Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DFC6AA8DCE11EE813292644AD9E6FC.roa
File: 62DFC6AA8DCE11EE813292644AD9E6FC.roa (raw, json)
Hash identifier: 6qz3AS36l/7wz8RYrefZ9D9y5Uihl0CHPQfkLowGb7c=
Subject key identifier: AD:AA:A9:E1:50:4C:A6:1D:F8:91:BD:F0:13:84:15:23:32:9E:12:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 55CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DFC6AA8DCE11EE813292644AD9E6FC.roa
Signing time: Tue 28 Nov 2023 09:13:26 +0000
ROA not before: Tue 28 Nov 2023 09:13:22 +0000
ROA not after: Tue 26 Dec 2023 09:13:22 +0000
asID: 62240
IP address blocks: 154.195.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21962 (0x55ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 09:13:22 2023 GMT
Not After : Dec 26 09:13:22 2023 GMT
Subject: CN=6565af36-50f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:15:43:6c:d4:34:10:8c:e0:fa:82:e0:b2:
79:88:68:8b:1b:75:31:7e:20:f3:28:cd:b0:be:09:
a7:1b:1d:ff:09:61:f2:a8:f1:50:70:e2:48:c0:6a:
ab:5c:4a:61:6c:d2:18:8a:92:eb:6e:fc:04:ad:3a:
85:2e:00:76:9e:fe:eb:d5:1e:de:06:57:55:d3:1e:
6c:16:05:3f:00:76:82:b4:19:61:a6:7b:d0:55:64:
0b:9f:8b:e4:2e:12:79:50:92:6c:a7:8c:7e:66:47:
55:a4:26:5b:32:81:96:e8:be:52:a5:93:17:74:bf:
6f:6d:2f:8e:36:6e:4d:d0:92:ff:d8:92:d3:77:fb:
4a:df:53:29:62:ce:df:c5:18:48:8d:54:3b:67:97:
98:78:fa:49:86:99:1d:6e:7c:8c:e6:06:e4:6e:a7:
2c:92:8d:ad:cf:9d:00:2f:06:fa:23:7c:5d:bc:96:
ed:18:03:47:c2:ac:b1:66:d3:b9:13:0f:4c:cc:91:
cf:0d:89:24:f7:1f:6a:05:aa:48:82:3d:90:e4:69:
3e:3b:e7:5b:0e:64:83:ad:7a:b9:d3:ee:0c:ee:13:
b5:da:f1:97:68:4b:e8:cb:54:64:28:35:83:a6:bd:
1e:0a:79:55:f2:3b:51:03:ce:0d:10:e7:01:1e:78:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AA:A9:E1:50:4C:A6:1D:F8:91:BD:F0:13:84:15:23:32:9E:12:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DFC6AA8DCE11EE813292644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.118.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3f:d3:af:0b:45:2d:7d:10:0a:c4:85:6e:24:d6:58:cf:55:
f4:1c:fd:f4:78:db:87:4e:af:12:14:43:01:75:bd:ac:3a:be:
a0:35:35:32:60:6f:93:21:6c:fb:a8:69:6b:9f:42:14:df:dd:
63:b5:b9:e1:9f:c5:ad:4c:dd:c3:ca:28:57:54:44:2b:46:bf:
ce:5e:ee:99:d9:a7:7b:df:e5:d7:f3:58:50:06:85:94:22:e3:
69:d4:e4:72:80:ee:2d:04:bc:e1:fc:a9:ff:eb:16:d5:e6:4e:
b1:af:42:42:12:7f:56:ad:79:36:ab:45:d1:30:14:24:d0:d3:
ec:fa:38:af:34:87:1e:a8:89:dd:7a:8a:7b:ad:16:da:c1:ff:
be:38:a9:05:4f:53:c2:68:c5:ab:59:1e:60:b9:ad:1e:d0:bc:
78:49:7f:35:86:b0:65:c4:13:bd:a3:35:6f:f9:20:97:dc:c6:
4d:99:19:ae:59:95:93:9e:0c:e5:08:1d:43:6f:64:33:46:d5:
04:82:0d:c3:37:9e:52:cb:cd:cc:07:6e:11:36:a5:c3:59:a7:
a2:43:cc:c0:18:57:56:7a:e3:81:a7:a3:26:4b:4e:58:62:bd:
42:51:ae:54:e1:53:e9:7c:e6:bc:78:58:16:e6:d4:69:df:96:
01:6a:57:d8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVcowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjgwOTEzMjJaFw0yMzEyMjYwOTEzMjJaMBgxFjAU
BgNVBAMTDTY1NjVhZjM2LTUwZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEhRVDbNQ0EIzg+oLgsnmIaIsbdTF+IPMozbC+CacbHf8JYfKo8VBw4kjA
aqtcSmFs0hiKkutu/AStOoUuAHae/uvVHt4GV1XTHmwWBT8AdoK0GWGme9BVZAuf
i+QuEnlQkmynjH5mR1WkJlsygZbovlKlkxd0v29tL442bk3Qkv/YktN3+0rfUyli
zt/FGEiNVDtnl5h4+kmGmR1ufIzmBuRupyySja3PnQAvBvojfF28lu0YA0fCrLFm
07kTD0zMkc8NiST3H2oFqkiCPZDkaT4751sOZIOternT7gzuE7Xa8ZdoS+jLVGQo
NYOmvR4KeVXyO1EDzg0Q5wEeeJzFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUraqp
4VBMph34kb3wE4QVIzKeEjkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzYyREZDNkFBOERDRTExRUU4MTMyOTI2NDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw3YwDQYJKoZIhvcNAQEL
BQADggEBAGU/068LRS19EArEhW4k1ljPVfQc/fR424dOrxIUQwF1vaw6vqA1NTJg
b5MhbPuoaWufQhTf3WO1ueGfxa1M3cPKKFdURCtGv85e7pnZp3vf5dfzWFAGhZQi
42nU5HKA7i0EvOH8qf/rFtXmTrGvQkISf1ateTarRdEwFCTQ0+z6OK80hx6oid16
inutFtrB/744qQVPU8JoxatZHmC5rR7QvHhJfzWGsGXEE72jNW/5IJfcxk2ZGa5Z
lZOeDOUIHUNvZDNG1QSCDcM3nlLLzcwHbhE2pcNZp6JDzMAYV1Z644GnoyZLTlhi
vUJRrlThU+l85rx4WBbm1GnflgFqV9g=
-----END CERTIFICATE-----
Generated at Fri May 9 11:08:00 2025 by rpki-client