Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/874B45A0F8F811EF9E009D8B762E951A.roa
File: 874B45A0F8F811EF9E009D8B762E951A.roa (raw, json)
Hash identifier: R6U7gYWIZN/1Z8hEcJbrVDMk9NyZajZMNW3TnRVA994=
Subject key identifier: E0:2A:19:C2:8E:51:A2:76:8F:68:88:91:54:D6:3E:C3:63:5E:20:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/874B45A0F8F811EF9E009D8B762E951A.roa
Signing time: Tue 04 Mar 2025 12:59:38 +0000
ROA not before: Tue 04 Mar 2025 12:59:33 +0000
ROA not after: Mon 07 Apr 2025 12:59:33 +0000
asID: 6079
IP address blocks: 154.217.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94666 (0x171ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 12:59:33 2025 GMT
Not After : Apr 7 12:59:33 2025 GMT
Subject: CN=67c6f93a-c064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:09:ea:cf:b0:d4:1c:c8:56:94:40:50:18:
7a:65:5e:66:97:b5:74:78:63:1a:60:96:3f:e4:5a:
78:f0:18:58:a3:2f:95:03:d9:8b:1c:a0:66:24:6e:
db:37:94:45:b1:e8:a8:cd:40:b8:7f:9b:38:b3:6a:
08:52:7c:71:f1:8c:bb:fa:df:9a:4f:9c:31:8c:fb:
48:03:eb:00:b7:42:af:44:a0:21:ac:17:b2:9a:69:
ee:8a:4b:44:cf:ae:f0:65:5f:1b:eb:fa:79:65:65:
81:81:1d:72:5e:ee:fb:d3:d8:5c:ac:bf:f1:99:db:
f7:8a:35:8b:53:4b:24:74:bf:fd:8f:94:38:ea:d2:
4d:eb:3c:a5:b8:84:cb:3b:57:bb:81:db:2a:24:6e:
b4:0d:32:78:fb:f9:3e:24:af:93:a5:63:9b:3c:af:
79:89:71:39:b6:a6:28:60:a3:5a:fd:d6:4d:31:04:
ac:07:37:16:11:82:6f:32:38:d9:98:17:9f:61:88:
34:76:26:1a:01:1b:0a:3c:e9:d9:f6:80:b1:c1:d4:
ba:9e:cd:b8:cc:f1:d1:8e:19:d0:75:50:f1:f0:77:
e8:db:98:4a:fc:76:b0:a7:eb:7f:a1:45:86:5b:15:
92:b2:b3:7d:29:43:ac:1f:30:d6:0a:f0:70:a1:7b:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:19:C2:8E:51:A2:76:8F:68:88:91:54:D6:3E:C3:63:5E:20:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/874B45A0F8F811EF9E009D8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:30:c9:2a:14:82:c9:ef:10:7b:0e:40:21:79:f5:cd:de:50:
dd:1b:f9:4b:a7:7a:aa:0b:6c:af:67:ed:13:71:14:69:65:28:
f0:a7:7f:ae:0d:94:08:bc:77:68:dd:d0:cf:9c:ce:b7:d1:c6:
7f:27:19:fd:91:50:8c:3c:51:93:df:3b:0c:78:dc:e5:d2:9d:
90:81:fe:31:ca:a5:85:20:1e:43:57:82:1d:ad:16:21:18:87:
12:9a:82:c3:28:3b:ef:36:42:e7:59:88:9c:f4:f3:30:b3:8c:
96:f0:e2:dd:6f:26:aa:8a:aa:0e:6a:0f:fa:9a:0b:fe:cf:9d:
e8:97:f2:a1:19:de:33:b7:56:24:3b:c2:1b:71:d8:ec:af:55:
c5:a2:cd:18:68:60:e1:d0:e5:f7:63:79:54:67:5e:1a:c2:53:
5b:e9:2f:e0:b6:fa:e4:70:86:87:67:8f:94:48:27:58:c6:e9:
91:c5:ca:e4:a3:d8:98:13:d3:52:45:f4:2e:f4:b3:59:e4:15:
ef:ba:d3:ef:e7:94:6c:8d:2e:02:a1:fa:90:b2:8d:83:18:54:
e0:25:33:96:4c:2a:c7:2c:9b:ba:b3:a7:53:25:63:c8:90:c4:
07:bc:c3:cb:52:78:60:44:c8:8c:5f:55:d8:50:a6:c7:75:94:
3f:be:9a:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXHKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA0MTI1OTMzWhcNMjUwNDA3MTI1OTMzWjAYMRYw
FAYDVQQDEw02N2M2ZjkzYS1jMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3Q4J6s+w1BzIVpRAUBh6ZV5ml7V0eGMaYJY/5Fp48BhYoy+VA9mLHKBm
JG7bN5RFseiozUC4f5s4s2oIUnxx8Yy7+t+aT5wxjPtIA+sAt0KvRKAhrBeymmnu
iktEz67wZV8b6/p5ZWWBgR1yXu7709hcrL/xmdv3ijWLU0skdL/9j5Q46tJN6zyl
uITLO1e7gdsqJG60DTJ4+/k+JK+TpWObPK95iXE5tqYoYKNa/dZNMQSsBzcWEYJv
MjjZmBefYYg0diYaARsKPOnZ9oCxwdS6ns24zPHRjhnQdVDx8Hfo25hK/Hawp+t/
oUWGWxWSsrN9KUOsHzDWCvBwoXsPXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOAq
GcKOUaJ2j2iIkVTWPsNjXiCOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NzRCNDVBMEY4RjgxMUVGOUUwMDlEOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtm0MA0GCSqGSIb3DQEB
CwUAA4IBAQA9MMkqFILJ7xB7DkAhefXN3lDdG/lLp3qqC2yvZ+0TcRRpZSjwp3+u
DZQIvHdo3dDPnM630cZ/Jxn9kVCMPFGT3zsMeNzl0p2Qgf4xyqWFIB5DV4IdrRYh
GIcSmoLDKDvvNkLnWYic9PMws4yW8OLdbyaqiqoOag/6mgv+z53ol/KhGd4zt1Yk
O8Ibcdjsr1XFos0YaGDh0OX3Y3lUZ14awlNb6S/gtvrkcIaHZ4+USCdYxumRxcrk
o9iYE9NSRfQu9LNZ5BXvutPv55RsjS4CofqQso2DGFTgJTOWTCrHLJu6s6dTJWPI
kMQHvMPLUnhgRMiMX1XYUKbHdZQ/vpqe
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:20:22 2025 by rpki-client