Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64303940551B11EEA59B15214AD9E6FC.roa
File: 64303940551B11EEA59B15214AD9E6FC.roa (raw, json)
Hash identifier: gp/e+F/Tr6eD2wSWagL9e1XxipDk7jZHTolTNiHHwFo=
Subject key identifier: A2:AA:1C:15:06:BF:CA:BC:85:45:7F:07:D8:D7:34:A8:83:F9:C1:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3EA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64303940551B11EEA59B15214AD9E6FC.roa
Signing time: Sun 17 Sep 2023 05:31:03 +0000
ROA not before: Sun 17 Sep 2023 05:30:58 +0000
ROA not after: Wed 18 Oct 2023 05:30:58 +0000
asID: 174
IP address blocks: 154.82.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16037 (0x3ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 05:30:58 2023 GMT
Not After : Oct 18 05:30:58 2023 GMT
Subject: CN=65068f17-489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:ba:ce:9d:18:16:57:7a:8b:44:be:53:5f:
7d:04:cd:39:88:f0:3a:5f:ca:3a:1e:44:17:19:1a:
e8:d4:5d:77:59:32:6c:d2:10:9c:c4:15:95:28:95:
b4:04:6c:5d:ac:62:d5:1f:af:6d:e6:96:9d:46:78:
c5:75:c8:69:66:bd:10:50:d3:80:b0:73:77:88:9c:
37:2c:a4:8c:5c:48:73:d3:e9:d5:e2:00:b8:b7:c1:
ff:0c:19:b4:04:93:7c:24:4b:d1:bf:06:c3:75:fa:
d7:3f:c4:8c:94:c4:d0:0e:48:e1:c2:68:b2:c7:36:
ed:2a:f8:4a:19:1e:70:02:f4:4a:7c:37:77:9b:e9:
27:eb:d6:0b:57:93:5a:5b:f0:3d:c7:c4:4b:02:46:
3a:29:3c:de:9f:9d:b4:0d:ea:e6:ec:e8:5c:9a:1d:
90:57:2d:81:e4:fa:59:9d:ec:51:5b:42:ce:60:ab:
04:1f:4b:f1:17:f1:29:ad:0a:64:3d:70:52:e4:ca:
d9:6f:ac:0e:b2:55:ad:0b:3c:af:f7:ee:8c:60:4a:
15:de:08:00:b3:1e:88:ec:90:bd:7d:7f:f3:1b:66:
43:ae:60:3b:cc:2f:11:34:0a:d8:0c:53:9a:d5:4f:
db:04:99:e1:51:cb:29:ed:60:a8:83:a0:90:87:e1:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:1C:15:06:BF:CA:BC:85:45:7F:07:D8:D7:34:A8:83:F9:C1:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64303940551B11EEA59B15214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.16.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:33:a2:d1:79:df:c2:3f:46:45:4a:7f:12:e3:22:08:06:d3:
f6:3d:b1:41:1f:b1:67:ed:fe:0f:83:2d:b0:27:c5:01:9f:9f:
5f:35:a4:70:ef:93:de:57:87:db:ed:43:10:16:0b:7f:18:57:
22:34:6c:96:3c:98:79:98:6d:7c:59:b2:6d:79:15:e5:c8:48:
29:e8:ac:2b:50:16:69:1a:48:f5:81:60:f1:6a:18:a5:11:ea:
8e:fd:a9:ab:08:5e:e6:2f:0d:73:2b:2d:33:9c:8e:f0:e0:bb:
8c:cc:36:97:5b:57:c3:c6:42:05:13:d9:d5:b6:2c:76:68:59:
17:51:c1:88:b4:f4:f6:8a:a8:20:df:69:27:2b:ff:32:4f:51:
b6:6d:0f:96:52:d3:e6:f9:c4:a1:67:94:4a:7b:8d:6a:02:fb:
65:c2:6d:6b:fe:fb:23:a3:6f:87:98:b4:47:b8:5c:2e:8d:ca:
26:27:de:d7:4f:c0:16:47:7b:b2:90:d4:d9:79:0c:7b:54:16:
d4:64:c6:a8:fe:4b:45:46:e7:fb:e1:3e:78:1b:7c:53:b0:a1:
0a:33:73:96:1d:13:5f:0e:ad:4d:c2:e9:6e:a9:ce:38:46:32:
5e:27:f6:8d:64:1f:18:ef:e8:cd:ed:20:d7:ac:07:42:12:0f:
d8:39:be:fd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPqUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTcwNTMwNThaFw0yMzEwMTgwNTMwNThaMBgxFjAU
BgNVBAMTDTY1MDY4ZjE3LTQ4OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/37rOnRgWV3qLRL5TX30EzTmI8DpfyjoeRBcZGujUXXdZMmzSEJzEFZUo
lbQEbF2sYtUfr23mlp1GeMV1yGlmvRBQ04Cwc3eInDcspIxcSHPT6dXiALi3wf8M
GbQEk3wkS9G/BsN1+tc/xIyUxNAOSOHCaLLHNu0q+EoZHnAC9Ep8N3eb6Sfr1gtX
k1pb8D3HxEsCRjopPN6fnbQN6ubs6FyaHZBXLYHk+lmd7FFbQs5gqwQfS/EX8Smt
CmQ9cFLkytlvrA6yVa0LPK/37oxgShXeCACzHojskL19f/MbZkOuYDvMLxE0CtgM
U5rVT9sEmeFRyyntYKiDoJCH4SctAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoqoc
FQa/yryFRX8H2Nc0qIP5wcAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzY0MzAzOTQwNTUxQjExRUVBNTlCMTUyMTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASaUhAwDQYJKoZIhvcNAQEL
BQADggEBAI4zotF538I/RkVKfxLjIggG0/Y9sUEfsWft/g+DLbAnxQGfn181pHDv
k95Xh9vtQxAWC38YVyI0bJY8mHmYbXxZsm15FeXISCnorCtQFmkaSPWBYPFqGKUR
6o79qasIXuYvDXMrLTOcjvDgu4zMNpdbV8PGQgUT2dW2LHZoWRdRwYi09PaKqCDf
aScr/zJPUbZtD5ZS0+b5xKFnlEp7jWoC+2XCbWv++yOjb4eYtEe4XC6NyiYn3tdP
wBZHe7KQ1Nl5DHtUFtRkxqj+S0VG5/vhPngbfFOwoQozc5YdE18OrU3C6W6pzjhG
Ml4n9o1kHxjv6M3tINesB0ISD9g5vv0=
-----END CERTIFICATE-----
Generated at Fri May 9 11:28:21 2025 by rpki-client