Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BB190848A9711EE982233244AD9E6FC.roa
File: 8BB190848A9711EE982233244AD9E6FC.roa (raw, json)
Hash identifier: H5OZynRFDVMjqXmAh+q+WYRNv2ub/+hqrzq1Z3VZx60=
Subject key identifier: B7:67:FC:DD:80:A6:5D:DB:1B:98:F1:7E:A7:D3:7A:ED:49:F6:C3:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5420
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BB190848A9711EE982233244AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:03:18 +0000
ROA not before: Fri 24 Nov 2023 07:03:15 +0000
ROA not after: Tue 26 Dec 2023 07:03:15 +0000
asID: 62240
IP address blocks: 154.196.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21536 (0x5420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:03:15 2023 GMT
Not After : Dec 26 07:03:15 2023 GMT
Subject: CN=65604ab6-2513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:af:00:07:3e:48:88:4b:1a:73:3a:51:0e:
16:8a:96:22:21:bb:f3:e1:ff:d8:da:6b:10:a6:8c:
49:27:80:f9:75:f9:2e:85:5d:77:64:98:1e:d6:a4:
6b:54:44:89:ab:e0:22:92:3f:e4:3f:c9:d1:a6:1b:
a0:30:54:66:e6:a3:7f:78:11:be:b4:0e:54:74:98:
3a:b8:7a:a7:7a:ca:ef:7a:7b:8b:e7:46:c0:18:82:
3e:36:c9:ee:b0:3f:90:eb:be:52:17:8d:23:9c:6c:
07:f6:25:d1:95:69:bc:b8:a8:a9:04:d1:ee:5c:c3:
26:fc:07:3e:73:29:90:69:c7:8d:81:77:b1:c1:42:
2e:31:64:fc:80:d7:a3:df:0b:20:b2:c6:4f:a8:55:
a9:e5:0a:8c:f7:7e:a6:6f:b9:f7:3e:3d:fb:e5:8b:
38:5b:69:db:94:36:25:77:7f:5f:b5:32:92:08:5b:
85:ba:26:18:7e:65:72:3c:ea:69:46:c9:82:8f:f8:
ec:3d:60:6e:ea:53:17:34:05:e8:91:14:da:5e:af:
1e:0f:dd:95:df:13:6a:de:d2:98:9e:d1:56:e9:77:
c6:37:b7:c5:8d:21:01:00:ec:3f:54:8a:c2:11:49:
16:fc:99:e6:fa:70:32:91:2a:fe:1c:00:40:bf:de:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:FC:DD:80:A6:5D:DB:1B:98:F1:7E:A7:D3:7A:ED:49:F6:C3:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BB190848A9711EE982233244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.24.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f7:95:86:59:36:64:82:9a:b2:fd:ee:4b:21:27:1f:ce:c6:
92:b2:3e:ff:9a:ce:cc:6e:b5:d5:64:f4:a9:64:f6:da:b0:40:
54:c5:ae:fb:eb:73:9a:6c:46:e7:6c:fa:86:5b:86:d6:07:6c:
ee:92:73:15:70:fa:c6:f9:a0:fa:3c:78:0e:17:b5:b7:93:22:
86:9e:56:95:df:ed:58:e9:35:93:3b:d1:0d:bc:27:37:78:fa:
a0:1b:6e:0e:90:90:42:d7:94:7b:ed:e4:fa:f1:b6:6c:fe:8a:
f2:94:ed:b7:54:5d:3b:f5:80:3a:ea:3b:19:c8:c2:99:c6:21:
53:a5:9a:31:f1:1b:39:f9:f2:56:1a:ef:91:a9:62:96:14:87:
04:97:89:ee:1b:95:f2:43:5e:f8:b1:95:31:56:94:76:2b:34:
39:e7:ef:fb:44:f4:16:68:d9:64:7c:3c:a8:7e:bd:5e:e7:e9:
9b:cd:ab:8f:e1:87:36:b6:5b:ab:f1:a5:a6:2b:6c:32:ba:bb:
30:a0:11:1c:b8:00:8f:a6:c6:56:f4:6f:6f:59:c0:bd:c8:6b:
c8:93:c5:1c:ae:73:57:aa:2d:76:47:7b:9b:f5:a4:56:db:a3:
16:e4:25:dc:89:7f:34:36:22:5a:23:0c:64:98:84:41:b7:84:
1f:4a:87:d8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVCAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNzAzMTVaFw0yMzEyMjYwNzAzMTVaMBgxFjAU
BgNVBAMTDTY1NjA0YWI2LTI1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzhK8ABz5IiEsaczpRDhaKliIhu/Ph/9jaaxCmjEkngPl1+S6FXXdkmB7W
pGtURImr4CKSP+Q/ydGmG6AwVGbmo394Eb60DlR0mDq4eqd6yu96e4vnRsAYgj42
ye6wP5DrvlIXjSOcbAf2JdGVaby4qKkE0e5cwyb8Bz5zKZBpx42Bd7HBQi4xZPyA
16PfCyCyxk+oVanlCoz3fqZvufc+PfvlizhbaduUNiV3f1+1MpIIW4W6Jhh+ZXI8
6mlGyYKP+Ow9YG7qUxc0BeiRFNperx4P3ZXfE2re0pie0Vbpd8Y3t8WNIQEA7D9U
isIRSRb8meb6cDKRKv4cAEC/3nWlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUt2f8
3YCmXdsbmPF+p9N67Un2w0swHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhCQjE5MDg0OEE5NzExRUU5ODIyMzMyNDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxBgwDQYJKoZIhvcNAQEL
BQADggEBAHD3lYZZNmSCmrL97kshJx/OxpKyPv+azsxutdVk9Klk9tqwQFTFrvvr
c5psRuds+oZbhtYHbO6ScxVw+sb5oPo8eA4XtbeTIoaeVpXf7VjpNZM70Q28Jzd4
+qAbbg6QkELXlHvt5Prxtmz+ivKU7bdUXTv1gDrqOxnIwpnGIVOlmjHxGzn58lYa
75GpYpYUhwSXie4blfJDXvixlTFWlHYrNDnn7/tE9BZo2WR8PKh+vV7n6ZvNq4/h
hza2W6vxpaYrbDK6uzCgERy4AI+mxlb0b29ZwL3Ia8iTxRyuc1eqLXZHe5v1pFbb
oxbkJdyJfzQ2IlojDGSYhEG3hB9Kh9g=
-----END CERTIFICATE-----
Generated at Fri May 9 11:29:26 2025 by rpki-client