Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752C413CE57C11EBAE608E28F8AEA228.roa
File: 752C413CE57C11EBAE608E28F8AEA228.roa (raw, json)
Hash identifier: arg394HDNlSjQEETGT5Cn3Xp5jApet6esTit/HXtV8c=
Subject key identifier: 61:F9:78:C1:82:B7:F5:10:99:4B:75:F0:FF:60:FE:74:E0:B7:32:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 07B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752C413CE57C11EBAE608E28F8AEA228.roa
Signing time: Thu 15 Jul 2021 14:53:47 +0000
ROA not before: Thu 15 Jul 2021 14:53:43 +0000
ROA not after: Sat 09 Jul 2022 14:53:43 +0000
asID: 397630
IP address blocks: 154.201.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 14:53:43 2021 GMT
Not After : Jul 9 14:53:43 2022 GMT
Subject: CN=60f04bfb-4f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:ce:b0:95:b9:86:1f:17:56:73:e9:80:07:
2b:7a:95:c9:b0:75:d0:74:66:0b:d4:29:76:70:86:
2c:4a:80:8c:62:52:92:2e:6b:17:42:3a:c7:20:d0:
cc:c5:4d:ef:ca:55:d0:93:cb:b8:32:5e:ed:7b:58:
4e:98:59:84:b4:d0:21:39:1c:46:73:fd:09:f7:db:
1f:a4:96:9a:39:05:82:0a:a6:79:e2:cf:d0:d2:7e:
ea:0d:80:49:24:ce:e0:1f:af:c6:5f:6a:8c:a9:29:
b1:a1:53:62:3b:c8:05:60:19:ff:32:50:08:05:0c:
5f:88:a5:fe:83:8e:6a:3e:db:e3:9b:a9:03:82:fb:
2e:c9:62:01:86:01:30:77:25:b3:d8:9e:3d:4e:32:
9c:20:a0:f3:f5:59:75:c2:a1:01:24:e8:28:f8:80:
e6:e2:f4:22:5b:65:85:1a:ce:76:40:1b:a4:61:7f:
4a:0d:ba:5f:db:4d:d6:e5:63:e1:8d:b3:02:7e:82:
1b:0e:9c:0a:0b:61:29:9b:9c:ac:e7:e3:16:19:e9:
ab:2c:da:8b:18:1b:22:3b:9f:c2:bc:a5:75:ac:b4:
1d:13:93:d4:a6:b3:57:ed:bb:e5:37:13:6a:a5:15:
df:40:e1:27:2a:ce:87:a6:f6:e6:a0:90:61:4a:30:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F9:78:C1:82:B7:F5:10:99:4B:75:F0:FF:60:FE:74:E0:B7:32:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752C413CE57C11EBAE608E28F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:61:14:de:7d:a7:41:94:13:fb:e1:d8:f6:e7:7e:09:48:e7:
a0:c2:39:ca:c6:d7:10:38:a5:d7:43:04:ce:bc:c4:0a:4b:e5:
2e:a6:bd:bf:63:b9:6d:44:b5:1b:de:75:5c:b4:c6:07:2a:b1:
8c:d6:b8:6d:c6:ad:0c:4c:58:36:ff:1d:8d:11:b3:98:4a:fc:
b8:b4:e4:ca:e3:c0:c1:bc:74:60:72:a9:c9:61:53:0b:ae:f6:
96:e6:44:f4:c8:3a:bf:04:64:cb:01:95:ca:fb:3c:d6:a1:50:
14:4e:0a:61:96:ac:10:9f:9d:76:51:c2:b7:6e:81:a7:b5:59:
45:c6:04:fd:75:db:46:f6:9e:0b:2f:0c:19:e8:d8:af:95:df:
b1:e3:98:3f:16:3b:10:24:da:cd:71:7b:2e:db:7c:6b:52:f1:
cf:9a:69:f5:b4:03:61:91:86:88:88:f4:d9:4d:b0:5e:1b:81:
ec:fe:46:b0:ab:8c:cf:89:a0:fd:07:51:26:ce:c2:ea:83:4a:
af:16:e3:33:78:b8:ae:53:8d:91:2b:d0:46:d2:5f:7f:0d:68:
47:95:cd:b7:cf:21:34:9f:a8:4a:0a:ce:f6:24:ba:6d:ef:b7:
03:14:54:e6:1f:73:3c:fa:21:29:ce:8c:4d:2d:b9:55:60:e7:
01:bd:02:fe
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMTA3MTUxNDUzNDNaFw0yMjA3MDkxNDUzNDNaMBgxFjAU
BgNVBAMTDTYwZjA0YmZiLTRmNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDf8M6wlbmGHxdWc+mAByt6lcmwddB0ZgvUKXZwhixKgIxiUpIuaxdCOscg
0MzFTe/KVdCTy7gyXu17WE6YWYS00CE5HEZz/Qn32x+klpo5BYIKpnniz9DSfuoN
gEkkzuAfr8ZfaoypKbGhU2I7yAVgGf8yUAgFDF+Ipf6Djmo+2+ObqQOC+y7JYgGG
ATB3JbPYnj1OMpwgoPP1WXXCoQEk6Cj4gObi9CJbZYUaznZAG6Rhf0oNul/bTdbl
Y+GNswJ+ghsOnAoLYSmbnKzn4xYZ6ass2osYGyI7n8K8pXWstB0Tk9Sms1ftu+U3
E2qlFd9A4Scqzoem9uagkGFKMK6NAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYfl4
wYK39RCZS3Xw/2D+dOC3Ml4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzc1MkM0MTNDRTU3QzExRUJBRTYwOEUyOEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayS0wDQYJKoZIhvcNAQEL
BQADggEBAJ1hFN59p0GUE/vh2PbnfglI56DCOcrG1xA4pddDBM68xApL5S6mvb9j
uW1EtRvedVy0xgcqsYzWuG3GrQxMWDb/HY0Rs5hK/Li05MrjwMG8dGByqclhUwuu
9pbmRPTIOr8EZMsBlcr7PNahUBROCmGWrBCfnXZRwrdugae1WUXGBP1120b2ngsv
DBno2K+V37HjmD8WOxAk2s1xey7bfGtS8c+aafW0A2GRhoiI9NlNsF4bgez+RrCr
jM+JoP0HUSbOwuqDSq8W4zN4uK5TjZEr0EbSX38NaEeVzbfPITSfqEoKzvYkum3v
twMUVOYfczz6ISnOjE0tuVVg5wG9Av4=
-----END CERTIFICATE-----
Generated at Sun Jul 6 23:42:54 2025 by rpki-client