDVL1sKIWwhHctmK3ZqiTuX/M5v9r/8t+zuKLwhIBRCM3j9e
cqvtB0wEFO2X2oaeaw9ftxvtkrDvf7rxtXie9z/ecgg04k/faixENX8+4IZBmEJl
xnWtR0wx8butBHqmBvDw5mgSL5Sa5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFBy
PQVXpwcKoJ6VAwDIKH89Mgz+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QjIxNTg5MEY0REQxMUVGQTE1RUU0OEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOlMA0GCSqGSIb3DQEB
CwUAA4IBAQBvsNfK2ajgR7KET/R8hZshC5Twazu7o1tNCcfO/4iyz3sozHbgS4Cn
14ysK8YO+4q6L1jqvSgvuyzTCe62pUdM2PB5DC3abBlVNvplsxlvuajWUkXwRnEG
N4V3Cg1VONavBM2/QuuyCzinx4+Ei3/8zwh9Sf25oXDOYp12+z5ZwYFrnUVXxxo5
M39fxb1fNOp2leA/TiiCEwCZZCIQ9XT1ykZFpraEu4HR4KrFFF3rKBLsA30SemSN
+jTvybw0097Al6bQlvbjFhNLpNnkT99RJNl5I3X+KYKEUJ9N7BEXA3l7OzGHn3St
HpQeQvnlc9e0QUZUONFs5yLS6B6L+cwr
-----END CERTIFICATE-----
Generated at Fri May 9 12:16:11 2025 by rpki-client