Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64F63E32D8D311EF8F287E4C762E951A.roa
File: 64F63E32D8D311EF8F287E4C762E951A.roa (raw, json)
Hash identifier: 3rrjkxlI+Bcivb2yD1HHok+cQFrPJrBxJtJ0IqGy8VU=
Subject key identifier: 8E:C1:51:0A:5D:D6:3E:D0:03:16:0F:0E:80:ED:8D:3B:23:CC:9B:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64F63E32D8D311EF8F287E4C762E951A.roa
Signing time: Wed 22 Jan 2025 15:13:11 +0000
ROA not before: Wed 22 Jan 2025 15:13:08 +0000
ROA not after: Tue 01 Apr 2025 15:13:08 +0000
asID: 138915
IP address blocks: 154.93.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81858 (0x13fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:13:08 2025 GMT
Not After : Apr 1 15:13:08 2025 GMT
Subject: CN=67910b07-5884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:d4:c0:6a:1d:51:46:be:f7:ea:f4:c1:09:
3c:fa:76:d2:0d:86:32:11:f8:df:3d:e7:1c:1f:25:
d2:cb:84:59:04:0e:f4:e9:7a:d7:af:34:17:ac:96:
e6:6f:9b:3d:a2:a7:47:92:aa:d5:54:f1:ef:bc:f3:
bf:96:f9:0e:5d:d6:5c:a2:eb:21:1b:d1:fd:39:83:
86:30:7a:46:b0:22:08:34:fb:81:97:0a:bd:10:45:
b7:e7:b2:09:a3:3f:5f:69:37:ee:25:1b:b3:ff:4d:
57:aa:e8:a4:2d:0d:fa:7e:f2:f2:d3:41:b7:81:43:
cc:b7:21:c6:4e:83:a0:d4:a7:41:6a:42:69:f1:e3:
8c:8f:9b:61:95:49:f1:36:eb:a9:db:67:b5:7c:0d:
12:04:47:64:5f:70:e0:ab:89:3b:0c:86:e3:2a:db:
f9:43:7d:6b:b1:05:70:a1:7e:c2:64:f6:56:45:e4:
ce:c1:08:d2:e6:94:44:03:48:b1:7a:e3:3c:90:8b:
48:50:f4:0b:50:13:ff:10:f7:e4:a3:97:2f:0f:88:
89:a6:01:a7:d4:63:e6:62:a1:13:bd:49:30:38:15:
8d:22:d5:f1:79:04:a1:94:bc:29:f5:44:6f:4e:5e:
9a:c5:8b:43:3e:a5:04:b6:bf:c5:cc:5b:74:98:f0:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C1:51:0A:5D:D6:3E:D0:03:16:0F:0E:80:ED:8D:3B:23:CC:9B:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64F63E32D8D311EF8F287E4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:94:31:f1:a7:3e:41:69:90:12:26:04:b7:18:f2:8f:b4:ee:
57:c9:bf:d0:6b:56:96:d9:54:2e:fe:07:82:a3:fb:eb:4a:67:
02:c9:c7:c0:ee:95:2f:d0:cb:3b:89:f3:b5:c9:e2:f3:1c:c2:
73:a7:65:80:aa:b7:ab:ad:0b:ee:c8:e3:cb:1a:b6:aa:50:c9:
0c:ab:d1:7c:7a:66:2c:d6:f7:83:3f:b5:4a:33:93:3a:bc:c1:
df:6a:13:53:6c:a8:83:da:9b:d3:8d:3e:f0:7a:66:97:16:c4:
87:44:79:a2:5c:3d:c2:da:69:9c:bd:a1:45:a9:96:93:3c:b9:
c8:a2:de:52:d3:6b:b3:13:79:e0:35:60:f4:ad:b5:28:02:17:
02:29:ca:54:00:c6:1e:3f:2e:5d:69:51:e1:fc:2a:d9:dc:08:
53:c4:94:46:3d:bd:03:41:99:ee:b7:95:fc:da:17:d9:64:e5:
05:e6:99:fa:fc:87:68:25:cd:2a:d4:05:6d:37:e4:56:89:5b:
2e:79:86:a9:3d:2a:0a:37:bc:c9:e8:63:e6:c2:08:dc:13:f8:
f4:e4:7c:9b:b1:b2:cc:31:8b:08:f1:7d:db:51:cd:2b:8d:08:
fe:e6:32:00:60:63:1d:3d:c7:ec:ef:05:53:5c:82:a7:6b:91:
84:5d:b3:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT/CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTUxMzA4WhcNMjUwNDAxMTUxMzA4WjAYMRYw
FAYDVQQDEw02NzkxMGIwNy01ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmwPUwGodUUa+9+r0wQk8+nbSDYYyEfjfPeccHyXSy4RZBA706XrXrzQX
rJbmb5s9oqdHkqrVVPHvvPO/lvkOXdZcoushG9H9OYOGMHpGsCIINPuBlwq9EEW3
57IJoz9faTfuJRuz/01XquikLQ36fvLy00G3gUPMtyHGToOg1KdBakJp8eOMj5th
lUnxNuup22e1fA0SBEdkX3Dgq4k7DIbjKtv5Q31rsQVwoX7CZPZWReTOwQjS5pRE
A0ixeuM8kItIUPQLUBP/EPfko5cvD4iJpgGn1GPmYqETvUkwOBWNItXxeQShlLwp
9URvTl6axYtDPqUEtr/FzFt0mPD5JwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI7B
UQpd1j7QAxYPDoDtjTsjzJsmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NEY2M0UzMkQ4RDMxMUVGOEYyODdFNEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml18MA0GCSqGSIb3DQEB
CwUAA4IBAQAKlDHxpz5BaZASJgS3GPKPtO5Xyb/Qa1aW2VQu/geCo/vrSmcCycfA
7pUv0Ms7ifO1yeLzHMJzp2WAqrerrQvuyOPLGraqUMkMq9F8emYs1veDP7VKM5M6
vMHfahNTbKiD2pvTjT7wemaXFsSHRHmiXD3C2mmcvaFFqZaTPLnIot5S02uzE3ng
NWD0rbUoAhcCKcpUAMYePy5daVHh/CrZ3AhTxJRGPb0DQZnut5X82hfZZOUF5pn6
/IdoJc0q1AVtN+RWiVsueYapPSoKN7zJ6GPmwgjcE/j05HybsbLMMYsI8X3bUc0r
jQj+5jIAYGMdPcfs7wVTXIKna5GEXbMf
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:33 2025 by rpki-client