Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CCAB382F4DB11EF877E5081762E951A.roa
File: 4CCAB382F4DB11EF877E5081762E951A.roa (raw, json)
Hash identifier: O0iHZDlEvzLBgvI36402qUlYJbEigZgDAHN7KxThJ98=
Subject key identifier: 7D:10:C1:83:38:70:CE:92:AB:BC:DB:D1:C4:69:7E:70:0C:A6:8B:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0166A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CCAB382F4DB11EF877E5081762E951A.roa
Signing time: Thu 27 Feb 2025 07:20:19 +0000
ROA not before: Thu 27 Feb 2025 07:20:16 +0000
ROA not after: Wed 26 Mar 2025 07:20:16 +0000
asID: 62240
IP address blocks: 154.195.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91813 (0x166a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:20:16 2025 GMT
Not After : Mar 26 07:20:16 2025 GMT
Subject: CN=67c01233-6866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:3e:9b:4f:69:d4:f2:0f:83:92:4a:3e:9e:
b6:e1:6d:25:c8:13:b7:75:3c:10:12:d3:e6:83:d1:
10:28:31:c2:8d:ed:b6:45:e7:75:98:0f:b8:05:6e:
e0:be:38:7c:1f:25:d6:ee:23:5e:61:1e:e2:ba:d0:
23:4a:ae:db:c2:20:fa:6b:ff:77:f1:f8:39:06:17:
66:ae:50:f8:7a:4e:7e:dd:75:39:24:18:43:11:be:
bc:06:b9:12:49:dc:6b:00:da:4d:b7:00:5a:18:0e:
b7:65:5a:5d:59:75:2a:d7:9a:01:d8:94:60:a3:65:
60:e0:4d:af:bc:a0:24:d6:68:d7:a9:99:20:6b:6a:
5d:04:5c:ea:ce:cc:e4:b6:1d:25:46:1b:87:4a:0e:
43:7d:dd:86:c0:bd:d2:be:3d:36:60:fa:97:f1:52:
bc:0f:9c:87:80:fc:cf:e8:0a:4d:5f:03:02:fd:93:
d1:64:42:6d:1a:b7:ee:db:6f:b9:31:51:f2:fd:ca:
32:48:8e:54:9a:24:d3:82:31:06:66:b3:6b:a4:aa:
cb:01:10:88:5f:9a:95:7f:cc:b9:82:19:97:2b:d9:
00:0a:06:b3:ed:d2:ba:39:8d:69:ce:0e:8d:5f:f6:
6c:32:40:fc:34:27:c7:4f:7c:e3:cf:b8:ae:68:39:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:C1:83:38:70:CE:92:AB:BC:DB:D1:C4:69:7E:70:0C:A6:8B:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CCAB382F4DB11EF877E5081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.160.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:05:6f:69:38:f0:8f:0d:b1:41:c9:d6:7b:f3:77:bb:b9:81:
2e:98:7b:48:e2:46:f0:35:58:72:43:2c:83:9c:9d:42:89:b2:
19:6f:1e:12:2e:8b:4f:92:28:98:d6:06:d4:f0:2e:ce:fb:b5:
94:4a:aa:41:96:28:21:de:7a:e1:75:46:19:8e:7f:3f:ec:61:
93:b7:f3:f4:e4:99:02:2e:ec:f7:d6:d4:22:84:8c:bf:c8:69:
a4:24:e9:9f:c8:ff:1b:34:90:8d:c6:53:f4:b6:42:51:d1:b3:
65:c5:f8:78:02:26:1f:87:e0:80:79:b5:ed:09:a8:25:07:da:
2e:d6:ae:4d:3b:3e:57:f8:4c:74:70:2f:63:55:72:03:a5:0a:
b5:9e:05:5c:2b:70:c4:a1:6d:91:b8:d9:16:79:5e:12:e6:19:
c5:ef:b6:40:d1:23:ee:bd:86:f8:7c:1b:e9:df:4c:68:10:57:
95:06:3d:39:ac:a8:24:8b:d6:c3:fc:c1:d2:e5:70:3d:b1:2d:
35:3c:24:c2:6f:4e:44:38:fb:8c:61:8b:90:06:d6:8b:ce:06:
31:07:be:e6:3a:3b:3c:2f:5f:b5:a9:ba:4f:7d:d3:70:7e:e5:
82:31:4e:cc:a8:cf:5f:ad:d2:f0:d8:18:a0:46:76:2d:7b:c1:
d1:c3:a8:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWalMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDcyMDE2WhcNMjUwMzI2MDcyMDE2WjAYMRYw
FAYDVQQDEw02N2MwMTIzMy02ODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzUg+m09p1PIPg5JKPp624W0lyBO3dTwQEtPmg9EQKDHCje22Red1mA+4
BW7gvjh8HyXW7iNeYR7iutAjSq7bwiD6a/938fg5BhdmrlD4ek5+3XU5JBhDEb68
BrkSSdxrANpNtwBaGA63ZVpdWXUq15oB2JRgo2Vg4E2vvKAk1mjXqZkga2pdBFzq
zszkth0lRhuHSg5Dfd2GwL3Svj02YPqX8VK8D5yHgPzP6ApNXwMC/ZPRZEJtGrfu
22+5MVHy/coySI5UmiTTgjEGZrNrpKrLARCIX5qVf8y5ghmXK9kACgaz7dK6OY1p
zg6NX/ZsMkD8NCfHT3zjz7iuaDk+LwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH0Q
wYM4cM6Sq7zb0cRpfnAMposlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80Q0NBQjM4MkY0REIxMUVGODc3RTUwODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOgMA0GCSqGSIb3DQEB
CwUAA4IBAQBMBW9pOPCPDbFBydZ783e7uYEumHtI4kbwNVhyQyyDnJ1CibIZbx4S
LotPkiiY1gbU8C7O+7WUSqpBligh3nrhdUYZjn8/7GGTt/P05JkCLuz31tQihIy/
yGmkJOmfyP8bNJCNxlP0tkJR0bNlxfh4AiYfh+CAebXtCaglB9ou1q5NOz5X+Ex0
cC9jVXIDpQq1ngVcK3DEoW2RuNkWeV4S5hnF77ZA0SPuvYb4fBvp30xoEFeVBj05
rKgki9bD/MHS5XA9sS01PCTCb05EOPuMYYuQBtaLzgYxB77mOjs8L1+1qbpPfdNw
fuWCMU7MqM9frdLw2BigRnYte8HRw6in
-----END CERTIFICATE-----
Generated at Fri May 9 06:53:29 2025 by rpki-client