Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61AECB588CE011EE8F8F8F6D4AD9E6FC.roa
File: 61AECB588CE011EE8F8F8F6D4AD9E6FC.roa (raw, json)
Hash identifier: ORSbTyiL3FZrf7UdfwRoBmcprcSH51CUOv6vuDKYk2U=
Subject key identifier: CB:D3:23:C6:17:96:95:58:5A:51:F6:6B:E3:2B:9E:EC:B2:51:C4:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5535
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61AECB588CE011EE8F8F8F6D4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:49:43 +0000
ROA not before: Mon 27 Nov 2023 04:49:40 +0000
ROA not after: Tue 26 Dec 2023 04:49:40 +0000
asID: 62240
IP address blocks: 154.195.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21813 (0x5535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:49:40 2023 GMT
Not After : Dec 26 04:49:40 2023 GMT
Subject: CN=65641fe7-49ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:7a:01:29:3a:d6:7e:8d:90:5b:bf:d1:9e:
82:b2:60:12:68:a6:17:c1:14:2a:27:49:91:c0:94:
b2:3f:b4:ba:95:5a:8d:a4:1b:38:53:0f:25:46:c5:
21:1e:e7:7d:aa:05:04:f0:25:be:4e:ec:e3:9f:a5:
7a:ce:aa:67:a1:79:e7:48:c3:90:25:18:1f:e1:33:
8d:2c:0f:a4:a6:46:5a:7b:7a:c9:f7:e4:54:25:91:
c9:a5:e3:6b:d3:42:48:2f:16:99:c2:8a:b7:96:34:
6f:a8:28:b1:40:be:96:f4:fe:2b:1b:16:dd:af:09:
cf:91:0d:f7:bc:6c:86:a2:9d:a7:3f:a8:8e:bf:9c:
9e:1e:52:cf:1e:ea:d6:1e:dc:bc:dc:5a:58:49:21:
32:35:95:16:7f:e5:0d:19:b9:80:e7:80:ea:a4:01:
ee:5b:81:cf:c4:5c:51:a3:bf:76:1d:6d:48:37:14:
97:7f:03:18:bb:6a:0e:0a:6b:cc:d8:7b:85:7a:d9:
a5:4c:80:16:b2:c1:87:da:69:28:6c:ff:f6:cb:f7:
b3:9f:34:30:a0:01:49:74:ea:12:26:7b:ab:8f:44:
6d:54:30:dc:f7:9a:69:b9:b9:2d:49:a5:4c:30:71:
85:f2:40:d1:6f:a2:da:bd:45:7c:14:0d:21:b3:b3:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:23:C6:17:96:95:58:5A:51:F6:6B:E3:2B:9E:EC:B2:51:C4:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61AECB588CE011EE8F8F8F6D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.186.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a0:47:1d:54:76:de:b0:6f:e9:33:04:7b:43:45:c3:55:e0:
cb:22:cf:8d:7f:ab:a3:49:e6:a5:25:2f:dc:3a:d1:71:c1:07:
d3:76:a9:ea:a5:81:96:2d:1b:fb:bb:06:81:1f:91:c3:6c:07:
31:b2:d8:8b:1b:ae:7d:b0:e4:02:1c:85:c2:f8:e2:0a:27:9b:
97:c0:e4:07:ba:f6:9c:8e:3d:90:ce:71:5a:39:b3:70:eb:7e:
76:f0:c9:4c:9e:18:76:71:99:7f:b6:ae:38:fb:a0:da:f6:54:
99:9b:40:2c:27:b9:ed:ac:c6:d1:c1:11:65:d0:46:ae:1c:ee:
a4:49:d2:7f:84:42:d7:02:4c:25:05:f1:f0:af:4f:bc:af:5a:
88:41:46:60:bf:51:f7:0c:23:ae:5b:37:a7:38:8e:d6:dd:fe:
65:95:60:92:06:db:68:73:84:26:93:31:ca:08:e0:63:a7:0d:
6b:9f:8a:01:f4:67:15:8d:cf:b1:a5:6b:11:e9:60:6f:95:f4:
b1:3a:29:47:d1:c7:f0:37:85:62:e3:9f:01:8e:5c:0c:ff:5c:
23:6e:57:ed:46:de:10:ea:ef:81:48:9c:3f:eb:b2:c6:eb:20:
0f:8b:81:c0:f3:08:d7:bb:4d:9e:01:91:5d:4d:09:0b:b1:9d:
35:c1:0a:f6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVTUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNDQ5NDBaFw0yMzEyMjYwNDQ5NDBaMBgxFjAU
BgNVBAMTDTY1NjQxZmU3LTQ5YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3CXoBKTrWfo2QW7/RnoKyYBJophfBFConSZHAlLI/tLqVWo2kGzhTDyVG
xSEe532qBQTwJb5O7OOfpXrOqmeheedIw5AlGB/hM40sD6SmRlp7esn35FQlkcml
42vTQkgvFpnCireWNG+oKLFAvpb0/isbFt2vCc+RDfe8bIainac/qI6/nJ4eUs8e
6tYe3LzcWlhJITI1lRZ/5Q0ZuYDngOqkAe5bgc/EXFGjv3YdbUg3FJd/Axi7ag4K
a8zYe4V62aVMgBaywYfaaShs//bL97OfNDCgAUl06hIme6uPRG1UMNz3mmm5uS1J
pUwwcYXyQNFvotq9RXwUDSGzs+LLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUy9Mj
xheWlVhaUfZr4yue7LJRxP8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzYxQUVDQjU4OENFMDExRUU4RjhGOEY2RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw7owDQYJKoZIhvcNAQEL
BQADggEBAHagRx1Udt6wb+kzBHtDRcNV4Msiz41/q6NJ5qUlL9w60XHBB9N2qeql
gZYtG/u7BoEfkcNsBzGy2Isbrn2w5AIchcL44gonm5fA5Ae69pyOPZDOcVo5s3Dr
fnbwyUyeGHZxmX+2rjj7oNr2VJmbQCwnue2sxtHBEWXQRq4c7qRJ0n+EQtcCTCUF
8fCvT7yvWohBRmC/UfcMI65bN6c4jtbd/mWVYJIG22hzhCaTMcoI4GOnDWufigH0
ZxWNz7GlaxHpYG+V9LE6KUfRx/A3hWLjnwGOXAz/XCNuV+1G3hDq74FInD/rssbr
IA+LgcDzCNe7TZ4BkV1NCQuxnTXBCvY=
-----END CERTIFICATE-----
Generated at Fri May 9 10:38:11 2025 by rpki-client