Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBD6CD68A9211EEB955D5134AD9E6FC.roa
File: 8DBD6CD68A9211EEB955D5134AD9E6FC.roa (raw, json)
Hash identifier: mnkffKzUBYZT2lRHcUjEFmjkZXsex39kXtzMdphjFcw=
Subject key identifier: 34:DC:DA:B8:5F:7A:8F:94:94:F8:03:A4:6B:E4:88:3D:2D:E9:B7:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBD6CD68A9211EEB955D5134AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:27:34 +0000
ROA not before: Fri 24 Nov 2023 06:27:31 +0000
ROA not after: Tue 26 Dec 2023 06:27:31 +0000
asID: 62240
IP address blocks: 154.195.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21434 (0x53ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:27:31 2023 GMT
Not After : Dec 26 06:27:31 2023 GMT
Subject: CN=65604256-eb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:eb:2b:57:85:7a:38:18:da:de:6b:55:a1:
eb:88:2b:f1:38:ef:b6:5b:59:55:1a:04:dc:67:a6:
4b:c9:4f:14:93:eb:b3:be:8c:52:92:3b:22:71:4a:
fa:18:2e:5a:d0:0b:ef:7f:5e:58:9d:c7:52:de:73:
4e:72:20:e3:6d:67:ea:d9:d1:ad:5b:a2:ee:20:d5:
99:be:dc:b6:bd:bf:ef:7a:43:e8:ba:53:44:99:a2:
ef:27:80:2d:1a:d3:12:88:9f:0d:dc:d6:2b:2c:7d:
36:0f:02:21:e0:fe:da:f4:da:0b:c8:e8:85:ef:e7:
9f:bc:26:df:3e:61:21:e1:67:18:57:fa:0d:f1:50:
94:90:86:d6:23:50:37:d2:de:8d:78:1f:bd:68:c5:
8e:81:1e:76:6b:09:dd:c5:af:3a:12:ca:ce:52:79:
2d:d5:52:7f:27:d0:89:e1:59:ab:10:e7:f1:fe:23:
eb:8c:48:83:24:32:d1:a8:d9:aa:66:1b:3f:50:65:
1b:5d:32:af:f4:2d:cc:d7:f8:46:c0:c8:f1:47:0b:
6a:1f:71:cc:cc:f3:af:1d:20:fd:1f:6d:54:61:79:
89:30:56:c5:e6:fb:6d:b6:6b:6c:1e:2b:1c:5f:17:
ea:c9:13:ec:da:0d:f5:4a:f4:7f:83:64:fd:ca:8f:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:DA:B8:5F:7A:8F:94:94:F8:03:A4:6B:E4:88:3D:2D:E9:B7:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DBD6CD68A9211EEB955D5134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.145.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b4:dc:73:66:42:2d:41:10:6f:ad:80:9d:a7:25:45:0d:1d:
77:27:b5:8a:ae:4e:44:3c:ea:05:27:28:11:92:15:f3:5e:08:
21:74:5b:32:cc:01:75:0d:a9:1e:84:15:af:b7:84:8a:08:28:
95:c1:1b:2b:e0:da:2a:52:b6:ea:37:3d:d8:b4:e5:e1:34:da:
48:cd:29:a9:b3:5c:55:39:e3:05:9c:ee:22:a0:dd:7f:f7:52:
63:3f:5b:30:77:18:fe:90:31:41:91:9e:12:3b:08:0f:fc:59:
a0:c4:7a:6f:61:be:c9:be:c4:37:c5:04:2c:ac:e1:01:c4:9f:
66:e3:04:cd:36:9d:1f:b1:86:ce:06:1c:1d:67:2b:70:da:28:
79:db:81:22:97:92:9c:ce:d4:74:58:4b:61:23:62:c6:c1:68:
94:57:e9:36:0f:7d:26:99:7d:c1:42:69:f2:84:53:e7:4a:fd:
83:27:97:ed:6f:49:48:dd:f2:1c:c0:73:b1:a7:45:d9:c8:11:
6f:cf:3b:29:6f:37:d5:72:fb:c3:a1:c3:87:2a:ab:16:72:0d:
0c:34:96:4b:f0:42:af:c1:11:60:7e:a2:41:ff:80:fa:42:c6:
6d:a6:4d:70:49:03:0c:16:32:08:3e:b0:58:7b:3b:8a:84:a2:
4e:7c:a8:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU7owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNjI3MzFaFw0yMzEyMjYwNjI3MzFaMBgxFjAU
BgNVBAMTDTY1NjA0MjU2LWViNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhTOsrV4V6OBja3mtVoeuIK/E477ZbWVUaBNxnpkvJTxST67O+jFKSOyJx
SvoYLlrQC+9/Xlidx1Lec05yIONtZ+rZ0a1bou4g1Zm+3La9v+96Q+i6U0SZou8n
gC0a0xKInw3c1issfTYPAiHg/tr02gvI6IXv55+8Jt8+YSHhZxhX+g3xUJSQhtYj
UDfS3o14H71oxY6BHnZrCd3FrzoSys5SeS3VUn8n0InhWasQ5/H+I+uMSIMkMtGo
2apmGz9QZRtdMq/0LczX+EbAyPFHC2ofcczM868dIP0fbVRheYkwVsXm+222a2we
KxxfF+rJE+zaDfVK9H+DZP3KjylZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNNza
uF96j5SU+AOka+SIPS3pt4gwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhEQkQ2Q0Q2OEE5MjExRUVCOTU1RDUxMzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw5EwDQYJKoZIhvcNAQEL
BQADggEBAFm03HNmQi1BEG+tgJ2nJUUNHXcntYquTkQ86gUnKBGSFfNeCCF0WzLM
AXUNqR6EFa+3hIoIKJXBGyvg2ipStuo3Pdi05eE02kjNKamzXFU54wWc7iKg3X/3
UmM/WzB3GP6QMUGRnhI7CA/8WaDEem9hvsm+xDfFBCys4QHEn2bjBM02nR+xhs4G
HB1nK3DaKHnbgSKXkpzO1HRYS2EjYsbBaJRX6TYPfSaZfcFCafKEU+dK/YMnl+1v
SUjd8hzAc7GnRdnIEW/POylvN9Vy+8Ohw4cqqxZyDQw0lkvwQq/BEWB+okH/gPpC
xm2mTXBJAwwWMgg+sFh7O4qEok58qEY=
-----END CERTIFICATE-----
Generated at Fri May 9 10:49:05 2025 by rpki-client