Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842384DED8CB11EF93CCE696762E951A.roa
File: 842384DED8CB11EF93CCE696762E951A.roa (raw, json)
Hash identifier: tk8bzUkQXWa4kMaL9im1GeH2Dx14/8CTfJnUd6dnLqE=
Subject key identifier: 2F:32:9C:BF:F6:8D:98:23:9D:8D:CF:B4:67:19:7B:E1:13:ED:A9:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842384DED8CB11EF93CCE696762E951A.roa
Signing time: Wed 22 Jan 2025 14:16:48 +0000
ROA not before: Wed 22 Jan 2025 14:16:44 +0000
ROA not after: Tue 01 Apr 2025 14:16:44 +0000
asID: 63139
IP address blocks: 154.93.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81822 (0x13f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:16:44 2025 GMT
Not After : Apr 1 14:16:44 2025 GMT
Subject: CN=6790fdd0-d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:14:39:f7:66:0f:b0:f8:be:bd:01:88:44:
70:82:25:d8:91:b2:fc:0a:15:94:c6:b7:a7:c9:08:
cf:e0:42:43:82:83:dc:90:b6:7a:55:46:3d:d6:cb:
a6:d5:65:bb:86:88:d9:ad:41:c1:fa:bc:40:ba:be:
72:cb:a3:99:81:b0:94:53:5a:99:d9:ad:89:4c:d0:
c1:48:35:35:ab:3c:9a:e2:39:5c:6a:eb:56:75:ea:
0c:b7:f6:1e:74:46:5b:c4:d3:d4:57:7f:a8:0c:ea:
2c:0c:99:b5:76:c5:59:48:66:77:08:fd:59:80:1e:
80:3b:5f:5b:30:1a:07:f7:b1:26:19:14:48:a1:e1:
4c:aa:01:ca:35:a1:71:35:ec:2b:67:a7:2b:e4:8d:
7e:98:e7:28:08:fd:fd:50:9c:7b:34:78:10:49:bf:
24:72:25:57:4c:34:7b:67:02:43:d3:3e:11:38:d3:
d2:ed:23:3d:07:a9:7a:a6:13:1d:46:5d:f6:d0:cb:
55:70:7f:2a:db:b9:4f:2a:ad:45:b9:3a:35:56:2f:
c0:52:ca:1c:18:2a:0a:90:1f:d3:2a:26:30:dd:ab:
6b:43:1a:b7:4b:c3:1b:fb:25:46:1d:d4:c5:69:be:
13:50:04:42:d2:8f:6a:1d:08:fb:18:43:c8:7a:fc:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:32:9C:BF:F6:8D:98:23:9D:8D:CF:B4:67:19:7B:E1:13:ED:A9:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/842384DED8CB11EF93CCE696762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.71.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4f:ad:21:6a:43:7b:7e:0c:4a:73:c8:8b:f3:d6:9e:ad:80:
92:61:ad:88:d2:44:a2:61:9d:28:87:0e:ab:69:e8:5b:91:83:
8b:8b:12:f8:ab:7e:d3:a7:71:8f:6d:1b:f0:b4:46:a6:ee:10:
c2:e2:73:79:bd:1c:53:7e:9c:df:fe:fd:b8:e3:fd:d2:40:c4:
f1:bc:bf:32:37:0e:e7:05:02:02:cc:1f:a9:a2:f4:e4:ee:ec:
00:6c:aa:a9:5d:a3:1a:75:07:69:f4:e5:14:72:3a:07:cd:c9:
11:fb:11:19:49:f4:bf:92:86:f7:89:c5:a5:97:33:e6:1b:ab:
8f:ed:a2:a2:b3:79:13:dd:e2:f5:eb:8b:a9:dc:56:4f:1f:53:
8b:2d:6a:08:39:55:12:89:5e:63:1b:0a:8f:60:4a:79:79:19:
19:a5:eb:b8:22:3f:5a:18:78:74:02:65:8f:d0:14:f5:ae:42:
26:b1:ad:6f:56:36:ae:34:26:3e:56:f1:6e:7c:88:da:95:54:
36:7b:f0:f4:43:3f:04:f6:ff:8c:bf:8b:d8:34:66:f5:7c:06:
06:59:b7:8e:86:57:f4:66:6e:5c:63:6f:ea:ad:25:9a:6f:27:
35:f6:ca:b2:3b:12:62:9c:19:09:08:3d:03:33:38:cb:a0:92:
7f:8d:b5:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT+eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTQxNjQ0WhcNMjUwNDAxMTQxNjQ0WjAYMRYw
FAYDVQQDEw02NzkwZmRkMC1kNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxFUUOfdmD7D4vr0BiERwgiXYkbL8ChWUxrenyQjP4EJDgoPckLZ6VUY9
1sum1WW7hojZrUHB+rxAur5yy6OZgbCUU1qZ2a2JTNDBSDU1qzya4jlcautWdeoM
t/YedEZbxNPUV3+oDOosDJm1dsVZSGZ3CP1ZgB6AO19bMBoH97EmGRRIoeFMqgHK
NaFxNewrZ6cr5I1+mOcoCP39UJx7NHgQSb8kciVXTDR7ZwJD0z4RONPS7SM9B6l6
phMdRl320MtVcH8q27lPKq1FuTo1Vi/AUsocGCoKkB/TKiYw3atrQxq3S8Mb+yVG
HdTFab4TUARC0o9qHQj7GEPIevyFuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC8y
nL/2jZgjnY3PtGcZe+ET7anjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NDIzODRERUQ4Q0IxMUVGOTNDQ0U2OTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1HMA0GCSqGSIb3DQEB
CwUAA4IBAQB1T60hakN7fgxKc8iL89aerYCSYa2I0kSiYZ0ohw6raehbkYOLixL4
q37Tp3GPbRvwtEam7hDC4nN5vRxTfpzf/v244/3SQMTxvL8yNw7nBQICzB+povTk
7uwAbKqpXaMadQdp9OUUcjoHzckR+xEZSfS/kob3icWllzPmG6uP7aKis3kT3eL1
64up3FZPH1OLLWoIOVUSiV5jGwqPYEp5eRkZpeu4Ij9aGHh0AmWP0BT1rkImsa1v
VjauNCY+VvFufIjalVQ2e/D0Qz8E9v+Mv4vYNGb1fAYGWbeOhlf0Zm5cY2/qrSWa
byc19sqyOxJinBkJCD0DMzjLoJJ/jbUp
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:45 2025 by rpki-client