Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D7D0710F62C11EFA9FD757F762E951A.roa
File: 4D7D0710F62C11EFA9FD757F762E951A.roa (raw, json)
Hash identifier: 5V28LYLNoj6AXbWYvg8vbrMUWqGHnkuELcIe6UVwSHs=
Subject key identifier: C9:FF:D6:55:4B:94:9F:72:E1:E0:AE:AE:FF:CC:88:82:B8:3F:99:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D7D0710F62C11EFA9FD757F762E951A.roa
Signing time: Fri 28 Feb 2025 23:32:41 +0000
ROA not before: Fri 28 Feb 2025 23:32:37 +0000
ROA not after: Wed 26 Mar 2025 23:32:37 +0000
asID: 62240
IP address blocks: 154.194.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93397 (0x16cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:32:37 2025 GMT
Not After : Mar 26 23:32:37 2025 GMT
Subject: CN=67c24799-1df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:92:72:a4:31:c1:d0:2e:7f:7b:8f:60:72:
a1:1b:8f:cf:c6:9b:ea:1d:7e:35:75:76:39:93:e7:
7e:7e:ce:9f:e6:c6:3e:40:f9:62:93:60:dd:d2:ca:
47:b6:db:6f:62:02:f3:d3:d3:73:87:41:59:c1:59:
cb:ac:12:71:76:60:43:00:14:36:b4:c9:a7:eb:79:
12:75:6f:3b:fd:c3:da:bf:92:51:6d:cd:ac:cb:2a:
41:93:e6:6e:64:d3:cd:f6:ff:57:bb:9b:3f:36:4d:
31:16:7b:8e:8d:b7:be:ac:92:d1:92:e1:71:af:82:
dd:45:6a:af:c7:5b:c7:bb:53:40:40:75:21:99:15:
4b:79:55:96:b1:b0:04:2a:1c:31:c2:a1:33:a8:10:
fb:8f:b7:8f:bc:d1:46:70:f3:d0:4c:99:83:8c:2e:
65:d2:cc:ee:8b:8c:1c:1b:48:36:90:ea:2c:c0:e5:
01:08:69:a1:db:c7:27:ce:2b:c1:3f:2e:17:df:03:
3e:53:74:da:b3:07:df:00:d9:a7:75:04:6e:2d:5d:
bd:ba:1e:f8:04:09:0b:42:fd:10:9e:7c:c3:98:60:
79:20:cf:e0:8b:a2:d7:36:ff:ea:b3:7e:57:17:2c:
c0:86:0f:3f:36:cc:79:95:14:b6:ed:4b:c5:af:1d:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:D6:55:4B:94:9F:72:E1:E0:AE:AE:FF:CC:88:82:B8:3F:99:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D7D0710F62C11EFA9FD757F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:38:6c:61:31:bd:6e:5b:93:c9:62:d4:ee:ee:b9:2c:bb:74:
44:ae:7a:3d:84:36:28:5c:37:ae:bb:92:8f:23:a2:b9:8b:d7:
eb:1b:76:95:23:7c:0c:4d:44:93:4c:54:ae:9c:96:9e:9a:6a:
c8:09:14:c5:4c:d2:b5:d6:75:2a:c8:ba:ff:34:84:0b:b5:26:
92:f5:a7:57:43:09:5a:bd:a7:18:78:92:2e:9c:88:21:6c:7b:
0c:ea:1e:42:50:fc:61:73:3a:59:4a:f7:08:47:3b:73:94:e5:
c6:b4:0c:80:fd:43:a9:30:47:46:27:7f:03:8c:dc:c0:29:0c:
1c:5f:e8:f2:d8:32:a2:cc:93:40:77:13:a3:0c:a1:2c:77:6c:
4d:b8:d8:d1:ec:46:52:47:d6:75:8e:15:f5:23:99:63:b0:9f:
d7:54:56:e4:9c:2a:e9:54:99:b6:2c:fa:35:78:8a:72:ce:60:
98:5f:a5:fe:96:5d:99:4c:74:49:06:f6:29:cb:1d:50:f5:ce:
cd:20:a0:94:8b:e3:6f:11:2e:7c:bd:37:6c:e3:7a:7a:be:25:
1f:28:1b:c4:03:e0:7b:c5:26:7f:22:6c:ca:2f:c9:8a:db:ac:
e2:93:9d:08:87:45:49:ac:3d:93:1a:6b:88:41:e8:6d:eb:3f:
6a:c1:9e:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWzVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjMzMjM3WhcNMjUwMzI2MjMzMjM3WjAYMRYw
FAYDVQQDEw02N2MyNDc5OS0xZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6WeScqQxwdAuf3uPYHKhG4/PxpvqHX41dXY5k+d+fs6f5sY+QPlik2Dd
0spHtttvYgLz09Nzh0FZwVnLrBJxdmBDABQ2tMmn63kSdW87/cPav5JRbc2syypB
k+ZuZNPN9v9Xu5s/Nk0xFnuOjbe+rJLRkuFxr4LdRWqvx1vHu1NAQHUhmRVLeVWW
sbAEKhwxwqEzqBD7j7ePvNFGcPPQTJmDjC5l0szui4wcG0g2kOoswOUBCGmh28cn
zivBPy4X3wM+U3TaswffANmndQRuLV29uh74BAkLQv0QnnzDmGB5IM/gi6LXNv/q
s35XFyzAhg8/Nsx5lRS27UvFrx2EdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMn/
1lVLlJ9y4eCurv/MiIK4P5lkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RDdEMDcxMEY2MkMxMUVGQTlGRDc1N0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJWMA0GCSqGSIb3DQEB
CwUAA4IBAQCNOGxhMb1uW5PJYtTu7rksu3RErno9hDYoXDeuu5KPI6K5i9frG3aV
I3wMTUSTTFSunJaemmrICRTFTNK11nUqyLr/NIQLtSaS9adXQwlavacYeJIunIgh
bHsM6h5CUPxhczpZSvcIRztzlOXGtAyA/UOpMEdGJ38DjNzAKQwcX+jy2DKizJNA
dxOjDKEsd2xNuNjR7EZSR9Z1jhX1I5ljsJ/XVFbknCrpVJm2LPo1eIpyzmCYX6X+
ll2ZTHRJBvYpyx1Q9c7NIKCUi+NvES58vTds43p6viUfKBvEA+B7xSZ/ImzKL8mK
26zik50Ih0VJrD2TGmuIQeht6z9qwZ70
-----END CERTIFICATE-----
Generated at Fri May 9 11:25:08 2025 by rpki-client