Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA9E9FC8CE211EEAFC65A744AD9E6FC.roa
File: 7EA9E9FC8CE211EEAFC65A744AD9E6FC.roa (raw, json)
Hash identifier: TtPvWPLHhTGuDHqOYxYHHqmXjvQMqvrMFvPYBVf5e78=
Subject key identifier: 13:0D:8C:DF:DD:62:ED:7C:AA:A8:97:EC:A5:B1:32:72:4F:2B:6C:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5554
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA9E9FC8CE211EEAFC65A744AD9E6FC.roa
Signing time: Mon 27 Nov 2023 05:04:51 +0000
ROA not before: Mon 27 Nov 2023 05:04:48 +0000
ROA not after: Tue 26 Dec 2023 05:04:48 +0000
asID: 62240
IP address blocks: 154.195.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21844 (0x5554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 05:04:48 2023 GMT
Not After : Dec 26 05:04:48 2023 GMT
Subject: CN=65642373-6023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:a9:e9:b2:df:77:5a:71:fd:46:e2:bf:36:
cb:71:09:c6:e4:55:9c:bf:e9:22:86:15:1d:fb:2a:
2a:88:fc:34:d3:06:a2:6b:3d:8e:64:c7:b3:01:70:
13:7c:06:e3:1d:0f:31:ef:56:81:02:32:e6:67:13:
76:53:85:c1:83:e9:9b:d5:45:0e:ca:75:5f:d2:b5:
7d:6f:74:78:45:1b:ae:5d:3f:af:99:dc:56:dc:af:
75:a0:a5:41:66:58:e0:46:ef:d5:b5:36:b1:2a:74:
b1:ab:90:d1:fe:41:ab:bf:35:c8:bf:c6:fa:af:7a:
84:49:76:ba:7b:20:87:f2:31:68:14:33:95:f0:cd:
40:ce:6c:81:b2:4b:29:26:eb:1c:14:a9:87:88:25:
ba:5e:a0:57:13:2c:fb:e5:05:cf:c4:29:63:7b:33:
d6:77:96:4a:a6:85:48:e3:e1:bc:c9:78:53:a8:ec:
1c:a3:b5:77:98:5e:06:f3:d1:e0:27:e4:48:03:60:
a6:0f:9a:79:2a:aa:85:00:b5:8e:fe:cb:f8:ae:ad:
53:95:8e:f1:bd:37:1c:27:26:16:e2:ad:1a:02:f3:
3a:ad:fe:24:68:40:ef:3d:a6:5d:cf:03:b4:98:91:
63:ef:bb:57:02:5e:02:9e:56:7f:c0:5a:1d:f6:d8:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:8C:DF:DD:62:ED:7C:AA:A8:97:EC:A5:B1:32:72:4F:2B:6C:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA9E9FC8CE211EEAFC65A744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:06:ca:65:d7:f8:80:59:f2:32:f0:88:fb:be:82:b8:e2:f7:
e4:e0:18:ba:fe:c0:5d:c0:28:45:0c:c5:20:15:4b:ee:31:68:
3d:12:1f:53:b5:f9:e8:0a:30:91:5e:46:0c:4d:ea:1c:d2:db:
8c:3e:fd:e9:6d:39:e5:28:72:10:60:5f:b6:75:02:63:d2:76:
64:fd:d6:b3:c2:68:cf:fc:d1:91:18:2b:26:43:7c:6f:22:32:
55:45:b4:fa:a5:7c:22:5b:d4:66:8c:6d:ea:7e:aa:0f:d1:e1:
5a:21:87:b0:a9:79:0f:88:b9:8e:ca:bc:72:78:25:93:88:cb:
c8:8f:14:4c:5a:94:49:49:12:7d:0f:9d:62:16:4c:ef:87:55:
24:8d:0d:a9:af:fd:24:7f:27:2c:ec:5a:eb:f2:5b:fd:99:c4:
65:98:56:51:64:d4:21:2a:52:5e:50:6b:33:7b:ec:e8:0e:c5:
d9:c2:4b:58:4e:5b:b5:b6:be:5f:2a:3e:4a:cf:67:4a:93:41:
5c:7d:18:d2:b8:81:37:6c:e5:ce:15:12:9a:d6:60:d1:27:21:
d7:40:03:50:95:74:74:bd:8a:4b:dc:9b:4e:f4:2a:d9:7f:0f:
ad:28:26:75:f1:23:02:d3:2c:e6:1d:aa:00:79:a9:c2:18:37:
82:40:56:72
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVVQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNTA0NDhaFw0yMzEyMjYwNTA0NDhaMBgxFjAU
BgNVBAMTDTY1NjQyMzczLTYwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA76npst93WnH9RuK/NstxCcbkVZy/6SKGFR37KiqI/DTTBqJrPY5kx7MB
cBN8BuMdDzHvVoECMuZnE3ZThcGD6ZvVRQ7KdV/StX1vdHhFG65dP6+Z3Fbcr3Wg
pUFmWOBG79W1NrEqdLGrkNH+Qau/Nci/xvqveoRJdrp7IIfyMWgUM5XwzUDObIGy
Sykm6xwUqYeIJbpeoFcTLPvlBc/EKWN7M9Z3lkqmhUjj4bzJeFOo7ByjtXeYXgbz
0eAn5EgDYKYPmnkqqoUAtY7+y/iurVOVjvG9NxwnJhbirRoC8zqt/iRoQO89pl3P
A7SYkWPvu1cCXgKeVn/AWh322GHTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEw2M
391i7XyqqJfspbEyck8rbPgwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzdFQTlFOUZDOENFMjExRUVBRkM2NUE3NDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawwAwDQYJKoZIhvcNAQEL
BQADggEBAA4GymXX+IBZ8jLwiPu+grji9+TgGLr+wF3AKEUMxSAVS+4xaD0SH1O1
+egKMJFeRgxN6hzS24w+/eltOeUochBgX7Z1AmPSdmT91rPCaM/80ZEYKyZDfG8i
MlVFtPqlfCJb1GaMbep+qg/R4Vohh7CpeQ+IuY7KvHJ4JZOIy8iPFExalElJEn0P
nWIWTO+HVSSNDamv/SR/JyzsWuvyW/2ZxGWYVlFk1CEqUl5QazN77OgOxdnCS1hO
W7W2vl8qPkrPZ0qTQVx9GNK4gTds5c4VEprWYNEnIddAA1CVdHS9ikvcm070Ktl/
D60oJnXxIwLTLOYdqgB5qcIYN4JAVnI=
-----END CERTIFICATE-----
Generated at Fri May 9 11:27:26 2025 by rpki-client