Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/751051A0F4F211EFBF68189E762E951A.roa
File: 751051A0F4F211EFBF68189E762E951A.roa (raw, json)
Hash identifier: LmWtp99ILeHH0xVdeWPUhKpLynTa4hB5q6AazdO4Abw=
Subject key identifier: AF:44:62:6E:77:8C:02:6E:0E:A5:BA:19:C4:EF:C0:FE:1B:05:E7:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016784
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/751051A0F4F211EFBF68189E762E951A.roa
Signing time: Thu 27 Feb 2025 10:06:06 +0000
ROA not before: Thu 27 Feb 2025 10:05:57 +0000
ROA not after: Wed 26 Mar 2025 10:05:57 +0000
asID: 62240
IP address blocks: 154.195.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92036 (0x16784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:05:57 2025 GMT
Not After : Mar 26 10:05:57 2025 GMT
Subject: CN=67c0390d-913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:f3:b4:39:95:0e:9d:a2:9c:b9:58:f5:1d:
63:4e:7b:f8:42:c5:36:5a:5a:ac:d7:68:d9:9e:d1:
ac:61:97:b1:25:04:e5:0d:09:5c:c5:3e:be:d9:fc:
64:3d:75:df:ea:fb:88:f1:46:ee:c3:bb:57:d3:26:
60:a2:73:76:cc:ac:7f:c8:cb:85:aa:ec:0d:57:2b:
be:14:4c:ef:fe:93:2d:4c:d4:00:f1:ae:e4:84:f1:
3f:f1:71:2d:84:25:d2:e7:43:26:cc:39:e9:94:c2:
01:80:f6:70:07:4a:6f:79:0b:52:47:09:73:86:41:
4c:c2:c5:06:0f:41:88:19:59:95:c1:d3:f2:77:24:
00:55:c0:81:91:31:4f:25:d1:16:73:39:29:dd:08:
16:17:5e:6c:a6:ed:d5:e1:12:eb:8e:d7:fd:77:8b:
b7:a5:a3:f7:f3:aa:15:0f:e6:5b:ae:91:d6:37:de:
6d:c5:dc:f8:d5:4e:19:32:7c:08:86:29:fd:58:0a:
c6:22:57:16:d8:60:2c:3e:2e:c6:1e:b2:ba:4b:54:
4f:98:61:dc:c2:7c:df:18:80:15:d7:7b:b9:de:31:
f1:7a:4d:85:bd:3c:06:16:1c:54:ed:73:af:b2:35:
de:bb:2a:ac:80:a8:f6:ad:13:af:e7:e0:79:23:15:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:62:6E:77:8C:02:6E:0E:A5:BA:19:C4:EF:C0:FE:1B:05:E7:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/751051A0F4F211EFBF68189E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.109.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ba:75:0a:69:35:a0:92:8a:d2:56:57:f1:fd:db:ea:11:06:
21:07:28:3e:b2:1e:94:09:95:d0:93:a8:fb:b3:44:1f:69:90:
e8:73:b5:44:f5:f2:4d:3d:18:28:de:2c:95:72:22:e4:b7:44:
19:c1:40:0e:5d:26:97:45:d0:17:3f:21:58:6e:e0:77:69:4d:
a9:96:0c:60:aa:0f:c7:cf:f3:6f:e8:f6:fd:6c:0c:1c:58:5c:
5c:4d:0c:17:54:27:97:1e:c4:3a:04:1e:f3:8d:80:cf:37:67:
d0:a5:72:3f:f8:93:d8:5a:a0:fa:7e:79:79:0c:f1:5a:f8:9b:
98:53:57:76:bf:4b:38:c9:0f:38:3a:1a:ed:89:31:03:0d:90:
94:30:41:8b:78:3f:40:79:fc:91:5f:ce:10:0c:58:4c:ad:79:
5a:4b:2d:88:7b:29:75:af:22:2c:0b:29:44:5d:0e:1d:6c:69:
1a:dd:53:e8:d2:81:c6:78:07:9a:0c:51:1e:b2:34:53:cd:70:
12:b9:e7:51:bc:6f:da:5a:71:98:54:6f:35:42:e8:b6:92:cc:
2f:35:55:21:42:fd:48:6f:40:b5:ae:be:61:4e:7b:7a:9e:74:
43:ec:4a:4e:31:29:7b:7f:c2:60:09:1d:a9:df:db:96:15:06:
1f:85:45:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWeEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTAwNTU3WhcNMjUwMzI2MTAwNTU3WjAYMRYw
FAYDVQQDEw02N2MwMzkwZC05MTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvTvztDmVDp2inLlY9R1jTnv4QsU2Wlqs12jZntGsYZexJQTlDQlcxT6+
2fxkPXXf6vuI8Ubuw7tX0yZgonN2zKx/yMuFquwNVyu+FEzv/pMtTNQA8a7khPE/
8XEthCXS50MmzDnplMIBgPZwB0pveQtSRwlzhkFMwsUGD0GIGVmVwdPydyQAVcCB
kTFPJdEWczkp3QgWF15spu3V4RLrjtf9d4u3paP386oVD+ZbrpHWN95txdz41U4Z
MnwIhin9WArGIlcW2GAsPi7GHrK6S1RPmGHcwnzfGIAV13u53jHxek2FvTwGFhxU
7XOvsjXeuyqsgKj2rROv5+B5IxWHtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK9E
Ym53jAJuDqW6GcTvwP4bBedUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NTEwNTFBMEY0RjIxMUVGQkY2ODE4OUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNtMA0GCSqGSIb3DQEB
CwUAA4IBAQATunUKaTWgkorSVlfx/dvqEQYhByg+sh6UCZXQk6j7s0QfaZDoc7VE
9fJNPRgo3iyVciLkt0QZwUAOXSaXRdAXPyFYbuB3aU2plgxgqg/Hz/Nv6Pb9bAwc
WFxcTQwXVCeXHsQ6BB7zjYDPN2fQpXI/+JPYWqD6fnl5DPFa+JuYU1d2v0s4yQ84
OhrtiTEDDZCUMEGLeD9AefyRX84QDFhMrXlaSy2Ieyl1ryIsCylEXQ4dbGka3VPo
0oHGeAeaDFEesjRTzXASuedRvG/aWnGYVG81Qui2kswvNVUhQv1Ib0C1rr5hTnt6
nnRD7EpOMSl7f8JgCR2p39uWFQYfhUXf
-----END CERTIFICATE-----
Generated at Fri May 9 12:30:26 2025 by rpki-client