Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80BE607CF29B11EF9F51B99A762E951A.roa
File: 80BE607CF29B11EF9F51B99A762E951A.roa (raw, json)
Hash identifier: Bu8ZxWUqY7PwtmQvwfpN0hVcun0gbEToPEuu5pwy8YY=
Subject key identifier: 28:69:86:89:91:02:4E:78:38:D4:A5:26:52:9F:F0:CF:B7:75:AF:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80BE607CF29B11EF9F51B99A762E951A.roa
Signing time: Mon 24 Feb 2025 10:38:37 +0000
ROA not before: Mon 24 Feb 2025 10:38:33 +0000
ROA not after: Wed 26 Mar 2025 10:38:33 +0000
asID: 5065
IP address blocks: 154.94.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89016 (0x15bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:38:33 2025 GMT
Not After : Mar 26 10:38:33 2025 GMT
Subject: CN=67bc4c2c-12f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:f9:af:e1:9f:4f:e8:78:25:31:48:27:6c:
72:c0:ae:10:25:32:93:32:7c:7c:4f:03:a4:f5:1f:
05:d5:de:7e:e2:41:c0:3a:cc:c2:e1:36:cb:fd:8a:
41:3c:c4:f8:1b:4b:c5:4d:b8:22:80:c4:86:73:18:
b6:5e:2d:1f:72:c5:c8:1d:3a:db:d9:15:54:55:c3:
12:32:4d:5b:0b:7d:f8:82:07:63:26:4e:60:1c:4b:
2a:b7:a5:6e:2e:71:b2:78:ff:50:f0:73:96:ec:e8:
81:db:62:23:5d:cb:a6:a7:38:17:f0:d9:20:1f:93:
18:f4:dc:2f:1a:12:53:2c:55:4f:58:f5:3e:95:f7:
c9:24:1d:14:a7:22:8a:4b:b3:ac:40:28:ce:0e:68:
28:1d:3e:78:4d:3c:33:5b:fb:2e:e2:ec:01:ff:54:
c6:22:e4:0d:f7:9a:56:eb:2b:38:fe:66:cf:6a:b3:
2c:6f:0e:1f:c6:c4:66:47:af:cc:de:05:0f:9c:bc:
87:81:9b:16:b5:79:f0:f1:62:01:80:91:b4:09:fc:
a4:54:1b:55:4a:21:76:6e:05:24:ba:b6:ac:2c:d6:
1d:0c:96:04:f2:07:1d:77:20:f1:68:42:86:5d:e9:
f2:04:b5:2c:2a:78:00:94:35:6f:75:7a:4a:e1:b9:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:86:89:91:02:4E:78:38:D4:A5:26:52:9F:F0:CF:B7:75:AF:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80BE607CF29B11EF9F51B99A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3b:e8:fe:9f:68:97:06:20:e9:ff:e5:c2:67:23:c8:47:47:
c4:9d:06:a5:b3:7e:f1:48:e5:34:23:1d:a7:53:53:13:f6:8b:
85:31:a7:9e:f7:38:15:26:ff:1e:6f:af:b8:18:32:0f:7d:1c:
84:48:6b:ab:ec:37:69:2d:3c:e0:68:46:17:69:3b:b6:05:89:
67:0c:4b:67:a8:bc:74:52:8b:a1:23:28:32:af:8c:b5:2a:0c:
da:8a:27:b3:b8:67:d7:ba:55:aa:63:8f:cc:39:87:da:ed:ba:
19:88:ee:89:94:7f:c1:38:42:24:71:bd:86:c2:db:74:54:a8:
12:48:c2:27:20:6f:56:10:bb:a3:5a:ea:a4:ba:c3:d4:f3:b7:
cc:98:e2:d2:3e:70:29:56:e4:52:5b:95:dc:bf:7f:8a:49:5b:
48:65:ac:49:37:d8:10:be:59:c9:d6:65:ab:68:85:a0:92:1b:
e4:ce:e2:ff:70:b0:5f:a7:da:bb:7d:e8:94:fd:07:9b:6d:6e:
23:1c:d0:d5:23:94:ec:15:b5:e0:df:ae:b2:77:a7:a6:0c:a1:
2b:c1:fc:0a:44:4e:ec:7a:c9:0e:f1:a2:c6:d7:fd:35:30:46:
25:65:6c:a7:69:68:59:d6:eb:47:4b:71:c4:3a:41:d3:a9:5e:
58:ad:9c:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVu4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTAzODMzWhcNMjUwMzI2MTAzODMzWjAYMRYw
FAYDVQQDEw02N2JjNGMyYy0xMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Ir5r+GfT+h4JTFIJ2xywK4QJTKTMnx8TwOk9R8F1d5+4kHAOszC4TbL
/YpBPMT4G0vFTbgigMSGcxi2Xi0fcsXIHTrb2RVUVcMSMk1bC334ggdjJk5gHEsq
t6VuLnGyeP9Q8HOW7OiB22IjXcumpzgX8NkgH5MY9NwvGhJTLFVPWPU+lffJJB0U
pyKKS7OsQCjODmgoHT54TTwzW/su4uwB/1TGIuQN95pW6ys4/mbParMsbw4fxsRm
R6/M3gUPnLyHgZsWtXnw8WIBgJG0CfykVBtVSiF2bgUkurasLNYdDJYE8gcddyDx
aEKGXenyBLUsKngAlDVvdXpK4bkT3wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFChp
homRAk54ONSlJlKf8M+3da/qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MEJFNjA3Q0YyOUIxMUVGOUY1MUI5OUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLO+j+n2iXBiDp/+XCZyPIR0fEnQals37xSOU0Ix2nU1MT9ouFMaee
9zgVJv8eb6+4GDIPfRyESGur7DdpLTzgaEYXaTu2BYlnDEtnqLx0UouhIygyr4y1
KgzaiiezuGfXulWqY4/MOYfa7boZiO6JlH/BOEIkcb2Gwtt0VKgSSMInIG9WELuj
WuqkusPU87fMmOLSPnApVuRSW5Xcv3+KSVtIZaxJN9gQvlnJ1mWraIWgkhvkzuL/
cLBfp9q7feiU/QebbW4jHNDVI5TsFbXg366yd6emDKErwfwKRE7seskO8aLG1/01
MEYlZWynaWhZ1utHS3HEOkHTqV5YrZwm
-----END CERTIFICATE-----
Generated at Fri May 9 06:32:59 2025 by rpki-client