Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D26C7B2F81611EFB6B9AF8C762E951A.roa
File: 7D26C7B2F81611EFB6B9AF8C762E951A.roa (raw, json)
Hash identifier: w1lJg56/6wSAYSUt14gQQryWbTfQwjmRbzeKvC36mOo=
Subject key identifier: F6:04:F4:91:03:F0:16:1B:2F:BF:A4:52:D2:25:20:BE:C6:59:E3:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D26C7B2F81611EFB6B9AF8C762E951A.roa
Signing time: Mon 03 Mar 2025 10:01:34 +0000
ROA not before: Mon 03 Mar 2025 10:01:30 +0000
ROA not after: Mon 31 Mar 2025 10:01:30 +0000
asID: 202656
IP address blocks: 154.219.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94186 (0x16fea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:01:30 2025 GMT
Not After : Mar 31 10:01:30 2025 GMT
Subject: CN=67c57dfe-e6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:74:49:f7:44:85:9e:2c:f5:0c:4a:2a:32:
39:4f:df:57:2d:c8:5e:71:82:4b:c5:93:61:7b:e9:
2c:6d:33:98:57:52:f2:38:63:9b:59:33:f3:88:2a:
fb:3d:97:70:cf:04:b7:af:62:97:c9:08:21:e7:c8:
71:ce:ec:75:26:97:67:c5:78:ae:b3:99:91:1a:67:
0a:f8:c0:93:2c:45:b3:6e:de:1b:ba:9b:b7:9d:5e:
26:32:b3:08:3f:da:39:85:17:10:80:95:54:81:12:
cf:74:85:c3:fa:a4:bf:95:ee:80:6a:b1:51:99:e8:
e2:af:ca:93:84:c5:61:35:af:1d:3f:7f:08:e3:5e:
e7:c8:d3:47:21:ca:e9:aa:94:74:a1:03:50:a5:65:
7c:3d:df:e4:f2:42:b4:c0:b4:9b:93:30:3a:24:94:
f9:5b:c7:eb:6d:ef:2b:30:f6:b9:55:c1:e6:60:15:
24:b6:25:0d:6f:10:2d:dd:a1:94:9f:e1:1b:33:09:
f2:37:e0:74:05:8e:3e:56:84:8c:b4:cd:da:bd:7a:
8f:0f:b0:bf:39:29:2a:2a:03:29:13:83:00:61:b9:
9f:95:f5:36:3a:ec:a4:bf:ab:77:51:62:a1:46:a2:
b6:b2:15:ea:c9:66:3b:72:42:33:1d:b6:f9:4e:e2:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:04:F4:91:03:F0:16:1B:2F:BF:A4:52:D2:25:20:BE:C6:59:E3:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D26C7B2F81611EFB6B9AF8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.255.0/24
Signature Algorithm: sha256WithRSAEncryption
74:30:83:f6:a0:94:58:42:7d:23:ce:59:4e:5e:66:cc:52:b1:
b3:9c:87:fb:8a:f9:15:d0:fd:7d:16:6c:e2:99:7f:8d:a1:55:
c8:f4:69:19:75:7f:d3:36:0d:d1:2e:2f:02:65:2d:57:8e:b0:
bd:ec:9b:08:f8:85:f2:50:2c:7a:cc:7c:1d:aa:95:7f:02:e2:
b5:c3:57:76:0b:cd:05:8c:66:4c:43:85:2b:91:34:0e:21:08:
c9:87:0f:84:6a:7a:61:41:4f:ca:24:dd:f6:62:e5:2b:c3:52:
c3:00:54:a8:9a:2b:04:36:fb:56:d1:7f:b2:d1:67:25:91:bd:
60:3c:19:0c:c9:94:b1:e3:38:98:67:fa:27:64:27:e3:b0:e4:
1c:64:9e:47:4a:53:02:da:19:64:83:ac:37:9b:ad:7d:a9:dd:
bd:db:f6:23:30:68:0d:cc:06:a2:d0:77:fb:b3:ae:cc:5b:19:
bc:d9:32:0e:f4:fa:01:b4:25:78:eb:e7:1e:ce:10:8d:1e:ab:
57:b6:f4:02:ac:66:f2:d1:b6:dc:19:c0:32:ba:48:02:03:9c:
00:0b:9b:e8:99:ca:cb:bd:b5:3e:47:1a:be:fd:f6:1d:08:03:
76:70:99:ae:8f:63:48:a5:58:26:b4:a7:1d:75:39:e1:17:56:
5c:c1:ef:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW/qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTAwMTMwWhcNMjUwMzMxMTAwMTMwWjAYMRYw
FAYDVQQDEw02N2M1N2RmZS1lNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnVZ0SfdEhZ4s9QxKKjI5T99XLchecYJLxZNhe+ksbTOYV1LyOGObWTPz
iCr7PZdwzwS3r2KXyQgh58hxzux1JpdnxXius5mRGmcK+MCTLEWzbt4bupu3nV4m
MrMIP9o5hRcQgJVUgRLPdIXD+qS/le6AarFRmejir8qThMVhNa8dP38I417nyNNH
IcrpqpR0oQNQpWV8Pd/k8kK0wLSbkzA6JJT5W8frbe8rMPa5VcHmYBUktiUNbxAt
3aGUn+EbMwnyN+B0BY4+VoSMtM3avXqPD7C/OSkqKgMpE4MAYbmflfU2Ouykv6t3
UWKhRqK2shXqyWY7ckIzHbb5TuKsrQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPYE
9JED8BYbL7+kUtIlIL7GWeNmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RDI2QzdCMkY4MTYxMUVGQjZCOUFGOEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtv/MA0GCSqGSIb3DQEB
CwUAA4IBAQB0MIP2oJRYQn0jzllOXmbMUrGznIf7ivkV0P19FmzimX+NoVXI9GkZ
dX/TNg3RLi8CZS1XjrC97JsI+IXyUCx6zHwdqpV/AuK1w1d2C80FjGZMQ4UrkTQO
IQjJhw+EanphQU/KJN32YuUrw1LDAFSomisENvtW0X+y0Wclkb1gPBkMyZSx4ziY
Z/onZCfjsOQcZJ5HSlMC2hlkg6w3m619qd292/YjMGgNzAai0Hf7s67MWxm82TIO
9PoBtCV46+cezhCNHqtXtvQCrGby0bbcGcAyukgCA5wAC5vomcrLvbU+Rxq+/fYd
CAN2cJmuj2NIpVgmtKcddTnhF1Zcwe8S
-----END CERTIFICATE-----
Generated at Fri May 9 05:34:59 2025 by rpki-client