Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A25C2BCF4F311EF8C8CCDA6762E951A.roa
File: 9A25C2BCF4F311EF8C8CCDA6762E951A.roa (raw, json)
Hash identifier: XEqrXdX4HxIEhDSRNBHmSf1NioIWo0ujFo9h16NkJ5k=
Subject key identifier: 8B:A4:85:CF:8C:56:8E:B0:A6:05:3C:60:82:2E:76:5F:8F:92:B8:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01679C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A25C2BCF4F311EF8C8CCDA6762E951A.roa
Signing time: Thu 27 Feb 2025 10:14:17 +0000
ROA not before: Thu 27 Feb 2025 10:14:13 +0000
ROA not after: Wed 26 Mar 2025 10:14:13 +0000
asID: 62240
IP address blocks: 154.195.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92060 (0x1679c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 10:14:13 2025 GMT
Not After : Mar 26 10:14:13 2025 GMT
Subject: CN=67c03af9-464f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:7d:cf:3c:b6:a2:34:b8:9a:b8:4c:0d:1b:
6b:2d:4b:42:dc:8d:ff:6a:9a:a0:da:03:94:7b:a0:
fb:d9:d3:49:27:4d:fc:2e:15:de:bb:bc:be:f3:10:
09:18:52:c5:fc:af:4b:51:f9:d8:08:81:a6:ff:9b:
51:09:48:42:8f:9d:f5:24:e3:67:43:2a:61:53:34:
9e:d1:8a:7e:29:73:35:05:63:95:fd:10:61:f0:7d:
33:b1:f9:11:d1:01:f1:8e:bd:66:db:ad:6b:0f:67:
7d:5c:21:37:bb:07:1c:37:7d:0c:e3:27:ef:3f:a2:
c5:cb:6b:27:7a:b1:32:a6:29:1e:d4:0c:52:f8:93:
88:6b:1e:a2:51:84:c1:76:64:0c:ac:5e:04:cc:ea:
e0:f2:b9:91:be:dd:24:53:99:22:be:a9:7e:0d:05:
07:11:f5:cb:33:86:cf:4a:22:51:b6:8f:ed:6e:f5:
6e:5b:52:8b:24:b8:d4:cd:99:a9:28:8e:f8:8e:ab:
df:b9:8d:86:8c:5f:57:2b:a5:2d:cf:58:bb:1d:c6:
17:5c:fa:76:3c:74:5e:ec:3a:7b:ee:5b:06:71:47:
7c:c3:e5:20:a9:ec:c7:f4:99:ba:1c:ac:3a:60:5a:
a5:b3:f6:73:d3:c9:ad:4d:09:b2:ec:02:53:16:fc:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:85:CF:8C:56:8E:B0:A6:05:3C:60:82:2E:76:5F:8F:92:B8:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A25C2BCF4F311EF8C8CCDA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6c:31:98:56:ae:aa:47:e2:aa:ce:89:72:11:71:03:65:39:
da:3a:42:29:43:25:48:1a:23:cf:5b:34:b8:43:79:20:a5:96:
b0:6e:49:0b:b3:8b:34:0c:61:3f:7a:18:b0:e0:38:75:85:e9:
4b:fb:d6:4e:5b:a1:41:0f:63:8c:23:b1:05:98:f5:30:32:26:
af:6b:6e:e7:09:74:c3:30:4a:34:22:9d:50:c5:4f:28:7a:75:
fd:61:d9:3d:6a:8a:12:14:d0:7e:59:94:51:ad:f1:5a:e5:3b:
65:82:78:c7:74:b0:5f:8a:69:5c:ff:92:a8:53:6f:f9:e8:d9:
c5:4c:7b:66:9e:32:ac:cc:69:4b:32:73:e3:2c:08:86:97:d0:
9e:48:25:07:ad:20:91:21:6c:de:09:dc:80:ca:31:a7:13:6b:
2a:90:d1:cb:82:c4:45:ae:6b:e1:93:4d:94:54:e1:32:9d:57:
49:06:36:70:b4:05:5c:c5:8e:36:e9:2e:4a:8b:90:d1:01:87:
3c:37:cf:d8:86:44:11:b6:18:c8:9f:60:34:ba:4e:36:b5:ca:
99:7a:82:a3:eb:d2:66:94:7d:9a:bc:b4:35:94:bb:80:3a:b5:
ca:cf:aa:d0:53:8e:d2:85:25:53:2b:58:f5:93:1e:95:45:ce:
c1:2d:f4:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWecMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTAxNDEzWhcNMjUwMzI2MTAxNDEzWjAYMRYw
FAYDVQQDEw02N2MwM2FmOS00NjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuyV9zzy2ojS4mrhMDRtrLUtC3I3/apqg2gOUe6D72dNJJ038LhXeu7y+
8xAJGFLF/K9LUfnYCIGm/5tRCUhCj531JONnQyphUzSe0Yp+KXM1BWOV/RBh8H0z
sfkR0QHxjr1m261rD2d9XCE3uwccN30M4yfvP6LFy2snerEypike1AxS+JOIax6i
UYTBdmQMrF4EzOrg8rmRvt0kU5kivql+DQUHEfXLM4bPSiJRto/tbvVuW1KLJLjU
zZmpKI74jqvfuY2GjF9XK6Utz1i7HcYXXPp2PHRe7Dp77lsGcUd8w+UgqezH9Jm6
HKw6YFqls/Zz08mtTQmy7AJTFvyP8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIuk
hc+MVo6wpgU8YIIudl+PkrgTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTI1QzJCQ0Y0RjMxMUVGOEM4Q0NEQTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNyMA0GCSqGSIb3DQEB
CwUAA4IBAQANbDGYVq6qR+KqzolyEXEDZTnaOkIpQyVIGiPPWzS4Q3kgpZawbkkL
s4s0DGE/ehiw4Dh1helL+9ZOW6FBD2OMI7EFmPUwMiava27nCXTDMEo0Ip1QxU8o
enX9Ydk9aooSFNB+WZRRrfFa5TtlgnjHdLBfimlc/5KoU2/56NnFTHtmnjKszGlL
MnPjLAiGl9CeSCUHrSCRIWzeCdyAyjGnE2sqkNHLgsRFrmvhk02UVOEynVdJBjZw
tAVcxY426S5Ki5DRAYc8N8/YhkQRthjIn2A0uk42tcqZeoKj69JmlH2avLQ1lLuA
OrXKz6rQU47ShSVTK1j1kx6VRc7BLfQo
-----END CERTIFICATE-----
Generated at Fri May 9 06:08:37 2025 by rpki-client