Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D8C0C9AF4D911EFB1D51A75762E951A.roa
File: 5D8C0C9AF4D911EFB1D51A75762E951A.roa (raw, json)
Hash identifier: LwoATItVOiStnWJOp6/tsJEprzkgE4lr4kOzbSpPzOc=
Subject key identifier: C8:CD:D3:B5:D8:8B:AA:46:27:04:E4:E0:82:6B:4D:0D:1D:53:1E:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01668F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D8C0C9AF4D911EFB1D51A75762E951A.roa
Signing time: Thu 27 Feb 2025 07:06:29 +0000
ROA not before: Thu 27 Feb 2025 07:06:25 +0000
ROA not after: Wed 26 Mar 2025 07:06:25 +0000
asID: 62240
IP address blocks: 154.195.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91791 (0x1668f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:06:25 2025 GMT
Not After : Mar 26 07:06:25 2025 GMT
Subject: CN=67c00ef4-f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:90:1f:9c:13:78:45:5c:e2:18:5a:2d:ad:
73:04:5b:ae:34:03:f7:57:a5:e2:5a:aa:b8:ed:0d:
4b:70:17:7d:7f:d9:7c:3c:c8:9f:a1:81:37:4e:48:
d8:3e:49:84:e9:2d:fa:29:9f:aa:01:e9:3a:3a:76:
fa:ae:e3:13:5e:7f:9e:57:71:53:f7:b7:9b:b0:85:
37:96:86:f1:16:d5:4e:76:44:01:16:89:a5:61:be:
c8:78:1c:15:3c:0a:f9:ba:b3:5b:8e:b3:55:64:3d:
14:41:76:5f:8c:ec:14:8e:c2:1f:cb:cc:33:3a:76:
84:ae:fe:71:df:7c:c8:dd:f8:f0:1f:31:84:1e:8e:
05:68:1f:e6:d4:1d:b6:ff:60:d0:4f:36:ac:09:06:
5f:13:e1:3e:31:27:6f:53:fb:18:b1:68:0f:fb:c8:
7a:41:11:ec:13:6a:00:c1:27:61:54:a6:a3:68:c0:
b5:c9:b7:49:b4:d4:fd:74:29:38:32:b4:96:db:8b:
fd:ca:bd:99:21:6f:a7:f3:7e:65:38:e8:f7:18:2f:
24:7e:8a:10:16:b7:fa:f2:60:08:02:9e:f5:99:7f:
bc:aa:b4:f7:7f:b4:e4:78:54:bc:3c:aa:7a:47:c9:
6e:e6:36:33:e6:7f:33:6d:e5:1a:5e:dc:34:f4:62:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:D3:B5:D8:8B:AA:46:27:04:E4:E0:82:6B:4D:0D:1D:53:1E:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D8C0C9AF4D911EFB1D51A75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.157.0/24
Signature Algorithm: sha256WithRSAEncryption
50:df:5c:e9:8f:a0:fa:ea:4e:dd:9a:c7:4e:df:57:f6:88:f1:
17:7e:27:b2:6c:16:ac:b7:23:9c:9d:49:54:d8:83:cb:fb:bc:
22:85:23:f8:54:58:cd:58:52:8c:cb:df:71:4b:9d:b6:18:a4:
a8:0c:de:82:b2:31:43:3f:b0:3e:5d:e7:9e:e3:f0:64:e4:43:
12:5d:6c:a2:f3:aa:ab:da:66:8b:d1:ae:a2:4e:3e:7b:ec:d8:
4e:41:11:7a:ad:48:29:33:e8:26:c8:1f:24:0c:1c:04:67:31:
8d:86:64:0a:cf:a2:19:9c:8b:63:30:fa:79:d0:25:5c:69:7a:
17:08:28:34:e8:61:b2:52:75:98:fd:65:83:a2:57:5e:51:e4:
13:7a:34:13:b7:01:f7:87:60:cf:fb:3a:66:d6:b6:0a:57:d6:
39:c5:66:da:f9:66:93:88:04:c9:69:f9:d3:5d:3a:f5:7b:28:
ac:74:28:11:8a:11:f6:ac:fb:aa:f4:14:ef:a8:93:9f:2d:87:
0c:a6:54:23:77:2f:ce:01:cd:a9:ae:98:93:b4:54:6f:da:b7:
b5:2e:66:88:75:9c:13:ae:a9:fd:72:92:7d:aa:c0:e4:0a:30:
20:ad:b2:dc:37:86:e9:d7:66:b8:ff:56:b7:e2:eb:c3:46:90:
eb:36:cc:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWaPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDcwNjI1WhcNMjUwMzI2MDcwNjI1WjAYMRYw
FAYDVQQDEw02N2MwMGVmNC1mMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0m2QH5wTeEVc4hhaLa1zBFuuNAP3V6XiWqq47Q1LcBd9f9l8PMifoYE3
TkjYPkmE6S36KZ+qAek6Onb6ruMTXn+eV3FT97ebsIU3lobxFtVOdkQBFomlYb7I
eBwVPAr5urNbjrNVZD0UQXZfjOwUjsIfy8wzOnaErv5x33zI3fjwHzGEHo4FaB/m
1B22/2DQTzasCQZfE+E+MSdvU/sYsWgP+8h6QRHsE2oAwSdhVKajaMC1ybdJtNT9
dCk4MrSW24v9yr2ZIW+n835lOOj3GC8kfooQFrf68mAIAp71mX+8qrT3f7TkeFS8
PKp6R8lu5jYz5n8zbeUaXtw09GIhgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMjN
07XYi6pGJwTk4IJrTQ0dUx66MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RDhDMEM5QUY0RDkxMUVGQjFENTFBNzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOdMA0GCSqGSIb3DQEB
CwUAA4IBAQBQ31zpj6D66k7dmsdO31f2iPEXfieybBastyOcnUlU2IPL+7wihSP4
VFjNWFKMy99xS522GKSoDN6CsjFDP7A+Xeee4/Bk5EMSXWyi86qr2maL0a6iTj57
7NhOQRF6rUgpM+gmyB8kDBwEZzGNhmQKz6IZnItjMPp50CVcaXoXCCg06GGyUnWY
/WWDoldeUeQTejQTtwH3h2DP+zpm1rYKV9Y5xWba+WaTiATJafnTXTr1eyisdCgR
ihH2rPuq9BTvqJOfLYcMplQjdy/OAc2prpiTtFRv2re1LmaIdZwTrqn9cpJ9qsDk
CjAgrbLcN4bp12a4/1a34uvDRpDrNszf
-----END CERTIFICATE-----
Generated at Fri May 9 11:18:16 2025 by rpki-client