Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A97BF8F81A11EF947E9FA6762E951A.roa
File: 97A97BF8F81A11EF947E9FA6762E951A.roa (raw, json)
Hash identifier: FmUGjRNNs0s/KkW+i+Jrl6sHegA/4/1Yy6wJMFBxokQ=
Subject key identifier: 7E:C8:E2:DF:00:80:A2:40:C8:6E:67:3B:34:ED:3D:5D:07:50:51:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01701B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A97BF8F81A11EF947E9FA6762E951A.roa
Signing time: Mon 03 Mar 2025 10:30:57 +0000
ROA not before: Mon 03 Mar 2025 10:30:53 +0000
ROA not after: Wed 26 Mar 2025 10:30:53 +0000
asID: 62240
IP address blocks: 154.195.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94235 (0x1701b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 10:30:53 2025 GMT
Not After : Mar 26 10:30:53 2025 GMT
Subject: CN=67c584e1-0f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:35:34:c8:0b:84:cb:33:f9:f2:ff:e9:45:
91:0e:39:0d:fa:c8:0a:b5:b3:cc:9b:39:39:cb:b0:
35:b1:2a:f1:35:6e:a9:c2:4a:45:c6:17:2b:6d:b7:
13:bb:7a:71:7c:18:85:04:4d:0f:ea:1a:a4:ae:df:
cc:b8:0a:7e:6d:ca:48:09:6e:49:17:1a:d6:67:db:
1a:2c:f2:c9:92:65:4f:82:ba:c3:9a:a4:a1:46:4c:
a0:80:84:39:03:47:69:fe:e2:88:f6:3e:72:f1:8f:
69:3c:e3:43:a5:7e:6e:97:da:78:22:3c:fb:1f:6d:
79:ee:3c:2c:1e:e3:49:31:01:ca:ae:f4:d2:da:05:
fd:53:5b:7b:07:b3:c9:aa:20:d5:74:d4:f7:29:93:
f7:4d:ca:42:9e:c4:ba:e4:4d:c1:08:1a:13:37:e6:
a5:16:b9:87:c3:85:c0:27:a1:e6:42:e9:6d:74:67:
bc:32:a9:5f:26:b2:21:bd:ae:dd:00:53:5a:47:b0:
c4:bb:dd:a3:71:ee:b8:1f:d7:66:81:d1:ba:27:3d:
9a:b0:1a:9c:98:a5:e3:ec:a5:c9:0c:31:35:2b:cf:
68:e1:db:1c:5a:e5:ba:d6:72:67:f2:12:59:3f:f2:
9c:28:e3:95:e5:ee:34:0e:97:cf:d8:d1:7c:a4:40:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:E2:DF:00:80:A2:40:C8:6E:67:3B:34:ED:3D:5D:07:50:51:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A97BF8F81A11EF947E9FA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.128.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:fb:5b:8a:78:db:aa:9f:f9:3c:5b:30:b6:c9:f2:4c:ba:2a:
e6:ab:37:a3:6d:66:06:41:4b:09:34:20:ea:e5:35:26:76:2b:
b9:cf:81:8f:d9:da:2d:77:ba:23:4c:56:c6:34:96:6e:37:32:
b0:95:8a:54:41:4e:ff:ad:c3:4c:99:b3:78:d7:5c:b8:d2:6b:
99:dc:1e:77:57:9d:49:44:14:3c:b5:48:e4:76:84:90:45:6b:
cb:82:13:4c:86:ad:d6:37:35:76:27:08:0d:f8:90:1b:9f:db:
f0:69:28:a1:18:d0:21:5e:98:24:ce:07:f7:91:ce:8b:98:78:
84:8d:8b:1d:ba:c3:86:63:ed:96:b5:01:d1:35:2c:52:c9:24:
31:3d:9b:04:ae:bb:a8:25:b5:0a:3e:28:f1:62:e6:1c:06:05:
cc:f8:3e:e5:78:25:60:3f:30:1d:b4:ac:98:a4:1e:2c:00:f0:
a8:fa:74:65:fd:c3:08:56:06:36:90:ec:98:18:66:50:64:3c:
02:cd:cc:3c:2d:d9:c6:a4:b2:c8:c7:22:b9:2b:21:ed:73:62:
d9:6b:ac:9e:e9:c1:fa:49:82:97:4c:b0:2a:7d:43:47:42:da:
8b:b4:68:d6:f8:a1:3d:2e:7f:e3:c5:10:0b:bd:09:dc:2b:d9:
98:ea:57:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXAbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTAzMDUzWhcNMjUwMzI2MTAzMDUzWjAYMRYw
FAYDVQQDEw02N2M1ODRlMS0wZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5BI1NMgLhMsz+fL/6UWRDjkN+sgKtbPMmzk5y7A1sSrxNW6pwkpFxhcr
bbcTu3pxfBiFBE0P6hqkrt/MuAp+bcpICW5JFxrWZ9saLPLJkmVPgrrDmqShRkyg
gIQ5A0dp/uKI9j5y8Y9pPONDpX5ul9p4Ijz7H2157jwsHuNJMQHKrvTS2gX9U1t7
B7PJqiDVdNT3KZP3TcpCnsS65E3BCBoTN+alFrmHw4XAJ6HmQultdGe8MqlfJrIh
va7dAFNaR7DEu92jce64H9dmgdG6Jz2asBqcmKXj7KXJDDE1K89o4dscWuW61nJn
8hJZP/KcKOOV5e40DpfP2NF8pEBWMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH7I
4t8AgKJAyG5nOzTtPV0HUFFhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85N0E5N0JGOEY4MUExMUVGOTQ3RTlGQTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOAMA0GCSqGSIb3DQEB
CwUAA4IBAQDW+1uKeNuqn/k8WzC2yfJMuirmqzejbWYGQUsJNCDq5TUmdiu5z4GP
2dotd7ojTFbGNJZuNzKwlYpUQU7/rcNMmbN411y40muZ3B53V51JRBQ8tUjkdoSQ
RWvLghNMhq3WNzV2JwgN+JAbn9vwaSihGNAhXpgkzgf3kc6LmHiEjYsdusOGY+2W
tQHRNSxSySQxPZsErruoJbUKPijxYuYcBgXM+D7leCVgPzAdtKyYpB4sAPCo+nRl
/cMIVgY2kOyYGGZQZDwCzcw8LdnGpLLIxyK5KyHtc2LZa6ye6cH6SYKXTLAqfUNH
QtqLtGjW+KE9Ln/jxRALvQncK9mY6ldY
-----END CERTIFICATE-----
Generated at Fri May 9 06:53:32 2025 by rpki-client