Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67296486C47911EF80D3297A762E951A.roa
File: 67296486C47911EF80D3297A762E951A.roa (raw, json)
Hash identifier: aoUJ0HeXNgFswq5P+K1FmEXWC5+VkmmL/IsZd9ZWlAw=
Subject key identifier: AD:79:B9:F9:68:2C:16:83:B5:13:8D:9F:15:5D:26:08:17:27:8F:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012AD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67296486C47911EF80D3297A762E951A.roa
Signing time: Fri 27 Dec 2024 17:38:37 +0000
ROA not before: Fri 27 Dec 2024 17:38:34 +0000
ROA not after: Mon 31 Mar 2025 17:38:34 +0000
asID: 328608
IP address blocks: 154.209.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76502 (0x12ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 27 17:38:34 2024 GMT
Not After : Mar 31 17:38:34 2025 GMT
Subject: CN=676ee61d-cecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:5a:a6:82:c1:f2:e3:a5:74:2f:75:93:5a:
bd:59:c0:99:46:20:58:e1:73:b9:03:17:3d:f8:32:
99:ee:55:be:63:7c:2f:00:38:56:8c:73:15:b6:85:
ab:56:f3:b9:8c:95:a2:a1:47:59:41:1f:cc:1c:0d:
2b:35:ac:d5:e7:66:92:b4:36:4a:3f:94:ea:ce:31:
18:2e:3a:bf:d9:4e:cd:c0:e3:6b:73:55:13:ff:7a:
0f:a7:97:6a:a5:5c:61:2d:38:21:03:89:c0:70:66:
6b:90:4a:ba:92:8b:8f:e6:75:c0:9f:c1:58:f0:3b:
d9:fb:39:be:e3:a3:16:2a:5a:ec:b4:33:bf:3f:5a:
b2:4d:46:cd:81:db:1b:6d:2d:3c:4e:d3:89:97:9e:
d7:af:32:23:d4:bf:dc:23:ac:50:d4:71:f4:2f:16:
fa:fe:89:f5:6d:2c:13:09:37:61:71:9a:cd:be:f7:
b4:19:f9:af:80:2e:5d:cd:60:f2:5a:af:36:1b:6e:
ed:73:58:38:f1:10:5f:e1:8f:cc:12:21:0c:3b:4c:
4f:e5:6d:7d:73:11:8a:3f:70:3b:fb:a8:b6:4f:02:
e2:4d:11:55:88:c7:b4:c3:53:fb:3f:f4:d8:d9:69:
c1:4d:89:93:0c:07:8e:69:5e:8b:5a:44:e7:95:1e:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:79:B9:F9:68:2C:16:83:B5:13:8D:9F:15:5D:26:08:17:27:8F:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67296486C47911EF80D3297A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.128.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:7e:47:6c:cd:e3:b5:95:8c:39:46:78:f1:34:75:d5:9a:fb:
b0:d8:fb:a8:ca:e8:81:55:fa:62:78:71:35:67:f6:53:b0:b7:
fa:20:ad:61:5f:3f:35:91:11:fc:e9:ce:38:a9:5b:37:0f:c1:
fe:1f:b2:ab:84:d4:f5:f4:0a:d4:8c:04:88:b6:2f:5d:d6:a4:
ed:78:32:9f:d0:67:75:ba:45:ad:a5:62:50:c4:89:5e:5f:6b:
44:5a:a0:03:cc:d6:98:b3:7f:f0:f6:63:d2:8e:dd:dc:e1:6c:
ae:55:32:a3:62:6e:45:e8:e5:63:e8:28:5a:17:bb:47:f0:a7:
14:e2:51:79:14:57:1a:5e:d8:71:4e:26:2f:d1:50:fc:6c:f0:
f3:28:f4:54:03:fd:7e:f7:fb:34:4f:0f:8a:9f:91:48:7d:5a:
24:2c:34:e3:26:a7:8d:63:9d:89:0d:b8:1a:3e:1b:11:ed:f1:
90:6c:92:e8:cd:b7:55:c3:d3:83:83:83:2f:c4:60:9c:c5:a4:
57:d4:d1:84:a5:64:15:0a:7a:90:02:cb:50:fb:9a:21:54:92:
58:ec:3c:f3:84:5b:d8:73:a9:2b:f5:9f:1b:d4:c2:0b:d3:dd:
4e:38:32:c1:c3:cc:fc:83:aa:b6:d9:ae:5d:3f:4b:85:4b:93:
21:37:c4:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASrWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MTczODM0WhcNMjUwMzMxMTczODM0WjAYMRYw
FAYDVQQDEw02NzZlZTYxZC1jZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6zRapoLB8uOldC91k1q9WcCZRiBY4XO5Axc9+DKZ7lW+Y3wvADhWjHMV
toWrVvO5jJWioUdZQR/MHA0rNazV52aStDZKP5TqzjEYLjq/2U7NwONrc1UT/3oP
p5dqpVxhLTghA4nAcGZrkEq6kouP5nXAn8FY8DvZ+zm+46MWKlrstDO/P1qyTUbN
gdsbbS08TtOJl57XrzIj1L/cI6xQ1HH0Lxb6/on1bSwTCTdhcZrNvve0GfmvgC5d
zWDyWq82G27tc1g48RBf4Y/MEiEMO0xP5W19cxGKP3A7+6i2TwLiTRFViMe0w1P7
P/TY2WnBTYmTDAeOaV6LWkTnlR4zVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK15
ufloLBaDtRONnxVdJggXJ49qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NzI5NjQ4NkM0NzkxMUVGODBEMzI5N0E3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtGAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/fkdszeO1lYw5RnjxNHXVmvuw2PuoyuiBVfpieHE1Z/ZTsLf6IK1h
Xz81kRH86c44qVs3D8H+H7KrhNT19ArUjASIti9d1qTteDKf0Gd1ukWtpWJQxIle
X2tEWqADzNaYs3/w9mPSjt3c4WyuVTKjYm5F6OVj6ChaF7tH8KcU4lF5FFcaXthx
TiYv0VD8bPDzKPRUA/1+9/s0Tw+Kn5FIfVokLDTjJqeNY52JDbgaPhsR7fGQbJLo
zbdVw9ODg4MvxGCcxaRX1NGEpWQVCnqQAstQ+5ohVJJY7DzzhFvYc6kr9Z8b1MIL
091OODLBw8z8g6q22a5dP0uFS5MhN8St
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:29:45 2025 by rpki-client