Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/881EE506DA4C11EF8E0FBFBB762E951A.roa
File: 881EE506DA4C11EF8E0FBFBB762E951A.roa (raw, json)
Hash identifier: CnpIEDZIU1UDPwLbvIMsNSCLn6Ms3y7Q2UmLFmyU45o=
Subject key identifier: DA:2E:BA:AD:88:EF:12:6F:A9:7D:06:6D:20:01:DC:59:DD:2C:05:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014694
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/881EE506DA4C11EF8E0FBFBB762E951A.roa
Signing time: Fri 24 Jan 2025 12:12:51 +0000
ROA not before: Fri 24 Jan 2025 12:12:46 +0000
ROA not after: Wed 05 Mar 2025 12:12:46 +0000
asID: 49505
IP address blocks: 154.211.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83604 (0x14694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 12:12:46 2025 GMT
Not After : Mar 5 12:12:46 2025 GMT
Subject: CN=679383c3-4af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:c8:e5:aa:3f:01:9f:65:57:2a:a1:4f:9b:
b8:80:84:21:b1:c5:3e:40:fe:78:02:ad:77:0b:4b:
ba:9e:5b:86:8c:1a:66:2c:95:d6:63:fd:f4:6b:96:
f5:2d:da:bb:bc:d8:79:6d:08:72:84:25:cc:09:73:
3d:26:ba:24:6d:31:f3:5a:0b:14:09:be:17:3f:9c:
42:5b:5f:5a:88:aa:8a:2a:bd:d6:a2:c5:64:35:92:
de:b1:c1:bf:4b:ba:11:4e:e6:b2:e8:05:6c:dc:c4:
91:02:16:af:ad:cf:dd:88:93:e8:01:55:8b:4d:cd:
93:cd:a0:75:62:e3:0b:ae:da:16:59:a1:44:bf:bd:
81:24:1e:87:80:01:5f:44:39:e7:b7:5b:5d:63:83:
d0:1d:8b:0b:5f:7c:fb:63:91:33:17:95:92:80:1b:
23:9b:f4:a3:63:36:4c:59:34:9a:03:a5:8f:0c:84:
ed:a4:76:9e:de:e5:21:31:f3:05:87:89:b4:13:36:
00:07:d6:3a:a0:d1:6c:d3:da:ae:b9:ce:1c:b1:90:
ab:80:7b:ae:93:b7:60:06:f3:18:29:b6:8c:3e:39:
69:a5:44:be:56:6a:55:21:53:37:da:42:cd:32:92:
30:a9:3d:36:d2:43:8f:6a:21:9d:74:c9:59:06:6b:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:BA:AD:88:EF:12:6F:A9:7D:06:6D:20:01:DC:59:DD:2C:05:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/881EE506DA4C11EF8E0FBFBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.9.0/24
Signature Algorithm: sha256WithRSAEncryption
69:11:36:15:78:94:1f:e6:ac:26:09:51:58:67:bc:6b:67:78:
2a:1a:77:f2:f2:8c:07:7f:9e:a0:03:01:0a:81:74:8a:9a:f2:
e3:4e:ee:3c:8a:3d:09:0e:4e:e5:fd:1d:3d:58:7d:13:fb:44:
1b:21:e2:c8:a5:fb:e6:98:0c:09:ae:43:bd:80:5a:70:be:48:
71:a5:6b:95:87:56:82:bf:f9:57:64:52:f0:c7:44:41:44:e7:
82:e9:60:68:ad:70:a9:38:45:17:35:4b:ae:68:60:e8:9d:de:
1e:69:f3:43:d9:60:c7:2c:f1:52:7e:d6:f4:bc:dd:c0:21:dc:
92:af:2e:93:11:ea:ca:66:c1:50:08:e8:85:ad:9d:cb:92:27:
68:4d:37:57:e9:dc:84:09:35:0f:de:8e:6e:1f:78:a7:23:b4:
6d:f5:04:9b:a8:fe:c3:0e:37:88:2b:03:74:7c:7f:92:51:60:
0d:0d:68:8e:11:74:a7:f9:cd:19:7a:8a:77:d2:1d:cd:8b:30:
64:42:23:cc:67:2f:db:45:44:6d:c4:9f:73:04:0b:19:3e:64:
61:00:16:4c:e5:50:9c:a0:8a:0f:a1:63:29:0c:5d:e9:89:5c:
49:4d:a8:80:06:8c:5a:15:7d:a5:da:ba:50:e5:24:b2:fa:c0:
db:9b:b4:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUaUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIxMjQ2WhcNMjUwMzA1MTIxMjQ2WjAYMRYw
FAYDVQQDEw02NzkzODNjMy00YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq3DI5ao/AZ9lVyqhT5u4gIQhscU+QP54Aq13C0u6nluGjBpmLJXWY/30
a5b1Ldq7vNh5bQhyhCXMCXM9JrokbTHzWgsUCb4XP5xCW19aiKqKKr3WosVkNZLe
scG/S7oRTuay6AVs3MSRAhavrc/diJPoAVWLTc2TzaB1YuMLrtoWWaFEv72BJB6H
gAFfRDnnt1tdY4PQHYsLX3z7Y5EzF5WSgBsjm/SjYzZMWTSaA6WPDITtpHae3uUh
MfMFh4m0EzYAB9Y6oNFs09quuc4csZCrgHuuk7dgBvMYKbaMPjlppUS+VmpVIVM3
2kLNMpIwqT020kOPaiGddMlZBmsf9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNou
uq2I7xJvqX0GbSAB3FndLAX2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84ODFFRTUwNkRBNEMxMUVGOEUwRkJGQkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMJMA0GCSqGSIb3DQEB
CwUAA4IBAQBpETYVeJQf5qwmCVFYZ7xrZ3gqGnfy8owHf56gAwEKgXSKmvLjTu48
ij0JDk7l/R09WH0T+0QbIeLIpfvmmAwJrkO9gFpwvkhxpWuVh1aCv/lXZFLwx0RB
ROeC6WBorXCpOEUXNUuuaGDond4eafND2WDHLPFSftb0vN3AIdySry6TEerKZsFQ
COiFrZ3LkidoTTdX6dyECTUP3o5uH3inI7Rt9QSbqP7DDjeIKwN0fH+SUWANDWiO
EXSn+c0Zeop30h3NizBkQiPMZy/bRURtxJ9zBAsZPmRhABZM5VCcoIoPoWMpDF3p
iVxJTaiABoxaFX2l2rpQ5SSy+sDbm7Qb
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:51:55 2025 by rpki-client