Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83B951C0F6B911EF8067A74B762E951A.roa
File: 83B951C0F6B911EF8067A74B762E951A.roa (raw, json)
Hash identifier: +ULvPBuQSDWdz5g0DYlVsgnJm3vHQHMKUfsFIZnl8vM=
Subject key identifier: D8:43:25:D8:66:C6:8C:13:8D:83:93:72:04:8F:18:38:AB:8B:53:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83B951C0F6B911EF8067A74B762E951A.roa
Signing time: Sat 01 Mar 2025 16:23:31 +0000
ROA not before: Sat 01 Mar 2025 16:23:27 +0000
ROA not after: Mon 31 Mar 2025 16:23:27 +0000
asID: 202656
IP address blocks: 154.219.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93919 (0x16edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:23:27 2025 GMT
Not After : Mar 31 16:23:27 2025 GMT
Subject: CN=67c33483-0185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:9e:78:ec:ef:34:ca:f2:53:54:f8:55:05:
73:68:74:ee:b8:29:9a:45:f4:c8:c0:9f:67:3e:42:
72:13:64:5c:10:2d:05:24:5f:f4:4d:ae:c7:fa:13:
31:05:3f:3d:18:5c:c1:62:9f:9e:ee:10:75:81:2f:
f1:be:d1:4f:f5:3f:d5:eb:dd:63:11:12:e6:73:f1:
b7:cd:86:76:bb:66:eb:63:a8:00:2d:c3:c6:03:5b:
59:10:20:47:d9:2d:ba:10:36:f8:c9:5a:e5:61:0e:
dc:ce:e0:a3:b3:0d:bf:3a:2d:de:6c:2b:1f:eb:85:
df:9a:40:54:65:71:04:c2:6f:bf:1a:c6:d8:26:2c:
fb:e7:8a:b8:d2:44:f1:fd:5c:3e:93:39:b7:b0:b2:
d2:ee:73:91:61:fb:ab:bf:e4:30:af:3e:b8:30:7f:
2d:77:74:c5:d4:7a:f0:4a:9a:f7:a5:32:15:1c:27:
6d:c8:09:73:a1:79:c8:cf:09:1f:9c:9b:d8:97:22:
44:d1:e8:80:e6:e6:e2:a7:3b:d9:20:e0:08:0d:8a:
ff:e5:61:80:af:94:df:0e:fe:15:55:9f:ee:52:f8:
82:ce:a7:f0:7c:94:e0:0a:00:1a:5e:b1:1c:fb:a2:
11:0e:ed:19:74:75:52:86:5d:97:72:86:88:21:88:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:43:25:D8:66:C6:8C:13:8D:83:93:72:04:8F:18:38:AB:8B:53:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83B951C0F6B911EF8067A74B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.220.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c9:9f:e9:7c:57:0e:44:e1:80:11:d7:e5:8e:28:b7:51:85:
df:e7:a2:f1:ed:68:4d:e7:a2:03:3b:f7:a7:70:21:f7:a4:ce:
30:58:05:ea:ce:b4:15:2b:d3:20:e8:88:de:1f:56:ae:8f:30:
85:93:7f:80:af:f4:41:a9:04:3b:cc:0b:19:45:64:e7:fe:79:
3c:4e:c5:31:59:a4:1a:f3:45:34:da:a1:a4:d0:f9:60:9a:93:
0a:70:a5:29:15:fd:82:e2:aa:d2:0e:7b:fa:ad:a7:59:92:ae:
99:8c:ff:70:2f:30:aa:b3:ba:29:f3:51:2c:0e:aa:e1:4f:9d:
21:a7:84:7a:27:3d:65:53:7a:fb:3e:0e:c5:0b:6a:1a:f4:f8:
ad:91:bf:f6:bb:66:3e:f0:46:46:d8:fc:0c:8f:65:2c:2f:2e:
15:96:9b:8b:cf:5d:03:56:63:22:21:a9:76:1c:24:18:4d:cd:
27:ce:46:43:1a:ad:8f:3d:56:34:f3:77:b8:00:61:99:d1:18:
4f:71:68:3b:50:59:4c:a2:09:eb:fb:a8:6b:07:b5:32:de:a6:
08:db:8c:42:20:d6:6d:d6:eb:f7:64:91:a5:15:1a:c1:78:e5:
b6:0b:37:1a:ac:cb:11:50:6a:6d:07:5b:aa:06:8a:88:b7:f4:
37:71:8a:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW7fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTYyMzI3WhcNMjUwMzMxMTYyMzI3WjAYMRYw
FAYDVQQDEw02N2MzMzQ4My0wMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxqaeeOzvNMryU1T4VQVzaHTuuCmaRfTIwJ9nPkJyE2RcEC0FJF/0Ta7H
+hMxBT89GFzBYp+e7hB1gS/xvtFP9T/V691jERLmc/G3zYZ2u2brY6gALcPGA1tZ
ECBH2S26EDb4yVrlYQ7czuCjsw2/Oi3ebCsf64XfmkBUZXEEwm+/GsbYJiz754q4
0kTx/Vw+kzm3sLLS7nORYfurv+Qwrz64MH8td3TF1HrwSpr3pTIVHCdtyAlzoXnI
zwkfnJvYlyJE0eiA5ubipzvZIOAIDYr/5WGAr5TfDv4VVZ/uUviCzqfwfJTgCgAa
XrEc+6IRDu0ZdHVShl2XcoaIIYg5vQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNhD
JdhmxowTjYOTcgSPGDiri1OeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84M0I5NTFDMEY2QjkxMUVGODA2N0E3NEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvcMA0GCSqGSIb3DQEB
CwUAA4IBAQCTyZ/pfFcOROGAEdfljii3UYXf56Lx7WhN56IDO/encCH3pM4wWAXq
zrQVK9Mg6IjeH1aujzCFk3+Ar/RBqQQ7zAsZRWTn/nk8TsUxWaQa80U02qGk0Plg
mpMKcKUpFf2C4qrSDnv6radZkq6ZjP9wLzCqs7op81EsDqrhT50hp4R6Jz1lU3r7
Pg7FC2oa9Pitkb/2u2Y+8EZG2PwMj2UsLy4VlpuLz10DVmMiIal2HCQYTc0nzkZD
Gq2PPVY083e4AGGZ0RhPcWg7UFlMognr+6hrB7Uy3qYI24xCINZt1uv3ZJGlFRrB
eOW2CzcarMsRUGptB1uqBoqIt/Q3cYpN
-----END CERTIFICATE-----
Generated at Fri May 9 12:16:08 2025 by rpki-client