Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C183A26F68511EFA6BCF26A762E951A.roa
File: 4C183A26F68511EFA6BCF26A762E951A.roa (raw, json)
Hash identifier: JmF5PXj3AP6ty6AgHG/Qb1QwJ+Y12V7/tHnlwXv5MVs=
Subject key identifier: 7F:52:94:B5:FD:89:03:A8:6D:93:12:F6:84:4D:58:DF:CE:3D:14:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C183A26F68511EFA6BCF26A762E951A.roa
Signing time: Sat 01 Mar 2025 10:09:44 +0000
ROA not before: Sat 01 Mar 2025 10:09:40 +0000
ROA not after: Mon 31 Mar 2025 10:09:40 +0000
asID: 202656
IP address blocks: 154.222.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93631 (0x16dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 10:09:40 2025 GMT
Not After : Mar 31 10:09:40 2025 GMT
Subject: CN=67c2dce8-8fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:40:52:7a:d2:73:95:f3:56:16:63:89:9c:
11:00:c6:35:fc:ce:fa:42:79:9a:31:90:26:50:ce:
46:da:71:e7:eb:fd:cf:a8:23:b1:09:e7:a9:34:22:
59:fe:3f:9b:78:8b:73:e5:79:08:d0:53:07:9a:d2:
ea:e1:d4:8c:11:f1:d2:bb:bc:11:c9:08:3a:40:f2:
6f:8d:dd:a4:bf:cf:62:6e:fb:a1:6d:74:7c:85:32:
64:09:3a:4f:7b:61:45:74:37:51:94:33:37:e7:ee:
72:a3:4f:49:b2:bf:00:2b:21:db:24:56:03:57:61:
7c:09:02:07:ab:95:9c:b6:50:25:9e:bd:b8:f1:01:
fe:d3:30:f8:b0:bc:80:f0:03:10:66:8c:0e:2e:ac:
c3:4a:72:68:ea:6f:ab:de:f9:b7:32:ef:04:42:51:
41:ae:86:d6:97:4f:10:12:53:c2:31:48:f9:92:8b:
7e:04:b5:ce:47:c1:eb:ce:96:c8:51:b8:9f:11:e7:
9d:82:9b:5c:b1:38:db:b0:8a:1e:0c:a5:54:ad:1b:
b5:b7:a8:af:38:4b:1b:70:54:0f:76:90:71:9f:67:
ee:01:83:69:fe:4f:7f:6d:df:a1:a7:7c:e2:86:8d:
23:e7:b2:98:52:2b:40:7c:bd:14:6e:9d:89:e2:44:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:94:B5:FD:89:03:A8:6D:93:12:F6:84:4D:58:DF:CE:3D:14:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C183A26F68511EFA6BCF26A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:18:6f:e9:55:91:82:30:30:04:8b:f0:ab:64:8b:8c:f1:e6:
eb:28:cc:00:b1:6b:04:ee:97:8c:b0:a1:b6:6b:cb:76:10:4a:
f8:77:42:d6:fb:11:57:a0:d6:af:57:1b:b9:9a:87:b2:72:62:
1e:1a:24:60:1b:bf:5d:ac:fb:31:19:17:89:1f:54:8a:4c:bb:
e0:dd:75:f5:00:c8:bf:f9:a6:92:4d:bf:2a:b1:31:d5:ea:54:
2f:df:fb:3d:5f:64:74:4d:88:96:5f:24:8b:33:12:4c:64:69:
61:02:d0:43:c4:6b:0c:ad:27:f3:2d:d4:30:ed:ef:c9:af:41:
49:51:00:a2:c8:37:79:10:99:95:a3:c0:4a:fb:22:14:0a:2c:
57:29:9f:ad:e1:b1:0d:86:89:2c:16:ae:a9:a6:0b:98:d1:7a:
4e:88:f2:b3:ce:33:56:63:be:87:e3:fc:69:fe:01:d2:ac:74:
68:7b:ea:8c:6a:d4:4d:a7:2d:1f:5a:f2:de:64:26:20:ed:81:
82:6c:a5:df:6f:62:14:19:15:a0:52:a1:0d:ea:1f:94:ac:c5:
5c:ff:70:33:a1:1c:7d:d1:7d:56:b0:36:c7:0a:19:23:34:ff:
3a:8a:5b:d2:fb:c3:7e:be:a0:7c:5b:9f:d7:76:07:49:ba:b1:
b6:43:2f:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW2/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTAwOTQwWhcNMjUwMzMxMTAwOTQwWjAYMRYw
FAYDVQQDEw02N2MyZGNlOC04ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxjNAUnrSc5XzVhZjiZwRAMY1/M76QnmaMZAmUM5G2nHn6/3PqCOxCeep
NCJZ/j+beItz5XkI0FMHmtLq4dSMEfHSu7wRyQg6QPJvjd2kv89ibvuhbXR8hTJk
CTpPe2FFdDdRlDM35+5yo09Jsr8AKyHbJFYDV2F8CQIHq5WctlAlnr248QH+0zD4
sLyA8AMQZowOLqzDSnJo6m+r3vm3Mu8EQlFBrobWl08QElPCMUj5kot+BLXOR8Hr
zpbIUbifEeedgptcsTjbsIoeDKVUrRu1t6ivOEsbcFQPdpBxn2fuAYNp/k9/bd+h
p3ziho0j57KYUitAfL0Ubp2J4kSYCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH9S
lLX9iQOobZMS9oRNWN/OPRRzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QzE4M0EyNkY2ODUxMUVGQTZCQ0YyNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7BMA0GCSqGSIb3DQEB
CwUAA4IBAQA8GG/pVZGCMDAEi/CrZIuM8ebrKMwAsWsE7peMsKG2a8t2EEr4d0LW
+xFXoNavVxu5moeycmIeGiRgG79drPsxGReJH1SKTLvg3XX1AMi/+aaSTb8qsTHV
6lQv3/s9X2R0TYiWXySLMxJMZGlhAtBDxGsMrSfzLdQw7e/Jr0FJUQCiyDd5EJmV
o8BK+yIUCixXKZ+t4bENhoksFq6ppguY0XpOiPKzzjNWY76H4/xp/gHSrHRoe+qM
atRNpy0fWvLeZCYg7YGCbKXfb2IUGRWgUqEN6h+UrMVc/3AzoRx90X1WsDbHChkj
NP86ilvS+8N+vqB8W5/XdgdJurG2Qy82
-----END CERTIFICATE-----
Generated at Fri May 9 06:58:53 2025 by rpki-client