Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D82E20F4F511EFA32295B3762E951A.roa
File: 57D82E20F4F511EFA32295B3762E951A.roa (raw, json)
Hash identifier: rKutvD9JpXaHgzO2thStfifFkPaKt4AFcnST5LlwUfU=
Subject key identifier: 75:25:51:5B:42:FA:3B:D4:8F:19:F4:93:57:60:7E:90:4A:53:A0:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D82E20F4F511EFA32295B3762E951A.roa
Signing time: Thu 27 Feb 2025 10:26:45 +0000
ROA not before: Thu 27 Feb 2025 10:26:40 +0000
ROA not after: Wed 26 Mar 2025 10:26:40 +0000
asID: 62240
IP address blocks: 154.195.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92087 (0x167b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:26:40 2025 GMT
Not After : Mar 26 10:26:40 2025 GMT
Subject: CN=67c03de5-4fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:f3:94:38:8c:f8:75:2f:d4:8d:d3:25:71:
92:86:da:05:67:84:e4:7e:aa:d7:ae:e6:af:c9:a4:
c1:33:ef:04:0a:2d:d1:2f:14:54:3b:59:b9:13:45:
b2:6a:b3:8a:28:98:fb:ab:9a:df:4a:00:b7:21:2e:
69:8d:91:a3:ee:1e:44:9b:f9:33:28:67:b1:c7:01:
8e:6d:23:b8:b4:a9:1e:23:31:97:51:46:5c:73:cf:
71:ba:ab:0b:39:e8:79:9c:2c:69:77:e7:79:06:6b:
49:f3:51:84:fb:db:86:3f:21:fb:42:01:5d:76:64:
8a:f3:07:5e:eb:b4:a0:e6:e9:cf:2c:e3:d1:99:1b:
31:db:3e:89:14:b8:87:a0:0c:6d:d3:f5:0d:a1:20:
c0:49:f1:0f:43:ef:15:8e:cc:e0:cc:a3:0e:d9:07:
d2:97:f0:44:16:f3:71:a3:36:3f:5c:1b:1f:9b:d7:
ec:73:f3:bd:7b:16:61:be:18:93:69:2d:cd:62:35:
6a:29:71:98:0a:ed:ae:96:53:a9:98:77:95:84:e4:
2c:2d:f4:62:78:74:f6:42:17:e5:12:07:e2:13:7a:
59:f8:17:10:44:b1:17:64:3d:57:09:a3:b5:f7:eb:
7a:66:21:90:78:32:8c:59:a2:52:55:d5:0a:77:74:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:51:5B:42:FA:3B:D4:8F:19:F4:93:57:60:7E:90:4A:53:A0:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D82E20F4F511EFA32295B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:98:2b:6e:d2:09:eb:a7:62:69:a4:b5:d6:28:d4:a1:d7:91:
1a:86:7c:07:8a:42:c9:6a:45:c0:6e:08:68:ee:3d:da:80:99:
e0:b1:17:08:d2:7d:9e:ea:74:6e:4b:46:44:b1:96:00:3c:89:
95:51:42:47:49:42:97:7d:3f:92:fa:67:f3:c6:b6:76:4f:29:
d2:a5:7a:bf:9b:02:59:43:6b:ef:9d:eb:28:cf:3e:98:a0:a5:
ef:6a:71:99:2a:2e:1d:1a:be:69:c2:ca:c4:9e:b1:10:0b:90:
ad:23:f0:ad:fc:eb:d1:e0:c6:41:d6:f3:42:07:6c:9d:f8:02:
3e:dc:61:52:66:61:8f:8c:33:e8:86:66:e6:7b:ba:b8:a2:53:
02:d8:f3:56:6c:52:d7:97:11:c6:5a:f9:84:78:b6:ea:74:3b:
d6:84:3f:10:97:8e:b9:39:2c:9b:b9:27:19:ba:a2:c2:69:5e:
d0:5a:0d:3a:5d:d3:96:70:5e:bd:ff:3b:a8:a8:2b:0b:0c:1a:
53:f5:92:24:31:ba:55:33:78:bd:34:63:c1:12:bb:78:a5:1a:
b3:96:85:81:a0:f7:38:c4:d4:a2:dc:ce:93:01:f2:ed:b2:dc:
b9:f9:6a:2b:04:e2:95:9d:2d:b5:16:16:be:29:41:14:93:b3:
37:7a:75:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWe3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTAyNjQwWhcNMjUwMzI2MTAyNjQwWjAYMRYw
FAYDVQQDEw02N2MwM2RlNS00ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzObzlDiM+HUv1I3TJXGShtoFZ4TkfqrXruavyaTBM+8ECi3RLxRUO1m5
E0WyarOKKJj7q5rfSgC3IS5pjZGj7h5Em/kzKGexxwGObSO4tKkeIzGXUUZcc89x
uqsLOeh5nCxpd+d5BmtJ81GE+9uGPyH7QgFddmSK8wde67Sg5unPLOPRmRsx2z6J
FLiHoAxt0/UNoSDASfEPQ+8VjszgzKMO2QfSl/BEFvNxozY/XBsfm9fsc/O9exZh
vhiTaS3NYjVqKXGYCu2ullOpmHeVhOQsLfRieHT2QhflEgfiE3pZ+BcQRLEXZD1X
CaO19+t6ZiGQeDKMWaJSVdUKd3RgfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHUl
UVtC+jvUjxn0k1dgfpBKU6C2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0Q4MkUyMEY0RjUxMUVGQTMyMjk1QjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsN6MA0GCSqGSIb3DQEB
CwUAA4IBAQC1mCtu0gnrp2JppLXWKNSh15EahnwHikLJakXAbgho7j3agJngsRcI
0n2e6nRuS0ZEsZYAPImVUUJHSUKXfT+S+mfzxrZ2TynSpXq/mwJZQ2vvnesozz6Y
oKXvanGZKi4dGr5pwsrEnrEQC5CtI/Ct/OvR4MZB1vNCB2yd+AI+3GFSZmGPjDPo
hmbme7q4olMC2PNWbFLXlxHGWvmEeLbqdDvWhD8Ql465OSybuScZuqLCaV7QWg06
XdOWcF69/zuoqCsLDBpT9ZIkMbpVM3i9NGPBErt4pRqzloWBoPc4xNSi3M6TAfLt
sty5+WorBOKVnS21Fha+KUEUk7M3enVN
-----END CERTIFICATE-----
Generated at Fri May 9 07:03:28 2025 by rpki-client