Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5860F0CE8A8511EEBE8BD8664AD9E6FC.roa
File: 5860F0CE8A8511EEBE8BD8664AD9E6FC.roa (raw, json)
Hash identifier: kIF03GDWimkSvwFMR4qiVYxzTTr/y3BlKIUw1DfnjKE=
Subject key identifier: 51:53:EC:D0:47:FF:5E:48:1B:0A:CA:EB:AC:EC:9B:D7:DC:2A:44:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5860F0CE8A8511EEBE8BD8664AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:53:01 +0000
ROA not before: Fri 24 Nov 2023 04:52:58 +0000
ROA not after: Tue 26 Dec 2023 04:52:58 +0000
asID: 62240
IP address blocks: 154.194.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21242 (0x52fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:52:58 2023 GMT
Not After : Dec 26 04:52:58 2023 GMT
Subject: CN=65602c2d-1e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:d4:f0:2d:35:1a:b6:21:47:6c:59:cb:48:
20:b1:91:2f:b0:98:95:51:7b:d5:c4:db:18:7a:6c:
11:40:99:ce:d8:09:3e:02:92:c0:b1:bc:97:5b:44:
22:64:bb:90:c1:35:67:6a:c4:a0:63:da:c9:62:18:
52:5b:98:9c:98:7a:a1:6d:be:c7:b1:43:4e:d1:ef:
ec:88:c3:d4:a0:c6:f4:90:09:81:53:aa:1d:d7:90:
bc:41:2f:0b:4f:0d:e7:e7:74:c9:42:01:25:05:16:
05:4b:60:84:10:54:1c:03:35:b4:dd:67:22:a3:fe:
3c:55:b6:56:91:b1:b0:12:e2:e3:b4:9b:77:23:8b:
ec:2c:df:06:27:6c:6f:dc:b9:ab:7f:e9:59:d7:2f:
a7:db:b0:4c:f9:30:26:e4:09:0a:d3:4c:a2:4a:4e:
86:41:de:e8:6a:36:cb:bb:18:c2:2c:be:78:ca:c6:
d4:00:63:78:05:d3:cb:75:fe:0e:5e:18:65:f8:44:
d1:d0:b9:52:3c:bd:a0:d4:14:1f:f0:12:49:66:45:
53:72:25:8e:7f:d6:0e:cb:cc:1a:65:b5:13:c2:4f:
82:48:2d:9b:6c:e1:2b:9f:f3:f7:c2:7f:d8:9e:a6:
5d:12:24:fe:8f:36:ad:3c:d4:7f:38:41:64:58:5b:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:EC:D0:47:FF:5E:48:1B:0A:CA:EB:AC:EC:9B:D7:DC:2A:44:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5860F0CE8A8511EEBE8BD8664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.121.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4a:f6:8c:a9:d6:7f:7e:f6:6d:41:90:3f:06:9a:95:b1:2b:
6a:aa:00:ad:f4:49:4e:9b:a6:be:2e:f2:a0:27:7e:3c:17:7a:
89:8c:b6:59:5b:ee:fd:8d:ff:89:02:18:b1:93:52:f3:61:cd:
e2:13:31:3f:13:1a:e5:26:21:d3:33:f4:f4:68:90:27:b1:8a:
8d:e5:8f:21:36:0b:bd:39:6a:25:6a:14:be:87:a1:03:2d:b9:
10:e6:8e:80:28:b3:78:a1:51:32:35:b1:a6:05:b7:99:e9:5e:
69:c4:d2:de:fd:4b:7e:7a:b8:5f:b0:64:de:5f:15:9d:5f:3f:
31:1f:ec:34:3d:48:75:5e:98:3b:b3:be:13:80:ee:62:74:23:
a3:33:e5:27:02:6b:9f:26:aa:b3:cb:be:ca:41:08:97:98:d0:
ac:cc:33:e0:4f:5f:7a:76:fb:15:9f:13:2c:8b:da:ea:e8:9f:
d6:62:d9:6f:74:98:90:3b:d7:27:f4:fd:ca:da:61:a7:f8:c3:
f6:54:90:0d:54:20:39:28:a4:e0:72:dd:85:51:7d:ba:da:69:
03:a2:f1:b1:70:89:95:2d:13:52:b7:b0:32:8a:3e:71:5b:d4:
18:f4:e1:b6:34:4e:36:c6:5d:0d:3d:b8:5b:a3:9a:67:2d:5f:
49:c4:a0:11
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUvowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNDUyNThaFw0yMzEyMjYwNDUyNThaMBgxFjAU
BgNVBAMTDTY1NjAyYzJkLTFlMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnGdTwLTUatiFHbFnLSCCxkS+wmJVRe9XE2xh6bBFAmc7YCT4CksCxvJdb
RCJku5DBNWdqxKBj2sliGFJbmJyYeqFtvsexQ07R7+yIw9SgxvSQCYFTqh3XkLxB
LwtPDefndMlCASUFFgVLYIQQVBwDNbTdZyKj/jxVtlaRsbAS4uO0m3cji+ws3wYn
bG/cuat/6VnXL6fbsEz5MCbkCQrTTKJKToZB3uhqNsu7GMIsvnjKxtQAY3gF08t1
/g5eGGX4RNHQuVI8vaDUFB/wEklmRVNyJY5/1g7LzBpltRPCT4JILZts4Suf8/fC
f9iepl0SJP6PNq081H84QWRYW4ZJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUVPs
0Ef/XkgbCsrrrOyb19wqRIkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU4NjBGMENFOEE4NTExRUVCRThCRDg2NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawnkwDQYJKoZIhvcNAQEL
BQADggEBAANK9oyp1n9+9m1BkD8GmpWxK2qqAK30SU6bpr4u8qAnfjwXeomMtllb
7v2N/4kCGLGTUvNhzeITMT8TGuUmIdMz9PRokCexio3ljyE2C705aiVqFL6HoQMt
uRDmjoAos3ihUTI1saYFt5npXmnE0t79S356uF+wZN5fFZ1fPzEf7DQ9SHVemDuz
vhOA7mJ0I6Mz5ScCa58mqrPLvspBCJeY0KzMM+BPX3p2+xWfEyyL2uron9Zi2W90
mJA71yf0/craYaf4w/ZUkA1UIDkopOBy3YVRfbraaQOi8bFwiZUtE1K3sDKKPnFb
1Bj04bY0TjbGXQ09uFujmmctX0nEoBE=
-----END CERTIFICATE-----
Generated at Fri May 9 11:06:02 2025 by rpki-client