Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98636B6CF5E511EFAFF3A2A1762E951A.roa
File: 98636B6CF5E511EFAFF3A2A1762E951A.roa (raw, json)
Hash identifier: QqI7VA7TTjiyZE8H/rNHuRw5ULf+CAdR4gBZ96aWJfo=
Subject key identifier: 31:61:53:9A:E2:A6:BA:5F:B4:B9:AB:75:0B:8D:93:D7:30:E9:50:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98636B6CF5E511EFAFF3A2A1762E951A.roa
Signing time: Fri 28 Feb 2025 15:06:32 +0000
ROA not before: Fri 28 Feb 2025 15:06:29 +0000
ROA not after: Wed 26 Mar 2025 15:06:29 +0000
asID: 62240
IP address blocks: 154.194.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93076 (0x16b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 15:06:29 2025 GMT
Not After : Mar 26 15:06:29 2025 GMT
Subject: CN=67c1d0f8-b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:4c:29:7f:83:e4:e6:4b:8b:32:1d:ae:c4:
9a:66:a8:c2:a2:33:a5:54:5b:98:67:fe:09:49:93:
d3:0c:55:29:e8:37:ce:94:71:6c:33:33:a3:42:06:
0a:3d:5e:4d:85:f1:7b:b0:a6:f6:e0:24:33:9f:65:
ce:f9:db:44:15:ee:11:98:69:1a:dd:ee:3f:9c:4b:
2f:94:b0:bd:2f:04:0f:e5:7d:59:2a:59:4f:15:09:
b8:b1:4a:6b:98:8f:f3:9a:23:e4:f4:06:e3:4d:11:
c5:65:56:48:53:0f:3b:e6:8f:a4:c6:f6:a0:cf:5d:
a7:d4:36:aa:26:dd:b1:56:ab:53:77:aa:59:be:cd:
b3:24:d9:86:d5:43:e0:66:06:dd:e1:a1:0e:88:b6:
5d:42:91:fa:6c:06:59:73:7c:13:d7:a8:21:45:70:
d5:a7:4a:b0:75:52:d6:13:11:1a:2f:02:65:ba:e8:
dd:ae:c7:09:1e:91:70:6f:4e:8f:0c:fe:43:67:05:
5c:8e:0d:1b:c6:21:1f:9e:2c:6a:50:f6:3f:04:51:
d8:68:0e:5c:f4:27:c2:89:d6:f4:29:68:9e:22:d3:
a6:9e:57:6f:26:4f:88:af:58:b1:14:5c:23:53:34:
72:74:4b:ff:9a:83:a8:fd:43:49:35:52:2b:02:c0:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:61:53:9A:E2:A6:BA:5F:B4:B9:AB:75:0B:8D:93:D7:30:E9:50:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98636B6CF5E511EFAFF3A2A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.74.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3a:2f:d0:33:9b:6e:0d:f7:bd:2b:f1:40:dc:d1:03:09:eb:
66:e2:c9:d6:d5:e5:2f:15:01:4d:20:9f:76:3f:be:05:00:c7:
c2:ab:1c:4e:b7:06:2a:be:ce:d9:22:97:75:70:c6:cf:60:20:
19:f8:37:1f:6c:5b:d1:4f:45:0c:d6:d8:cc:4f:77:bd:79:68:
0d:eb:d8:1e:8e:c8:86:2d:55:ac:8b:e3:09:6d:7b:f4:79:ba:
d8:03:87:c0:99:c6:80:1e:da:6e:8a:b3:60:c8:bc:02:3d:84:
8b:18:ad:e7:36:c4:4b:0d:96:d0:94:af:ca:38:59:22:88:aa:
72:e6:70:b6:1e:64:cc:bc:ea:85:9a:e7:2b:7d:cf:71:02:3a:
73:9e:88:9d:95:08:1c:7f:b2:a6:d6:7e:ad:85:f7:d6:1a:8b:
41:91:61:87:89:69:a6:06:d7:aa:1c:50:b8:1c:93:75:23:8d:
ae:71:8f:18:38:d9:8a:f5:e8:01:99:11:be:e9:1b:cd:5d:cc:
6d:2d:b1:85:cd:54:dd:b7:c7:ee:09:3d:40:50:ee:8f:49:b5:
fe:e6:df:b4:ff:95:ea:ff:0c:8e:24:57:5f:c4:60:b2:42:90:
8e:ed:7e:d6:90:02:cb:8d:76:71:bd:4e:7f:09:b8:76:b4:90:
99:cb:a5:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWuUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTUwNjI5WhcNMjUwMzI2MTUwNjI5WjAYMRYw
FAYDVQQDEw02N2MxZDBmOC1iN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmwxMKX+D5OZLizIdrsSaZqjCojOlVFuYZ/4JSZPTDFUp6DfOlHFsMzOj
QgYKPV5NhfF7sKb24CQzn2XO+dtEFe4RmGka3e4/nEsvlLC9LwQP5X1ZKllPFQm4
sUprmI/zmiPk9AbjTRHFZVZIUw875o+kxvagz12n1DaqJt2xVqtTd6pZvs2zJNmG
1UPgZgbd4aEOiLZdQpH6bAZZc3wT16ghRXDVp0qwdVLWExEaLwJluujdrscJHpFw
b06PDP5DZwVcjg0bxiEfnixqUPY/BFHYaA5c9CfCidb0KWieItOmnldvJk+Ir1ix
FFwjUzRydEv/moOo/UNJNVIrAsDpMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDFh
U5riprpftLmrdQuNk9cw6VCgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85ODYzNkI2Q0Y1RTUxMUVGQUZGM0EyQTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJKMA0GCSqGSIb3DQEB
CwUAA4IBAQCSOi/QM5tuDfe9K/FA3NEDCetm4snW1eUvFQFNIJ92P74FAMfCqxxO
twYqvs7ZIpd1cMbPYCAZ+DcfbFvRT0UM1tjMT3e9eWgN69gejsiGLVWsi+MJbXv0
ebrYA4fAmcaAHtpuirNgyLwCPYSLGK3nNsRLDZbQlK/KOFkiiKpy5nC2HmTMvOqF
mucrfc9xAjpznoidlQgcf7Km1n6thffWGotBkWGHiWmmBteqHFC4HJN1I42ucY8Y
ONmK9egBmRG+6RvNXcxtLbGFzVTdt8fuCT1AUO6PSbX+5t+0/5Xq/wyOJFdfxGCy
QpCO7X7WkALLjXZxvU5/Cbh2tJCZy6Wg
-----END CERTIFICATE-----
Generated at Fri May 9 05:46:55 2025 by rpki-client