Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACD3604F4D911EF9119DC76762E951A.roa
File: 6ACD3604F4D911EF9119DC76762E951A.roa (raw, json)
Hash identifier: 9S458cbJgadMcI8IlXZ2X3dEfk2EamUlLvzSrI013P4=
Subject key identifier: 36:E4:3C:13:F8:93:34:67:83:F8:12:1C:18:22:E7:CF:0F:C8:1D:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016691
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACD3604F4D911EF9119DC76762E951A.roa
Signing time: Thu 27 Feb 2025 07:06:51 +0000
ROA not before: Thu 27 Feb 2025 07:06:47 +0000
ROA not after: Fri 28 Mar 2025 07:06:47 +0000
asID: 214413
IP address blocks: 154.193.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91793 (0x16691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 07:06:47 2025 GMT
Not After : Mar 28 07:06:47 2025 GMT
Subject: CN=67c00f0b-849f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:ab:99:f7:86:b0:20:ae:69:2b:d8:c2:e5:
e5:c3:35:1d:2a:2a:c2:7e:0b:23:d2:45:d3:9f:fc:
e6:9f:33:7c:3f:64:9d:83:2a:10:1f:3e:1c:79:df:
36:4b:48:cc:3b:aa:9e:bf:0e:8a:c6:0f:31:fd:a2:
fe:79:a9:1c:bc:9c:c6:f4:35:2d:8c:82:f5:ac:29:
59:a1:55:e2:fc:86:a8:e0:0f:cf:0c:42:79:e6:f5:
73:2c:17:00:f2:e5:12:f2:c6:bb:3c:93:51:24:e2:
2e:5d:ba:4f:e4:30:71:bc:f8:32:d8:ef:ce:46:90:
da:7e:3b:50:42:9f:7f:aa:1b:89:6c:1d:71:02:d5:
fa:fb:22:2c:20:86:82:ee:d7:76:ea:9c:5c:62:43:
40:c3:d6:65:5b:db:31:f7:21:47:9e:77:51:b1:18:
df:ae:41:ce:2e:80:aa:0a:c7:75:b6:bc:06:2e:82:
77:99:79:b0:ca:bb:8a:15:b7:6c:05:06:ae:c5:fb:
48:f7:44:4c:c7:f0:4c:89:64:61:11:e7:1d:25:e5:
02:71:b7:be:72:61:68:69:bf:ee:58:72:d6:e8:cf:
e4:f4:b9:86:da:19:a6:24:b8:35:5c:78:4b:4e:9a:
32:49:9a:de:5c:96:fc:6a:69:2d:30:3f:35:12:55:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:3C:13:F8:93:34:67:83:F8:12:1C:18:22:E7:CF:0F:C8:1D:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ACD3604F4D911EF9119DC76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.172.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d9:0c:65:e1:2a:09:1f:7c:7c:c7:c6:ce:13:89:81:87:30:
aa:4a:16:7f:6f:87:3f:53:03:8d:99:36:9f:2b:59:ea:48:33:
e3:b5:0f:e3:65:0c:c4:a4:0d:3e:71:54:4b:54:ff:e1:01:93:
33:a0:c4:9b:ab:8e:56:64:f1:47:02:47:2c:5b:51:9a:d4:1d:
90:61:44:8f:83:74:00:41:3b:5d:63:b2:de:8b:f1:11:62:ab:
6f:2f:ff:ce:b4:e3:eb:c8:e2:d3:02:3c:38:55:3e:fe:c9:f5:
c0:12:76:a7:ae:b1:01:1e:4a:c1:54:0c:e0:28:1b:c9:56:a4:
5e:9f:a9:da:30:59:ad:93:a2:75:4a:0e:ff:76:ff:42:f1:01:
f2:b5:1a:05:65:c2:53:37:c3:bd:d0:74:7a:b0:87:a5:95:29:
28:8a:1a:4c:c4:f5:2e:05:10:3e:20:95:12:dc:3e:f0:7e:f9:
52:cf:82:d1:23:7a:78:1a:84:01:cb:bf:24:33:c6:c0:4b:a6:
51:c1:65:cc:3c:8d:d6:79:b0:c8:42:27:62:d5:5f:66:d1:d1:
bb:7d:1a:85:91:b2:cd:6e:46:3d:d6:4d:78:61:f3:93:ed:b5:
61:de:74:4a:da:18:21:c4:8b:e0:9e:91:07:93:ea:a9:57:41:
92:e2:cf:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWaRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDcwNjQ3WhcNMjUwMzI4MDcwNjQ3WjAYMRYw
FAYDVQQDEw02N2MwMGYwYi04NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxiWrmfeGsCCuaSvYwuXlwzUdKirCfgsj0kXTn/zmnzN8P2SdgyoQHz4c
ed82S0jMO6qevw6Kxg8x/aL+eakcvJzG9DUtjIL1rClZoVXi/Iao4A/PDEJ55vVz
LBcA8uUS8sa7PJNRJOIuXbpP5DBxvPgy2O/ORpDafjtQQp9/qhuJbB1xAtX6+yIs
IIaC7td26pxcYkNAw9ZlW9sx9yFHnndRsRjfrkHOLoCqCsd1trwGLoJ3mXmwyruK
FbdsBQauxftI90RMx/BMiWRhEecdJeUCcbe+cmFoab/uWHLW6M/k9LmG2hmmJLg1
XHhLTpoySZreXJb8amktMD81ElVgxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDbk
PBP4kzRng/gSHBgi588PyB2EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QUNEMzYwNEY0RDkxMUVGOTExOURDNzY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsGsMA0GCSqGSIb3DQEB
CwUAA4IBAQAz2Qxl4SoJH3x8x8bOE4mBhzCqShZ/b4c/UwONmTafK1nqSDPjtQ/j
ZQzEpA0+cVRLVP/hAZMzoMSbq45WZPFHAkcsW1Ga1B2QYUSPg3QAQTtdY7Lei/ER
YqtvL//OtOPryOLTAjw4VT7+yfXAEnanrrEBHkrBVAzgKBvJVqRen6naMFmtk6J1
Sg7/dv9C8QHytRoFZcJTN8O90HR6sIellSkoihpMxPUuBRA+IJUS3D7wfvlSz4LR
I3p4GoQBy78kM8bAS6ZRwWXMPI3WebDIQidi1V9m0dG7fRqFkbLNbkY91k14YfOT
7bVh3nRK2hghxIvgnpEHk+qpV0GS4s8m
-----END CERTIFICATE-----
Generated at Fri May 9 06:49:29 2025 by rpki-client