Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D01DDD48DCF11EE9534E3674AD9E6FC.roa
File: 6D01DDD48DCF11EE9534E3674AD9E6FC.roa (raw, json)
Hash identifier: 1cSWZbKi7SkDO8W67Pqzx4DJejFX9g82thmPSQys2cM=
Subject key identifier: 74:C4:CA:97:FF:6A:9D:55:9D:BA:AB:EC:6A:67:76:A9:B2:4E:21:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 55D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D01DDD48DCF11EE9534E3674AD9E6FC.roa
Signing time: Tue 28 Nov 2023 09:20:52 +0000
ROA not before: Tue 28 Nov 2023 09:20:49 +0000
ROA not after: Tue 26 Dec 2023 09:20:49 +0000
asID: 62240
IP address blocks: 154.196.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21974 (0x55d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 09:20:49 2023 GMT
Not After : Dec 26 09:20:49 2023 GMT
Subject: CN=6565b0f4-6a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:a5:4d:f3:49:8f:19:ea:1a:1b:9a:c3:44:
94:c5:14:c2:fd:d0:5b:36:fd:fb:64:7e:e2:2c:b8:
b7:b6:b8:21:de:ce:5f:1b:af:bf:d3:76:99:1d:d5:
dc:f1:d8:fc:4b:7c:8a:e2:e0:38:d7:84:9a:a6:37:
e7:e5:0b:0c:89:3e:af:74:c2:20:af:50:be:fa:73:
9d:85:a7:c9:fe:1b:13:39:42:d5:56:a0:3a:40:4f:
01:28:26:05:49:c3:55:5c:64:3b:be:3d:da:ad:d9:
07:2e:96:e7:1e:73:5f:46:a6:1d:65:ca:f3:cd:9b:
be:8c:61:1a:f4:94:c7:71:b1:d7:31:95:73:d1:bb:
6b:07:c7:33:04:96:82:e8:ae:46:88:27:fe:9c:0a:
6d:31:08:51:d4:c3:cd:7e:b9:3c:82:77:ed:9a:22:
80:19:3a:f7:fc:ff:53:88:67:72:09:ae:9f:85:25:
9a:69:a6:a9:30:1d:d5:be:8c:f4:fd:3f:e3:8d:e9:
76:45:1f:80:80:0c:54:fd:cf:d8:f2:77:49:b2:4c:
7e:f6:0d:7d:e6:a3:82:1c:46:ed:63:f8:98:cd:21:
bd:d1:62:3f:cb:6e:19:91:f9:13:78:05:17:89:23:
b6:e0:95:c5:ae:ad:47:dc:25:39:73:56:29:92:8f:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:CA:97:FF:6A:9D:55:9D:BA:AB:EC:6A:67:76:A9:B2:4E:21:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D01DDD48DCF11EE9534E3674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.48.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1a:f9:20:d1:86:91:60:20:0b:6c:fa:b5:31:4d:12:12:b8:
72:79:2a:4f:a3:0f:98:9d:cb:b2:6f:84:49:02:22:58:3b:89:
42:1d:a3:7d:27:c8:c7:8a:67:ff:dd:e7:95:19:f7:19:f0:ff:
a7:a1:f4:3f:2c:84:0b:ee:0c:bc:b8:5c:24:75:c3:0d:90:b2:
c3:31:75:d1:b3:b6:2c:5b:06:b5:40:29:99:67:b5:8b:dc:f8:
63:5a:e7:24:bc:8e:18:9e:93:88:d0:ab:7e:25:7c:b4:d6:fa:
29:fe:0d:c2:0a:f0:02:55:02:02:03:f2:c6:46:86:e9:f2:07:
9d:c9:5d:83:d8:c9:de:43:93:ee:eb:26:30:4e:52:52:1d:98:
6e:17:cb:9a:f9:37:52:9a:65:f6:e8:8f:f1:85:f4:f4:ce:ae:
b1:74:f6:7d:d2:51:fa:ac:40:eb:30:6b:b5:14:ee:eb:0b:d2:
56:6f:ac:20:29:4c:8d:9d:3d:11:41:3e:ac:36:1f:fd:6b:a6:
f7:95:8f:70:e2:84:4f:a6:e3:ef:ba:31:e4:c6:4e:9c:3d:7a:
b2:fe:34:1f:c3:38:4e:a7:e8:a1:ad:89:89:c9:ae:ed:6b:a1:
8c:44:1b:a0:8b:10:c0:a1:62:96:d7:e8:57:39:81:9c:e9:1e:
a5:80:40:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVdYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjgwOTIwNDlaFw0yMzEyMjYwOTIwNDlaMBgxFjAU
BgNVBAMTDTY1NjViMGY0LTZhNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDm6VN80mPGeoaG5rDRJTFFML90Fs2/ftkfuIsuLe2uCHezl8br7/Tdpkd
1dzx2PxLfIri4DjXhJqmN+flCwyJPq90wiCvUL76c52Fp8n+GxM5QtVWoDpATwEo
JgVJw1VcZDu+Pdqt2Qculucec19Gph1lyvPNm76MYRr0lMdxsdcxlXPRu2sHxzME
loLorkaIJ/6cCm0xCFHUw81+uTyCd+2aIoAZOvf8/1OIZ3IJrp+FJZpppqkwHdW+
jPT9P+ON6XZFH4CADFT9z9jyd0myTH72DX3mo4IcRu1j+JjNIb3RYj/LbhmR+RN4
BReJI7bglcWurUfcJTlzVimSj0nnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdMTK
l/9qnVWduqvsamd2qbJOIXowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzZEMDFEREQ0OERDRjExRUU5NTM0RTM2NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxDAwDQYJKoZIhvcNAQEL
BQADggEBAGga+SDRhpFgIAts+rUxTRISuHJ5Kk+jD5idy7JvhEkCIlg7iUIdo30n
yMeKZ//d55UZ9xnw/6eh9D8shAvuDLy4XCR1ww2QssMxddGztixbBrVAKZlntYvc
+GNa5yS8jhiek4jQq34lfLTW+in+DcIK8AJVAgID8sZGhunyB53JXYPYyd5Dk+7r
JjBOUlIdmG4Xy5r5N1KaZfboj/GF9PTOrrF09n3SUfqsQOswa7UU7usL0lZvrCAp
TI2dPRFBPqw2H/1rpveVj3DihE+m4++6MeTGTpw9erL+NB/DOE6n6KGtiYnJru1r
oYxEG6CLEMChYpbX6Fc5gZzpHqWAQKI=
-----END CERTIFICATE-----
Generated at Fri May 9 11:04:09 2025 by rpki-client