Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6973A4788CDE11EE8C7C35674AD9E6FC.roa
File: 6973A4788CDE11EE8C7C35674AD9E6FC.roa (raw, json)
Hash identifier: t3iQAlnjRERmyS5lyItUTD1SsYup6gEjGZZ5FvOwbvY=
Subject key identifier: E4:EA:3F:09:6A:80:EC:52:CE:E0:32:DD:6D:D9:CA:1A:75:94:CC:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 550C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6973A4788CDE11EE8C7C35674AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:35:37 +0000
ROA not before: Mon 27 Nov 2023 04:35:34 +0000
ROA not after: Tue 26 Dec 2023 04:35:34 +0000
asID: 62240
IP address blocks: 154.195.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21772 (0x550c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:35:34 2023 GMT
Not After : Dec 26 04:35:34 2023 GMT
Subject: CN=65641c99-46cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:67:3c:b7:c6:22:3c:96:2b:05:a3:2d:27:
d6:23:fa:5d:4a:0c:a8:82:44:3a:76:e5:9f:ae:d9:
7e:e2:e3:13:c8:e6:a7:6b:13:e9:f6:e2:ed:72:f0:
70:3a:04:2c:1e:32:f9:1b:94:8b:63:c3:3a:52:1d:
d9:71:21:ba:16:c8:c6:fa:f1:ee:c8:ae:90:a5:29:
79:37:09:86:68:c6:8e:1c:6e:dc:db:ee:96:a2:2c:
ae:10:0c:df:a1:48:cc:a0:c3:f7:6b:d7:f0:68:c3:
7d:59:a2:bf:e4:ef:0d:f8:5d:cb:e8:4e:6d:0a:38:
0c:11:56:0c:04:e1:5c:68:d3:a0:28:77:3a:0a:ee:
eb:74:bf:cb:c1:80:13:4b:16:b0:12:fe:22:df:ab:
fb:e4:ab:19:62:8c:e1:45:e8:fb:42:1b:c7:9d:63:
53:f6:38:f5:f8:6d:f5:d5:94:48:f3:b6:dd:67:22:
c8:40:55:73:c8:5a:24:82:1e:13:c4:37:4c:30:9b:
bf:00:99:92:4a:cc:3c:94:b7:58:18:a2:1d:89:48:
53:a2:f9:e9:e3:88:cd:e2:3f:6d:64:a9:bd:fd:2a:
b2:87:a1:7a:43:4d:d5:ff:87:f6:fa:51:80:60:e3:
19:a7:2d:cb:72:7a:77:b3:d3:a7:3e:db:db:be:45:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:3F:09:6A:80:EC:52:CE:E0:32:DD:6D:D9:CA:1A:75:94:CC:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6973A4788CDE11EE8C7C35674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3e:cc:21:cd:59:58:17:03:e7:c9:e5:13:10:a6:f4:f3:f5:
06:6b:71:a4:1a:ac:58:ae:80:9c:f9:07:de:33:02:1b:69:9b:
1e:58:4b:d9:59:11:f8:7d:4f:e4:61:24:f6:b0:b4:87:5b:58:
6f:31:02:15:4d:09:32:65:20:4f:48:6b:a9:67:57:32:f0:8f:
70:d9:c2:75:ab:c1:81:78:26:cc:5e:5d:ae:7f:70:aa:12:b8:
87:e1:e3:12:bc:e2:a5:51:ba:0d:a4:6a:48:15:bf:d4:ef:58:
6e:ed:5a:24:2c:e4:3b:b9:dd:55:d1:f6:99:9b:fc:c1:04:78:
fd:0e:91:1a:a8:36:40:15:83:06:cc:d1:a4:ca:c2:76:c4:4e:
0e:0c:ca:db:69:f0:2e:15:f5:a0:c7:f2:14:04:71:a8:45:e1:
b6:38:c1:d5:d8:af:35:f4:32:ab:f3:73:ed:57:1e:dc:d9:57:
c2:40:a6:55:10:60:e6:32:5f:34:8a:f5:1f:d5:49:b0:3b:5d:
5a:9a:9b:5d:80:b9:ec:54:d4:63:16:a7:51:42:52:26:92:30:
34:f3:bd:74:a0:b8:e5:71:a9:33:b9:7c:15:09:6b:0f:ab:de:
9d:87:64:16:98:35:3d:f0:c2:7d:c3:b4:36:69:fb:d3:aa:61:
d9:97:5e:79
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVQwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNDM1MzRaFw0yMzEyMjYwNDM1MzRaMBgxFjAU
BgNVBAMTDTY1NjQxYzk5LTQ2Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjOGc8t8YiPJYrBaMtJ9Yj+l1KDKiCRDp25Z+u2X7i4xPI5qdrE+n24u1y
8HA6BCweMvkblItjwzpSHdlxIboWyMb68e7IrpClKXk3CYZoxo4cbtzb7paiLK4Q
DN+hSMygw/dr1/Bow31Zor/k7w34XcvoTm0KOAwRVgwE4Vxo06AodzoK7ut0v8vB
gBNLFrAS/iLfq/vkqxlijOFF6PtCG8edY1P2OPX4bfXVlEjztt1nIshAVXPIWiSC
HhPEN0wwm78AmZJKzDyUt1gYoh2JSFOi+enjiM3iP21kqb39KrKHoXpDTdX/h/b6
UYBg4xmnLctyenez06c+29u+Rap7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5Oo/
CWqA7FLO4DLdbdnKGnWUzEEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzY5NzNBNDc4OENERTExRUU4QzdDMzU2NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw24wDQYJKoZIhvcNAQEL
BQADggEBAFU+zCHNWVgXA+fJ5RMQpvTz9QZrcaQarFiugJz5B94zAhtpmx5YS9lZ
Efh9T+RhJPawtIdbWG8xAhVNCTJlIE9Ia6lnVzLwj3DZwnWrwYF4JsxeXa5/cKoS
uIfh4xK84qVRug2kakgVv9TvWG7tWiQs5Du53VXR9pmb/MEEeP0OkRqoNkAVgwbM
0aTKwnbETg4Myttp8C4V9aDH8hQEcahF4bY4wdXYrzX0Mqvzc+1XHtzZV8JAplUQ
YOYyXzSK9R/VSbA7XVqam12AuexU1GMWp1FCUiaSMDTzvXSguOVxqTO5fBUJaw+r
3p2HZBaYNT3wwn3DtDZp+9OqYdmXXnk=
-----END CERTIFICATE-----
Generated at Fri May 9 11:10:06 2025 by rpki-client