Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FF3FB5EF69C11EF8006FC85762E951A.roa
File: 5FF3FB5EF69C11EF8006FC85762E951A.roa (raw, json)
Hash identifier: VBpKnmTFuWP5uOoHD6lXTl5Prtj0jDd7j8Vjc/49u3g=
Subject key identifier: 56:BF:39:5A:64:AF:AF:39:6D:AC:5E:E0:B6:D8:6F:F7:5E:17:E1:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FF3FB5EF69C11EF8006FC85762E951A.roa
Signing time: Sat 01 Mar 2025 12:54:56 +0000
ROA not before: Sat 01 Mar 2025 12:54:52 +0000
ROA not after: Mon 31 Mar 2025 12:54:52 +0000
asID: 202656
IP address blocks: 154.219.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93788 (0x16e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:54:52 2025 GMT
Not After : Mar 31 12:54:52 2025 GMT
Subject: CN=67c303a0-69ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:d3:10:72:fc:47:f1:8c:69:8c:cc:fb:d2:
da:a7:1e:f9:ed:47:50:58:a0:f1:be:88:7c:bb:bf:
4b:53:6d:a3:08:5a:ad:d7:3e:26:30:ff:33:d5:c2:
57:27:cf:70:ee:c1:f3:2c:c8:75:cf:ce:22:32:f8:
46:5e:c9:40:68:b1:2c:9f:35:34:72:84:f3:bc:5a:
b6:37:6b:b0:c7:ca:df:c1:34:d1:6d:a9:b7:74:cd:
f4:e3:4a:47:59:31:cd:86:93:7e:92:32:7b:d3:e6:
38:37:77:11:fb:df:02:70:23:d0:66:10:ec:95:64:
99:58:05:e5:82:85:10:76:d4:ca:f6:15:83:d0:47:
59:6e:7c:1c:3d:ba:88:99:d4:a4:35:d5:11:0a:f6:
e7:78:f0:8e:3a:45:25:e5:ed:05:ec:41:9a:58:4b:
92:91:92:1c:e9:96:a6:6f:fb:d2:c6:02:0c:d7:4f:
10:32:8a:b5:f0:1d:c8:a3:47:45:55:3a:a4:dc:f4:
09:7d:78:a2:83:bd:72:2c:1c:1f:6a:11:61:4f:29:
cd:22:74:b7:c5:5a:4d:3e:39:ee:37:4f:15:4f:43:
5c:df:8b:29:ed:8f:23:0f:9c:22:f6:26:c7:55:db:
c9:c8:1e:18:b9:24:fc:ab:d4:b3:f1:7a:0c:75:01:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:39:5A:64:AF:AF:39:6D:AC:5E:E0:B6:D8:6F:F7:5E:17:E1:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FF3FB5EF69C11EF8006FC85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c3:f5:f4:4f:5c:e0:15:37:9f:34:1d:9f:fd:cf:fd:f3:e9:
54:ce:f1:24:6a:b3:a1:41:88:49:75:c0:26:ea:40:4c:c4:6c:
dd:08:6e:1c:38:1c:d7:74:e7:53:7b:26:30:7f:5a:9c:2b:4b:
ae:6c:62:e8:af:5a:69:81:aa:4c:99:48:c6:52:06:47:5a:f4:
a4:59:4c:56:ec:38:0d:97:89:3d:29:5f:4b:6b:2a:a4:51:54:
a5:8d:8a:0f:e2:08:63:20:97:43:6e:22:03:0f:cc:bd:55:15:
16:c0:ae:0e:ac:01:e4:a8:46:fb:70:fa:c5:64:fb:64:04:af:
7b:1d:b1:92:83:c4:6f:6d:6d:20:89:6d:4c:ae:64:54:dd:fb:
18:b3:8e:b5:c4:1e:26:cb:14:2f:57:b8:79:b7:30:8d:9b:d3:
30:bc:ea:fc:c9:bb:fb:46:95:6b:3a:fc:76:70:eb:e7:55:b5:
80:51:be:d1:79:21:79:24:28:e5:da:68:82:25:cd:35:94:11:
55:35:11:d7:91:20:53:f7:6c:dc:a7:87:3b:9e:08:d8:d7:b4:
6b:04:ab:b9:bd:a4:62:fb:75:37:65:86:72:43:00:bc:91:43:
e2:38:44:7e:66:e0:44:86:57:76:70:8d:7a:9e:5d:6e:a4:50:
78:e9:61:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW5cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTI1NDUyWhcNMjUwMzMxMTI1NDUyWjAYMRYw
FAYDVQQDEw02N2MzMDNhMC02OWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxkHTEHL8R/GMaYzM+9Lapx757UdQWKDxvoh8u79LU22jCFqt1z4mMP8z
1cJXJ89w7sHzLMh1z84iMvhGXslAaLEsnzU0coTzvFq2N2uwx8rfwTTRbam3dM30
40pHWTHNhpN+kjJ70+Y4N3cR+98CcCPQZhDslWSZWAXlgoUQdtTK9hWD0EdZbnwc
PbqImdSkNdURCvbnePCOOkUl5e0F7EGaWEuSkZIc6Zamb/vSxgIM108QMoq18B3I
o0dFVTqk3PQJfXiig71yLBwfahFhTynNInS3xVpNPjnuN08VT0Nc34sp7Y8jD5wi
9ibHVdvJyB4YuST8q9Sz8XoMdQHicQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFa/
OVpkr685baxe4LbYb/deF+HDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RkYzRkI1RUY2OUMxMUVGODAwNkZDODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvMMA0GCSqGSIb3DQEB
CwUAA4IBAQB7w/X0T1zgFTefNB2f/c/98+lUzvEkarOhQYhJdcAm6kBMxGzdCG4c
OBzXdOdTeyYwf1qcK0uubGLor1ppgapMmUjGUgZHWvSkWUxW7DgNl4k9KV9Layqk
UVSljYoP4ghjIJdDbiIDD8y9VRUWwK4OrAHkqEb7cPrFZPtkBK97HbGSg8RvbW0g
iW1MrmRU3fsYs461xB4myxQvV7h5tzCNm9MwvOr8ybv7RpVrOvx2cOvnVbWAUb7R
eSF5JCjl2miCJc01lBFVNRHXkSBT92zcp4c7ngjY17RrBKu5vaRi+3U3ZYZyQwC8
kUPiOER+ZuBEhld2cI16nl1upFB46WHO
-----END CERTIFICATE-----
Generated at Fri May 9 12:13:01 2025 by rpki-client