Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59240FC2F6AF11EFBFE06C84762E951A.roa
File: 59240FC2F6AF11EFBFE06C84762E951A.roa (raw, json)
Hash identifier: LRcAbtQFjB24VgDFdaSNDUjVwx9H1HUYGZA1JcS5R34=
Subject key identifier: 7B:90:37:15:FD:80:CA:B5:58:5B:BC:54:F8:8F:E7:31:83:BC:96:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59240FC2F6AF11EFBFE06C84762E951A.roa
Signing time: Sat 01 Mar 2025 15:10:45 +0000
ROA not before: Sat 01 Mar 2025 15:10:41 +0000
ROA not after: Mon 31 Mar 2025 15:10:41 +0000
asID: 202656
IP address blocks: 154.219.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93843 (0x16e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:10:41 2025 GMT
Not After : Mar 31 15:10:41 2025 GMT
Subject: CN=67c32375-8b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:ad:42:14:07:67:ee:d7:27:13:cc:85:6d:
2c:90:b3:a6:eb:d3:52:00:15:15:28:f6:4c:52:54:
55:42:27:93:f7:db:1b:00:4d:34:28:38:38:c4:c6:
ec:24:de:ba:9a:70:20:f9:b0:84:90:6d:b6:c4:c6:
11:1c:73:5d:9a:eb:f8:e5:8d:68:af:c1:58:8f:6f:
b8:7f:96:a1:22:6d:88:18:11:6e:ff:e0:5a:db:f5:
e3:f0:48:87:d4:00:40:a5:b0:76:18:28:d8:65:20:
6f:46:ae:e3:7c:7b:2d:07:99:29:ae:54:03:ba:f2:
5f:bd:87:4f:6f:f8:90:12:cd:ae:d0:c1:68:ba:4b:
31:31:73:79:2a:93:d7:26:0c:bf:c4:e3:00:1a:15:
0e:42:a4:30:d8:da:90:de:3c:38:6c:33:e8:cc:21:
8d:e8:f1:4b:2f:90:2d:db:dd:0a:d3:82:aa:0a:9b:
87:30:d1:c8:40:cc:03:d4:28:ad:45:88:69:44:40:
a4:73:82:77:55:2c:4b:0e:8d:d2:88:5a:21:36:13:
6a:77:52:16:48:70:d0:af:cd:7e:3f:fc:ac:be:e3:
97:3d:9b:0a:bd:d1:be:64:94:96:5f:69:f4:9c:01:
ef:1c:b4:47:a6:06:ad:5c:ae:fb:ab:50:a4:05:4f:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:37:15:FD:80:CA:B5:58:5B:BC:54:F8:8F:E7:31:83:BC:96:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59240FC2F6AF11EFBFE06C84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.195.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e5:53:ae:ef:cd:ea:2b:ba:66:59:2c:2c:b4:5c:ba:59:bd:
01:4c:17:e4:ff:15:62:6f:3f:90:8f:18:19:35:9e:fa:20:1c:
26:f5:84:c6:64:7a:40:8c:6d:02:d8:22:71:2d:65:1a:9e:9b:
95:67:11:2b:11:aa:49:e0:35:26:54:a5:9f:c8:10:2c:0f:76:
69:e3:07:a3:d0:a4:0f:fd:b2:14:83:3e:0c:4f:7b:7f:5b:90:
e2:2e:2b:5e:d7:74:0e:d4:34:f1:50:92:c8:ac:3f:24:f3:15:
66:d6:41:75:33:d6:89:ef:ae:d3:ef:8f:87:3f:97:46:9d:b1:
8a:d0:27:08:43:b5:4e:dc:de:93:24:bd:fa:cb:88:bb:62:e5:
5e:36:23:08:b1:b9:cb:38:49:7b:c9:2c:51:9e:c4:5f:b4:9c:
d9:9f:ca:e5:36:6a:fd:74:40:b6:d5:d7:4d:6a:be:95:79:ff:
f9:9b:64:d7:51:64:58:f7:70:88:22:1c:01:05:e6:7d:bb:76:
3e:ba:9a:b2:45:39:88:f7:2c:79:a8:b5:af:da:ea:a2:72:5e:
71:c6:33:66:66:85:d0:58:25:2e:ff:fc:ae:38:5a:bd:50:16:
b0:39:75:09:95:f8:0c:49:bc:c7:b0:a9:f2:55:a6:e2:42:03:
90:44:68:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW6TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTUxMDQxWhcNMjUwMzMxMTUxMDQxWjAYMRYw
FAYDVQQDEw02N2MzMjM3NS04YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoFGtQhQHZ+7XJxPMhW0skLOm69NSABUVKPZMUlRVQieT99sbAE00KDg4
xMbsJN66mnAg+bCEkG22xMYRHHNdmuv45Y1or8FYj2+4f5ahIm2IGBFu/+Ba2/Xj
8EiH1ABApbB2GCjYZSBvRq7jfHstB5kprlQDuvJfvYdPb/iQEs2u0MFouksxMXN5
KpPXJgy/xOMAGhUOQqQw2NqQ3jw4bDPozCGN6PFLL5At290K04KqCpuHMNHIQMwD
1CitRYhpRECkc4J3VSxLDo3SiFohNhNqd1IWSHDQr81+P/ysvuOXPZsKvdG+ZJSW
X2n0nAHvHLRHpgatXK77q1CkBU8uKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHuQ
NxX9gMq1WFu8VPiP5zGDvJbLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OTI0MEZDMkY2QUYxMUVGQkZFMDZDODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvDMA0GCSqGSIb3DQEB
CwUAA4IBAQCX5VOu783qK7pmWSwstFy6Wb0BTBfk/xVibz+QjxgZNZ76IBwm9YTG
ZHpAjG0C2CJxLWUanpuVZxErEapJ4DUmVKWfyBAsD3Zp4wej0KQP/bIUgz4MT3t/
W5DiLite13QO1DTxUJLIrD8k8xVm1kF1M9aJ767T74+HP5dGnbGK0CcIQ7VO3N6T
JL36y4i7YuVeNiMIsbnLOEl7ySxRnsRftJzZn8rlNmr9dEC21ddNar6Vef/5m2TX
UWRY93CIIhwBBeZ9u3Y+upqyRTmI9yx5qLWv2uqicl5xxjNmZoXQWCUu//yuOFq9
UBawOXUJlfgMSbzHsKnyVabiQgOQRGg5
-----END CERTIFICATE-----
Generated at Fri May 9 06:42:58 2025 by rpki-client