This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70F4B0548CE111EEAE43FD704AD9E6FC.roa
File:                     70F4B0548CE111EEAE43FD704AD9E6FC.roa (raw, json)
Hash identifier:          ygsexnnfJVTQSh5jE9Lh01/rMAKuOmkHl9ck9xCENJE=
Subject key identifier:   7B:79:55:88:02:0E:8A:1C:2E:88:7C:66:3B:02:04:46:78:96:DC:C2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5548
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70F4B0548CE111EEAE43FD704AD9E6FC.roa
Signing time:             Mon 27 Nov 2023 04:57:19 +0000
ROA not before:           Mon 27 Nov 2023 04:57:15 +0000
ROA not after:            Tue 26 Dec 2023 04:57:15 +0000
asID:                     62240
IP address blocks:        154.195.184.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21832 (0x5548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 04:57:15 2023 GMT
            Not After : Dec 26 04:57:15 2023 GMT
        Subject: CN=656421ae-fe3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:26:52:7e:ee:55:41:ec:7f:69:bf:47:bc:
                    d5:31:b8:03:8a:c2:52:92:bc:a3:4b:24:21:6e:d0:
                    9c:eb:ce:66:d7:47:07:82:26:53:fd:83:88:a3:51:
                    f9:4d:51:cb:e7:a5:25:a6:fe:ac:63:6d:a3:e0:29:
                    ec:a4:fd:b1:41:4f:5e:1a:71:46:ad:88:32:a7:f8:
                    f1:f3:f8:cb:64:c0:c3:3f:5b:d3:cc:a9:1c:b3:20:
                    93:ab:97:23:19:ed:97:ee:7c:f7:85:0b:6d:7b:47:
                    f4:b2:6c:f9:6a:99:ea:2e:e1:75:1b:b3:07:9c:86:
                    9a:5e:79:97:ae:4e:f9:00:ad:45:86:4b:81:96:88:
                    2a:0c:ee:14:11:38:ee:40:46:d9:ee:30:0f:a5:2e:
                    3d:3c:02:a3:0c:ce:15:48:a2:f9:8d:d6:73:1a:df:
                    e1:05:7a:18:2a:ad:8e:2f:fd:80:40:14:4b:d1:5b:
                    04:c9:1d:b6:37:c5:9a:ec:be:d2:ad:c2:b8:38:fa:
                    6b:84:61:1f:48:69:51:63:c5:e2:61:85:90:75:dc:
                    4a:ab:29:30:a4:af:d5:3e:02:6d:c8:5a:0c:89:e3:
                    17:b5:a1:3f:fc:c0:2a:4b:ab:26:a2:d4:59:3d:ab:
                    84:9b:c4:83:e0:f7:3e:27:76:49:f6:4a:89:23:fd:
                    27:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:79:55:88:02:0E:8A:1C:2E:88:7C:66:3B:02:04:46:78:96:DC:C2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70F4B0548CE111EEAE43FD704AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:8d:86:01:03:17:9a:cc:74:e0:e8:38:71:97:eb:e4:16:
         25:4e:c7:4c:bc:9e:39:0b:76:a3:ab:c5:3b:1e:5f:90:62:8f:
         d5:68:d1:b0:a4:51:f5:09:8b:fc:b0:9d:e3:63:46:1c:17:b8:
         43:60:2f:72:45:fa:2a:c5:a7:f0:66:4c:96:22:22:c9:35:8f:
         63:dc:7b:6f:50:19:12:ad:2b:fb:76:df:13:13:ab:c9:91:52:
         c4:41:51:74:77:42:4c:f4:01:c5:5b:2d:3b:a2:9c:85:2d:41:
         eb:7a:c1:60:cc:27:ff:e5:29:f6:58:a3:52:a0:68:9f:f7:82:
         d9:73:a0:cc:7d:bf:ae:65:a3:12:80:6e:4b:74:38:19:06:9d:
         8b:89:c8:a9:2a:26:ea:65:23:f6:70:3b:59:57:ee:fe:07:97:
         ca:2b:db:c8:0d:b4:4d:0c:cf:95:45:d8:66:28:cc:32:2c:bd:
         be:5c:bc:ae:52:3a:18:bf:d0:7e:14:48:a4:a4:34:21:9c:68:
         93:af:1d:33:82:b1:f9:31:61:e8:f4:93:14:e5:b1:ec:47:9b:
         09:f3:3b:c1:28:60:7c:e0:a5:8e:8f:a9:64:ad:e1:b0:9e:31:
         df:78:63:a8:9f:34:b6:4c:0d:2a:cf:b1:74:a0:59:02:bc:e6:
         a9:aa:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----