Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF1340AF13511EC9C5E54A8F1222468.roa
File: 6AF1340AF13511EC9C5E54A8F1222468.roa (raw, json)
Hash identifier: FZ/TXIZDXCvchIDx0Yp0PI9el2NdSiNiAOY39Ihe7wE=
Subject key identifier: C4:E6:9B:CF:66:C4:7E:77:A2:14:36:D9:4D:92:37:A5:16:6B:E3:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 16EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF1340AF13511EC9C5E54A8F1222468.roa
Signing time: Tue 21 Jun 2022 07:40:27 +0000
ROA not before: Tue 21 Jun 2022 07:40:24 +0000
ROA not after: Fri 30 Jun 2023 07:40:24 +0000
asID: 138995
IP address blocks: 154.196.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5867 (0x16eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 07:40:24 2022 GMT
Not After : Jun 30 07:40:24 2023 GMT
Subject: CN=62b175eb-565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:35:0b:89:3b:39:ba:d7:46:d3:ea:62:5a:
da:3d:74:c8:dd:1a:47:8f:b9:6d:bb:a8:42:59:a7:
8d:bb:52:20:7f:96:b3:59:f5:42:21:29:31:55:9f:
54:94:14:44:77:d0:c4:5c:a1:8e:2c:b6:3e:49:63:
19:df:f8:a5:23:99:3d:c8:2a:ff:a1:9a:a0:d0:67:
3b:73:65:66:27:bb:7c:b8:fe:d7:ad:d5:d5:4a:57:
89:db:d2:82:c3:9b:f1:99:1f:2b:1d:fc:db:7f:cd:
95:9f:88:3d:49:33:2d:5b:b5:17:a5:7e:ee:da:6b:
af:c1:aa:57:02:dc:c2:c4:b2:cd:87:c3:dd:ad:71:
91:24:79:e1:72:4a:4e:44:6d:aa:70:8f:f3:bd:9b:
8f:21:76:c0:26:10:c1:1c:2b:84:46:84:42:71:87:
81:48:e3:ce:18:9f:ec:6d:f1:c8:5f:1a:4a:8e:05:
eb:37:60:9c:ee:cd:4e:a0:b1:71:5e:04:0a:e1:d4:
1e:0b:4c:68:28:02:4c:a8:8c:fa:2c:8b:60:ef:81:
1e:33:14:0d:26:14:05:4c:de:11:a5:21:b1:e0:3e:
2a:d2:71:75:cc:b7:65:cb:e2:8c:bb:f1:35:7d:ad:
b0:79:22:6b:38:66:1a:fa:4d:85:77:36:ba:e1:0f:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:9B:CF:66:C4:7E:77:A2:14:36:D9:4D:92:37:A5:16:6B:E3:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF1340AF13511EC9C5E54A8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.2.0/23
Signature Algorithm: sha256WithRSAEncryption
02:b9:18:27:a5:26:80:54:76:21:54:88:fb:ff:e1:37:1c:52:
99:c2:c2:3c:ce:ec:36:5e:27:63:c9:85:94:95:9c:32:54:97:
b2:6a:d5:43:76:66:2b:0a:e8:48:fa:bf:e2:27:39:59:c8:37:
b8:4c:30:57:c8:0c:1d:15:a4:6c:67:29:e6:2e:97:5f:05:38:
ec:b2:3f:63:c0:42:65:dd:b3:e0:9e:26:c9:8a:ad:35:2f:36:
18:35:84:f2:04:ca:fc:78:ab:6f:89:f3:14:86:00:93:33:8b:
97:aa:46:0e:d9:20:57:ce:d6:fa:93:7e:3d:fe:e8:f6:4a:27:
c9:72:18:f4:c8:d2:c0:27:c3:7c:fb:1e:de:eb:73:5d:28:36:
e1:2d:0d:b8:c7:94:83:75:06:a1:d0:85:af:65:84:70:3a:e0:
9e:1e:4d:ae:13:55:68:9e:95:60:fb:c0:86:1e:0f:49:9a:15:
9c:2e:99:ef:df:df:c4:1a:87:66:5f:46:cd:8d:e8:db:43:ff:
f0:c7:87:14:6b:8e:4d:b4:dd:90:1b:8d:d5:78:c5:a4:e2:94:
05:25:dc:7f:43:8d:e3:fb:3e:de:9c:8b:4b:f2:8d:f1:5b:66:
04:c8:2b:4b:29:81:5f:af:99:7e:a0:c5:9a:66:a2:1f:e1:cb:
64:2e:1c:b5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFuswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA2MjEwNzQwMjRaFw0yMzA2MzAwNzQwMjRaMBgxFjAU
BgNVBAMMDTYyYjE3NWViLTU2NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwyDULiTs5utdG0+piWto9dMjdGkePuW27qEJZp427UiB/lrNZ9UIhKTFV
n1SUFER30MRcoY4stj5JYxnf+KUjmT3IKv+hmqDQZztzZWYnu3y4/tet1dVKV4nb
0oLDm/GZHysd/Nt/zZWfiD1JMy1btRelfu7aa6/BqlcC3MLEss2Hw92tcZEkeeFy
Sk5Ebapwj/O9m48hdsAmEMEcK4RGhEJxh4FI484Yn+xt8chfGkqOBes3YJzuzU6g
sXFeBArh1B4LTGgoAkyojPosi2DvgR4zFA0mFAVM3hGlIbHgPirScXXMt2XL4oy7
8TV9rbB5Ims4Zhr6TYV3NrrhD7gfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxOab
z2bEfneiFDbZTZI3pRZr48AwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzZBRjEzNDBBRjEzNTExRUM5QzVFNTRBOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaxAIwDQYJKoZIhvcNAQEL
BQADggEBAAK5GCelJoBUdiFUiPv/4TccUpnCwjzO7DZeJ2PJhZSVnDJUl7Jq1UN2
ZisK6Ej6v+InOVnIN7hMMFfIDB0VpGxnKeYul18FOOyyP2PAQmXds+CeJsmKrTUv
Nhg1hPIEyvx4q2+J8xSGAJMzi5eqRg7ZIFfO1vqTfj3+6PZKJ8lyGPTI0sAnw3z7
Ht7rc10oNuEtDbjHlIN1BqHQha9lhHA64J4eTa4TVWielWD7wIYeD0maFZwume/f
38Qah2ZfRs2N6NtD//DHhxRrjk203ZAbjdV4xaTilAUl3H9DjeP7Pt6ci0vyjfFb
ZgTIK0spgV+vmX6gxZpmoh/hy2QuHLU=
-----END CERTIFICATE-----
Generated at Sun May 11 12:41:01 2025 by rpki-client