This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96291C488A8911EE9864EE744AD9E6FC.roa
File:                     96291C488A8911EE9864EE744AD9E6FC.roa (raw, json)
Hash identifier:          9fio8O2IZYVYBuUj5/pRUdeVw2D5eVAvnaqjWo9aYtM=
Subject key identifier:   D1:86:92:A8:46:8E:47:3D:16:34:31:61:90:2C:2E:61:88:21:4E:9A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       532C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96291C488A8911EE9864EE744AD9E6FC.roa
Signing time:             Fri 24 Nov 2023 05:23:23 +0000
ROA not before:           Fri 24 Nov 2023 05:23:20 +0000
ROA not after:            Tue 26 Dec 2023 05:23:20 +0000
asID:                     62240
IP address blocks:        154.194.78.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21292 (0x532c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 05:23:20 2023 GMT
            Not After : Dec 26 05:23:20 2023 GMT
        Subject: CN=6560334b-4b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:19:96:c0:ef:2f:66:aa:22:5d:d4:5b:8c:
                    7d:a4:68:bc:73:74:66:45:49:c3:a9:7c:42:a0:71:
                    07:8e:c7:48:82:e9:bc:d8:11:30:e0:53:99:ad:2c:
                    f3:bd:b1:a7:2c:98:31:47:d8:90:7e:d4:c2:c4:a9:
                    08:7d:3f:95:79:93:ed:d9:b7:a8:47:17:d5:ea:2f:
                    32:a0:22:bc:91:bb:90:b7:7e:c3:8a:4c:3e:66:09:
                    40:7a:dd:c7:e9:4f:f3:da:67:cf:50:13:d8:c6:fd:
                    81:71:f4:cf:51:dc:0a:55:18:23:ee:c3:b3:88:93:
                    bf:52:46:2f:63:c1:9c:fb:6a:3f:a6:9c:37:00:20:
                    39:ee:49:8e:ad:04:19:3b:94:ba:67:30:47:aa:7b:
                    a1:da:52:30:0a:43:98:b6:b3:e7:e9:d1:da:f1:68:
                    e2:cb:68:ee:e9:b3:78:44:6d:3b:98:4c:88:4d:61:
                    26:a1:f6:08:c7:d4:72:3e:1d:21:c3:12:d3:d1:b2:
                    6d:c2:fe:c6:3b:f3:bd:bd:90:72:07:0a:19:39:a2:
                    41:f1:93:01:86:26:fa:3f:a8:d8:1e:67:3d:77:60:
                    12:7b:21:94:31:c5:7b:80:7f:54:58:2d:cf:1a:76:
                    7d:45:e1:dd:60:d3:4d:a8:be:be:df:0b:8e:57:6b:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:92:A8:46:8E:47:3D:16:34:31:61:90:2C:2E:61:88:21:4E:9A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96291C488A8911EE9864EE744AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:dd:92:c0:06:47:e2:9a:15:cc:86:e5:a8:b0:68:d8:2b:
         53:08:80:af:81:5c:1e:00:e2:04:bf:7f:7c:bb:5b:57:cb:53:
         b8:49:45:cd:ec:7e:57:b5:13:25:e0:b9:7b:9a:9c:78:68:c9:
         93:6f:19:41:b9:13:42:e0:de:35:59:8e:d8:55:08:75:5d:77:
         7c:83:f6:73:1b:b7:da:24:49:c9:16:90:73:98:c7:54:67:cb:
         d1:02:7d:50:d1:d0:01:62:24:83:af:d9:60:3d:6d:16:74:d4:
         33:5e:c3:63:c3:c4:31:d7:63:df:a0:fd:37:3d:ca:5b:66:c6:
         81:34:ce:2e:90:b2:22:06:97:19:48:45:97:47:ad:23:bf:96:
         6a:da:76:7a:b9:8d:7a:19:e6:d9:4f:a1:04:9c:0a:ec:8d:8f:
         13:96:e6:b4:9c:6e:ae:16:3a:93:82:f5:93:96:d7:47:66:79:
         bd:74:1c:ba:d9:79:ff:dc:a2:0d:2f:65:31:89:e2:a5:11:f8:
         df:8e:f6:e0:03:1f:e7:f8:e7:c1:ad:94:e3:cd:3c:4e:57:bd:
         e9:78:55:74:39:3c:6d:32:49:f8:a0:8e:6d:32:95:32:04:cc:
         d2:bd:69:9c:51:8d:16:22:ae:37:78:2b:79:7e:54:c1:43:3a:
         b0:a8:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----