Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59271E4862C111EEA07E6B244AD9E6FC.roa
File: 59271E4862C111EEA07E6B244AD9E6FC.roa (raw, json)
Hash identifier: Odqakm2lZwfSaHVD67MhNHzF0insnM+EZ73lpbewgkg=
Subject key identifier: 85:49:FB:94:5D:75:6E:58:2B:97:49:EE:5D:63:34:DB:B0:BE:66:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4474
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59271E4862C111EEA07E6B244AD9E6FC.roa
Signing time: Wed 04 Oct 2023 14:21:46 +0000
ROA not before: Wed 04 Oct 2023 14:21:42 +0000
ROA not after: Sat 14 Oct 2023 14:21:42 +0000
asID: 9009
IP address blocks: 154.85.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17524 (0x4474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 4 14:21:42 2023 GMT
Not After : Oct 14 14:21:42 2023 GMT
Subject: CN=651d74fa-ccb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:b8:97:97:1a:b6:f1:f0:be:a9:db:78:b0:
f5:0e:2a:3d:64:a6:49:e8:8e:fa:89:34:c4:1a:41:
49:56:78:ad:12:69:4a:20:d6:9c:25:6d:5d:80:c6:
90:d4:f4:fb:87:db:bd:3b:98:6a:ce:ea:a7:ba:b5:
27:a4:70:b5:d3:ab:c1:af:6c:20:a5:6b:85:d4:30:
8b:01:d1:93:cb:b9:2b:db:89:02:d3:7d:34:36:f1:
27:8a:16:e5:16:59:64:f5:d3:1e:4e:f2:0a:f1:94:
72:81:b2:05:a9:62:1d:4b:dd:91:7d:b2:c9:1f:cb:
44:30:58:72:05:3e:98:c2:ad:c1:c4:c9:f3:9f:ce:
b4:aa:e7:e7:60:ba:6a:82:94:c0:92:2a:07:59:ad:
b9:49:08:ae:d2:41:11:0d:d0:2f:38:53:e5:55:01:
6c:fd:3a:e3:7a:75:90:ab:b4:02:5e:67:17:69:52:
22:4f:9f:69:85:33:8a:cd:1a:4f:f0:35:00:95:10:
cf:a1:2a:a6:5e:f6:44:7d:18:60:0b:a1:91:ff:b0:
ac:21:cc:ca:6d:1e:9b:b7:67:22:96:92:6b:fe:c0:
74:94:df:9d:6f:a3:93:7c:17:04:af:97:0c:7e:4f:
40:27:be:c7:01:e9:b1:05:ae:93:42:ff:dc:d4:32:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:FB:94:5D:75:6E:58:2B:97:49:EE:5D:63:34:DB:B0:BE:66:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59271E4862C111EEA07E6B244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.125.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b3:e8:2d:6b:37:f4:b0:5e:12:a7:82:db:37:eb:df:a7:a7:
04:48:2b:e7:a9:ea:11:24:84:8a:38:88:a2:ad:a1:1e:20:4f:
e3:5b:86:c3:b2:72:60:6d:6f:92:ca:b0:4f:b5:86:10:b7:f7:
8f:ff:e9:fe:2a:65:e7:4d:5b:3f:a8:b9:d7:3f:2b:e0:34:6c:
d9:43:00:5d:a2:6c:bd:87:2b:d5:49:6b:b2:bb:38:45:c8:41:
93:a5:54:67:18:76:82:55:5e:61:74:2a:ad:fc:cb:01:5f:2b:
f9:73:67:74:d3:d9:c4:00:4e:cd:00:82:67:9f:ee:3c:fb:ff:
e2:e5:e2:a9:33:6f:a5:fc:9a:cd:68:ce:9e:09:df:dd:b7:7c:
a4:f0:a0:f7:de:e3:ae:ad:77:c4:16:29:82:f0:76:b2:53:ec:
4d:7a:d5:a8:07:e9:57:9d:7d:38:82:a6:f7:7a:fa:43:10:6f:
89:60:c9:8e:33:f7:e0:3e:dc:c2:44:3d:d2:c1:b8:f2:b5:b0:
c9:1f:d3:2d:c4:d0:67:7a:a7:9a:c6:b5:de:24:a0:97:a3:57:
00:a9:4b:f3:0b:d7:f7:b7:cc:33:27:f9:b0:06:b8:ef:7c:73:
79:1c:0f:9e:8d:83:fa:f0:19:33:c9:d1:48:bb:f6:5a:f0:5c:
9d:da:db:35
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICRHQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEwMDQxNDIxNDJaFw0yMzEwMTQxNDIxNDJaMBgxFjAU
BgNVBAMTDTY1MWQ3NGZhLWNjYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDamLiXlxq28fC+qdt4sPUOKj1kpknojvqJNMQaQUlWeK0SaUog1pwlbV2A
xpDU9PuH2707mGrO6qe6tSekcLXTq8GvbCCla4XUMIsB0ZPLuSvbiQLTfTQ28SeK
FuUWWWT10x5O8grxlHKBsgWpYh1L3ZF9sskfy0QwWHIFPpjCrcHEyfOfzrSq5+dg
umqClMCSKgdZrblJCK7SQREN0C84U+VVAWz9OuN6dZCrtAJeZxdpUiJPn2mFM4rN
Gk/wNQCVEM+hKqZe9kR9GGALoZH/sKwhzMptHpu3ZyKWkmv+wHSU351vo5N8FwSv
lwx+T0AnvscB6bEFrpNC/9zUMiIzAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhUn7
lF11blgrl0nuXWM027C+ZoUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU5MjcxRTQ4NjJDMTExRUVBMDdFNkIyNDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVX0wDQYJKoZIhvcNAQEL
BQADggEBACGz6C1rN/SwXhKngts369+npwRIK+ep6hEkhIo4iKKtoR4gT+NbhsOy
cmBtb5LKsE+1hhC394//6f4qZedNWz+oudc/K+A0bNlDAF2ibL2HK9VJa7K7OEXI
QZOlVGcYdoJVXmF0Kq38ywFfK/lzZ3TT2cQATs0Agmef7jz7/+Ll4qkzb6X8ms1o
zp4J3923fKTwoPfe466td8QWKYLwdrJT7E161agH6VedfTiCpvd6+kMQb4lgyY4z
9+A+3MJEPdLBuPK1sMkf0y3E0Gd6p5rGtd4koJejVwCpS/ML1/e3zDMn+bAGuO98
c3kcD56Ng/rwGTPJ0Ui79lrwXJ3a2zU=
-----END CERTIFICATE-----
Generated at Fri May 9 11:05:02 2025 by rpki-client