Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D88D26F61F11EF80DF77A7762E951A.roa
File: 99D88D26F61F11EF80DF77A7762E951A.roa (raw, json)
Hash identifier: jZpiKAzNoYcuT4+hHzj2hqZoBw4DH1QdGTd5M0oEQwU=
Subject key identifier: 1D:39:EE:0E:E4:8E:DC:57:DA:84:1D:7E:96:FD:A9:CE:09:C6:94:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D88D26F61F11EF80DF77A7762E951A.roa
Signing time: Fri 28 Feb 2025 22:01:46 +0000
ROA not before: Fri 28 Feb 2025 22:01:42 +0000
ROA not after: Wed 26 Mar 2025 22:01:42 +0000
asID: 62240
IP address blocks: 154.196.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93293 (0x16c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:01:42 2025 GMT
Not After : Mar 26 22:01:42 2025 GMT
Subject: CN=67c2324a-21ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:21:46:d2:2b:ad:c9:c3:0a:17:d2:da:59:
67:8f:9b:be:a7:f7:8b:97:ee:d7:55:1e:01:05:fa:
9f:3b:43:d1:f4:83:8b:20:61:34:7d:42:f2:ee:2e:
22:82:e2:43:bd:5e:07:96:ec:a0:25:98:cc:31:99:
c5:08:1f:91:54:7a:00:38:c6:e2:3b:f5:99:02:d0:
ac:7e:53:b8:c8:48:8a:84:40:57:f1:13:3a:5d:d6:
85:be:92:a5:10:21:46:13:3a:4c:4c:3e:16:39:c6:
a7:df:e2:26:4e:38:d9:f7:34:e0:4a:ec:c6:2f:16:
60:38:d9:ca:15:fc:3a:ab:de:30:21:b5:80:58:74:
e6:1c:55:a6:16:b4:7f:53:22:5a:2a:a4:df:24:9c:
e4:72:24:97:8f:07:cd:0c:66:9b:33:1d:87:42:64:
42:be:9e:b3:51:ff:11:1a:c5:21:6a:44:78:52:14:
dc:51:12:b7:27:69:8f:bb:71:6e:60:ed:8c:07:a4:
21:33:0c:51:61:36:f5:c2:01:e3:c2:d5:cd:7a:e3:
68:02:41:de:0d:6d:1e:63:52:82:25:c5:77:c8:9d:
a4:c9:c9:9d:a1:a7:bd:10:68:ea:9d:44:e4:a3:be:
83:3a:7a:70:c0:40:88:f4:7d:da:c5:0b:c7:20:7a:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:EE:0E:E4:8E:DC:57:DA:84:1D:7E:96:FD:A9:CE:09:C6:94:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99D88D26F61F11EF80DF77A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.81.0/24
Signature Algorithm: sha256WithRSAEncryption
85:45:eb:7a:1d:80:41:78:09:a5:28:9a:fa:bb:3b:4f:e2:ce:
68:c4:40:28:e0:69:88:5e:a9:2a:63:df:0d:c1:0f:69:50:03:
01:a5:c6:eb:2c:4b:04:00:8b:fa:82:bb:22:93:46:19:85:57:
52:4d:68:2a:00:af:24:c2:b4:f2:31:65:7b:fa:3f:c8:96:d5:
30:67:f2:8c:74:5a:44:bc:7a:bb:0a:23:b1:94:91:6d:af:a3:
7d:11:11:23:86:a0:1d:94:5c:ac:02:9c:1e:ee:67:07:91:45:
b4:93:36:10:b8:fe:3e:3c:c6:8f:16:c6:24:44:f3:96:4e:8f:
2e:fb:5a:5c:5c:a4:71:10:bf:3b:48:84:53:fd:16:51:57:cc:
01:ce:a8:9d:e7:d3:92:4b:0d:61:98:7f:91:c1:7e:03:7f:cd:
44:68:8a:d4:20:25:25:83:ad:fa:0c:f5:ab:92:35:5f:d0:84:
14:1f:81:52:7e:bd:9e:f7:f0:b8:98:46:1d:25:82:f5:4c:07:
ab:4c:56:46:88:d7:53:c5:bd:56:8a:4e:c0:b0:a3:d0:13:42:
20:d6:b0:1b:3c:de:fc:d2:a4:fd:04:9a:5a:49:0c:70:81:b4:
76:10:f1:0c:54:0f:de:41:70:e0:a2:f1:e0:23:16:44:c1:cb:
73:a8:91:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWxtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjIwMTQyWhcNMjUwMzI2MjIwMTQyWjAYMRYw
FAYDVQQDEw02N2MyMzI0YS0yMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4DQhRtIrrcnDChfS2llnj5u+p/eLl+7XVR4BBfqfO0PR9IOLIGE0fULy
7i4iguJDvV4HluygJZjMMZnFCB+RVHoAOMbiO/WZAtCsflO4yEiKhEBX8RM6XdaF
vpKlECFGEzpMTD4WOcan3+ImTjjZ9zTgSuzGLxZgONnKFfw6q94wIbWAWHTmHFWm
FrR/UyJaKqTfJJzkciSXjwfNDGabMx2HQmRCvp6zUf8RGsUhakR4UhTcURK3J2mP
u3FuYO2MB6QhMwxRYTb1wgHjwtXNeuNoAkHeDW0eY1KCJcV3yJ2kycmdoae9EGjq
nUTko76DOnpwwECI9H3axQvHIHqmIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB05
7g7kjtxX2oQdfpb9qc4JxpQKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OUQ4OEQyNkY2MUYxMUVGODBERjc3QTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRRMA0GCSqGSIb3DQEB
CwUAA4IBAQCFRet6HYBBeAmlKJr6uztP4s5oxEAo4GmIXqkqY98NwQ9pUAMBpcbr
LEsEAIv6grsik0YZhVdSTWgqAK8kwrTyMWV7+j/IltUwZ/KMdFpEvHq7CiOxlJFt
r6N9EREjhqAdlFysApwe7mcHkUW0kzYQuP4+PMaPFsYkRPOWTo8u+1pcXKRxEL87
SIRT/RZRV8wBzqid59OSSw1hmH+RwX4Df81EaIrUICUlg636DPWrkjVf0IQUH4FS
fr2e9/C4mEYdJYL1TAerTFZGiNdTxb1Wik7AsKPQE0Ig1rAbPN780qT9BJpaSQxw
gbR2EPEMVA/eQXDgovHgIxZEwctzqJGE
-----END CERTIFICATE-----
Generated at Fri May 9 21:28:31 2025 by rpki-client