Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5258B5D08CDE11EE8503E7664AD9E6FC.roa
File: 5258B5D08CDE11EE8503E7664AD9E6FC.roa (raw, json)
Hash identifier: GmdvLn4iblG+fmBRsy4PwegdzfXq7hQNYmfQUSAVxa8=
Subject key identifier: 29:D4:52:60:61:3E:96:44:58:21:94:56:EC:87:90:D4:21:D3:E9:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 550A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5258B5D08CDE11EE8503E7664AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:34:59 +0000
ROA not before: Mon 27 Nov 2023 04:34:56 +0000
ROA not after: Tue 26 Dec 2023 04:34:56 +0000
asID: 62240
IP address blocks: 154.195.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21770 (0x550a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:34:56 2023 GMT
Not After : Dec 26 04:34:56 2023 GMT
Subject: CN=65641c73-60df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:a2:cb:86:7f:8d:29:56:38:13:67:91:f4:
ab:80:6b:32:c6:79:26:c0:a0:f3:a5:4f:99:3a:38:
42:05:e4:45:11:b1:db:c3:3f:18:a6:6f:f4:3b:bd:
40:f8:e6:e6:d9:2b:bd:a7:c7:78:f3:24:c2:8a:16:
8d:0b:1f:a9:3d:b4:ac:bb:a2:a5:fa:24:76:13:a9:
bd:32:af:7e:bb:b3:b5:64:c7:c5:bf:b2:d5:df:7e:
24:bd:2e:a9:76:69:d1:6b:d4:7a:a6:33:48:1b:45:
16:02:de:bd:d8:dc:dd:0a:15:d4:a1:9e:2f:84:81:
0e:af:a7:fb:44:8a:77:ba:8a:60:82:41:12:24:ac:
03:82:e3:ee:aa:69:9a:75:dd:8a:94:ea:06:42:1b:
16:37:9b:27:1a:32:f6:f1:a5:43:a2:24:6e:25:05:
11:0d:81:57:32:75:6e:65:31:99:40:cb:52:d7:e4:
60:01:69:65:04:b5:2a:62:b4:fc:31:2b:c1:6a:ae:
43:c3:be:db:ba:8d:5c:ce:31:a5:75:2f:c0:a3:1c:
9a:5c:5f:2b:49:13:72:bc:20:1a:f1:eb:d9:04:03:
3c:c0:cd:e7:b4:06:c9:2c:b9:c0:e5:9e:8c:a8:7a:
2a:3c:bc:7a:ee:75:63:8e:af:f4:d2:fa:65:53:6c:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:52:60:61:3E:96:44:58:21:94:56:EC:87:90:D4:21:D3:E9:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5258B5D08CDE11EE8503E7664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:dc:84:cf:6b:71:a0:4f:93:0d:c1:32:c6:ee:5c:37:09:d1:
07:23:5a:0e:7e:c0:8c:cf:49:94:ff:0d:cc:c8:4c:d6:58:1a:
d6:91:d5:05:17:7b:5e:26:72:e2:28:5a:39:ba:18:7e:5a:46:
1f:d0:a3:52:25:c1:eb:dd:36:f7:81:f9:89:7f:46:81:16:a6:
b9:b0:33:8f:a0:ab:c0:42:54:60:da:ad:57:6d:2a:51:7c:5f:
e4:e6:18:82:c8:35:bf:ad:f5:cd:17:3b:87:9c:6d:45:28:a2:
f7:d4:62:0d:e7:72:87:b2:41:87:f8:f7:41:83:96:ce:4c:8f:
53:f5:e3:63:1a:4e:bd:2c:8f:16:a0:7d:1b:43:d9:0b:b1:6e:
85:a0:15:2a:88:15:62:73:84:2b:ec:94:cf:b6:f9:87:38:dc:
d0:d8:2e:3e:9f:3f:c6:40:8f:23:7a:25:73:49:d5:6f:7c:3f:
d6:4b:12:2a:51:e1:36:7e:3b:bd:d0:f8:fe:48:ce:61:97:00:
ad:77:c0:50:bb:80:e2:75:b8:2d:c0:70:a5:6b:b3:a0:94:3d:
ca:0c:ad:7c:15:f8:bc:1a:98:dd:19:30:36:b5:f2:3c:49:6f:
df:c7:b7:a6:f5:49:2a:2b:72:3f:88:45:01:37:38:ca:6c:86:
47:5f:33:f8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVQowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNDM0NTZaFw0yMzEyMjYwNDM0NTZaMBgxFjAU
BgNVBAMTDTY1NjQxYzczLTYwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDggaLLhn+NKVY4E2eR9KuAazLGeSbAoPOlT5k6OEIF5EURsdvDPximb/Q7
vUD45ubZK72nx3jzJMKKFo0LH6k9tKy7oqX6JHYTqb0yr367s7Vkx8W/stXffiS9
Lql2adFr1HqmM0gbRRYC3r3Y3N0KFdShni+EgQ6vp/tEine6imCCQRIkrAOC4+6q
aZp13YqU6gZCGxY3mycaMvbxpUOiJG4lBRENgVcydW5lMZlAy1LX5GABaWUEtSpi
tPwxK8FqrkPDvtu6jVzOMaV1L8CjHJpcXytJE3K8IBrx69kEAzzAzee0BsksucDl
noyoeio8vHrudWOOr/TS+mVTbMltAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKdRS
YGE+lkRYIZRW7IeQ1CHT6WgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzUyNThCNUQwOENERTExRUU4NTAzRTc2NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw78wDQYJKoZIhvcNAQEL
BQADggEBANHchM9rcaBPkw3BMsbuXDcJ0QcjWg5+wIzPSZT/DczITNZYGtaR1QUX
e14mcuIoWjm6GH5aRh/Qo1IlwevdNveB+Yl/RoEWprmwM4+gq8BCVGDarVdtKlF8
X+TmGILINb+t9c0XO4ecbUUoovfUYg3ncoeyQYf490GDls5Mj1P142MaTr0sjxag
fRtD2QuxboWgFSqIFWJzhCvslM+2+Yc43NDYLj6fP8ZAjyN6JXNJ1W98P9ZLEipR
4TZ+O73Q+P5IzmGXAK13wFC7gOJ1uC3AcKVrs6CUPcoMrXwV+LwamN0ZMDa18jxJ
b9/Ht6b1SSorcj+IRQE3OMpshkdfM/g=
-----END CERTIFICATE-----
Generated at Fri May 9 10:44:09 2025 by rpki-client