Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E476BDEF82711EF8616A280762E951A.roa
File: 4E476BDEF82711EF8616A280762E951A.roa (raw, json)
Hash identifier: 45N1Hlubi0VnMvqqahSCwlmCycgOp6XPA0804ImrjlQ=
Subject key identifier: 5B:70:42:67:06:50:8E:55:BD:5D:2F:3C:B4:57:2B:31:52:72:0C:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017071
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E476BDEF82711EF8616A280762E951A.roa
Signing time: Mon 03 Mar 2025 12:01:57 +0000
ROA not before: Mon 03 Mar 2025 12:01:52 +0000
ROA not after: Wed 26 Mar 2025 12:01:52 +0000
asID: 62240
IP address blocks: 154.195.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94321 (0x17071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:01:52 2025 GMT
Not After : Mar 26 12:01:52 2025 GMT
Subject: CN=67c59a35-47fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:10:c9:b7:35:e6:19:36:86:b6:1a:e6:c6:
7e:0c:f4:53:ab:bb:e5:18:ef:6a:b1:18:ce:da:f9:
ca:19:48:5b:2e:f8:7d:a1:49:26:78:2c:9f:6e:79:
3d:29:e9:36:e9:e3:11:ca:dd:ae:64:c7:10:41:59:
b2:93:76:52:e5:d3:79:77:8d:d3:9f:85:23:20:64:
45:08:9a:e3:8a:a4:93:56:6c:a2:9d:b4:b6:22:fa:
f0:56:9a:11:b7:98:a4:f2:62:36:cd:d2:e5:aa:ea:
a1:34:7c:02:3b:73:fa:ec:a9:e6:de:bd:27:89:bf:
37:94:b7:94:8a:e7:95:a9:24:6a:6e:62:22:41:d7:
36:d9:d4:81:12:e8:e7:60:48:21:77:36:06:4c:0d:
b9:61:0e:3c:23:b3:0e:12:4e:68:d4:3f:7d:30:64:
b3:7d:e9:9a:59:d7:c7:2c:fa:0c:93:5b:a2:40:f2:
68:38:86:d2:90:3d:a8:2c:3c:da:0a:22:52:d6:a3:
92:fa:04:49:8b:db:43:85:ae:42:f9:af:47:0d:2f:
e0:bc:82:a4:63:c5:f9:9b:2a:5a:43:9e:32:31:cb:
27:57:4e:1f:32:99:0c:93:df:6d:10:00:9a:13:81:
3c:05:48:7a:92:26:7e:b3:c5:b4:d3:4d:a8:58:3f:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:42:67:06:50:8E:55:BD:5D:2F:3C:B4:57:2B:31:52:72:0C:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E476BDEF82711EF8616A280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d3:27:d9:29:4e:de:a8:fe:86:ef:c7:54:34:57:a1:ea:bf:
d3:44:24:9c:b3:b7:7c:ef:d1:82:aa:ce:c5:ed:82:c7:4a:7f:
97:22:0c:2c:19:34:e3:10:4a:23:e8:6b:f5:10:16:d7:46:78:
1d:41:83:04:cd:7b:fb:1a:96:5d:d6:8f:7a:c8:01:a8:2b:ee:
0c:8b:c2:cc:0b:af:92:0b:fa:b7:a8:f4:fc:25:49:54:eb:f9:
e3:f5:99:7b:73:dc:1c:08:fb:0c:81:e5:03:9b:94:60:6d:e0:
f9:64:04:62:1e:f8:f6:46:07:ae:bd:cf:d5:50:8b:a8:5a:7c:
62:41:1f:5f:42:4a:33:e7:7e:e7:5b:6c:99:1b:c2:87:7f:3f:
c6:9f:d1:bd:64:51:da:cf:f6:8b:c1:9a:68:c9:25:3f:a6:9a:
17:71:8e:b6:58:c0:ac:e0:34:3a:0f:40:33:f0:b1:16:74:6e:
d3:cd:fb:a8:63:5c:45:f7:d0:a2:35:27:92:ca:c9:eb:46:ee:
26:8a:e6:c9:bd:09:a6:7e:4d:c1:3e:e4:cd:e9:d1:22:c4:08:
b0:c4:10:bd:b1:75:1c:19:d0:e4:df:37:d8:35:b7:0f:fb:a3:
70:21:8f:fd:f0:c0:13:f3:b1:9a:51:a9:fb:35:6a:27:cd:56:
e7:8c:84:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXBxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTIwMTUyWhcNMjUwMzI2MTIwMTUyWjAYMRYw
FAYDVQQDEw02N2M1OWEzNS00N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyDMQybc15hk2hrYa5sZ+DPRTq7vlGO9qsRjO2vnKGUhbLvh9oUkmeCyf
bnk9Kek26eMRyt2uZMcQQVmyk3ZS5dN5d43Tn4UjIGRFCJrjiqSTVmyinbS2Ivrw
VpoRt5ik8mI2zdLlquqhNHwCO3P67Knm3r0nib83lLeUiueVqSRqbmIiQdc22dSB
EujnYEghdzYGTA25YQ48I7MOEk5o1D99MGSzfemaWdfHLPoMk1uiQPJoOIbSkD2o
LDzaCiJS1qOS+gRJi9tDha5C+a9HDS/gvIKkY8X5mypaQ54yMcsnV04fMpkMk99t
EACaE4E8BUh6kiZ+s8W0002oWD8ISwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFtw
QmcGUI5VvV0vPLRXKzFScgxMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTQ3NkJERUY4MjcxMUVGODYxNkEyODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOJMA0GCSqGSIb3DQEB
CwUAA4IBAQBm0yfZKU7eqP6G78dUNFeh6r/TRCScs7d879GCqs7F7YLHSn+XIgws
GTTjEEoj6Gv1EBbXRngdQYMEzXv7GpZd1o96yAGoK+4Mi8LMC6+SC/q3qPT8JUlU
6/nj9Zl7c9wcCPsMgeUDm5RgbeD5ZARiHvj2Rgeuvc/VUIuoWnxiQR9fQkoz537n
W2yZG8KHfz/Gn9G9ZFHaz/aLwZpoySU/ppoXcY62WMCs4DQ6D0Az8LEWdG7Tzfuo
Y1xF99CiNSeSysnrRu4miubJvQmmfk3BPuTN6dEixAiwxBC9sXUcGdDk3zfYNbcP
+6NwIY/98MAT87GaUan7NWonzVbnjIQG
-----END CERTIFICATE-----
Generated at Fri May 9 11:51:24 2025 by rpki-client