Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA323168A9011EEAE02760D4AD9E6FC.roa
File: 9AA323168A9011EEAE02760D4AD9E6FC.roa (raw, json)
Hash identifier: 60+9Eydjs5KRNRFPLOW6hN9LhZzdZNwr8vDW152G5MI=
Subject key identifier: DB:F9:C4:86:AE:88:B8:7B:C9:CE:24:4A:C3:89:F8:5D:AF:CA:48:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 539B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA323168A9011EEAE02760D4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:13:37 +0000
ROA not before: Fri 24 Nov 2023 06:13:34 +0000
ROA not after: Tue 26 Dec 2023 06:13:34 +0000
asID: 62240
IP address blocks: 154.195.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21403 (0x539b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:13:34 2023 GMT
Not After : Dec 26 06:13:34 2023 GMT
Subject: CN=65603f11-2600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:5a:ca:0d:71:53:d9:8d:36:90:d0:ee:d8:
2e:4a:86:af:ea:17:14:86:13:3e:23:df:c6:62:b6:
54:df:8e:a7:c1:9a:c5:38:c6:72:6c:f8:b2:90:fa:
80:d7:4e:96:cb:4c:1e:00:b3:96:e7:38:a4:f1:a1:
9a:76:72:e3:de:89:3c:d3:25:b2:18:66:09:ca:91:
82:75:0c:2e:18:8a:09:63:39:9b:e5:a4:af:29:31:
18:f3:5c:3c:70:bc:7e:a7:77:74:d6:b1:df:30:80:
29:27:62:a9:f0:63:80:74:0e:d0:96:ee:fa:59:33:
a8:87:25:f3:bf:66:c4:c2:49:e1:ca:d6:86:03:22:
5e:36:9b:ff:2e:49:08:48:fb:1b:42:9e:92:19:14:
fc:50:ee:9e:a1:30:73:12:b7:36:f6:a1:ea:fa:0a:
65:76:9b:e2:87:d3:e9:fb:f6:12:85:10:90:fc:e4:
11:36:55:17:ce:e4:48:fe:9c:c2:8b:61:1b:ca:fb:
07:0e:d1:79:d7:78:6b:6a:a7:d5:30:0e:6d:62:28:
46:d3:09:b4:c7:52:e8:1a:56:9c:52:5c:79:ee:44:
55:ee:77:98:e4:31:bb:8e:ba:fe:41:9c:11:1b:e8:
01:56:b0:6e:cf:98:12:7d:b5:f9:db:0e:39:3d:20:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F9:C4:86:AE:88:B8:7B:C9:CE:24:4A:C3:89:F8:5D:AF:CA:48:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AA323168A9011EEAE02760D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:18:1c:13:b3:ca:b8:11:e9:c2:7b:9d:a5:95:30:a2:64:e8:
c2:fe:5a:2e:d7:e5:9a:05:05:44:c3:e7:e3:63:8f:48:30:c5:
dd:1e:83:b8:04:d4:c3:49:c2:cb:0f:5c:c9:a3:a9:f6:34:93:
f6:fd:91:ca:83:a4:0f:23:84:02:74:fc:75:34:42:11:05:0e:
0e:a7:2f:ed:67:1c:d2:d8:b6:78:82:eb:e8:a1:4b:b0:e6:76:
ef:39:1c:e7:93:4f:9d:03:5a:1f:93:07:fd:b7:96:a4:fe:3e:
76:34:74:cc:8e:40:75:6b:66:ac:d1:51:de:ca:44:29:a8:78:
9c:0c:d6:0c:82:d5:5a:5a:74:6d:4f:74:cb:54:ba:d5:5c:28:
28:58:43:5e:16:aa:f4:a4:ae:84:39:0c:a7:39:6a:51:04:7b:
84:45:59:a6:b4:e6:f9:c9:1b:f3:dc:ef:97:c0:7f:26:cf:a6:
5d:4e:69:26:1a:c6:b2:19:c6:c8:0a:3a:7c:03:f7:63:1e:95:
44:86:ad:36:34:d9:dd:af:2f:d9:52:4a:87:2f:fd:45:3c:95:
fc:63:2b:8f:ad:90:c2:4d:70:bc:26:52:91:42:1a:60:b7:32:
5d:44:9a:7b:40:96:51:0f:3e:67:2d:27:6c:1d:c5:21:21:02:
b0:ea:62:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU5swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNjEzMzRaFw0yMzEyMjYwNjEzMzRaMBgxFjAU
BgNVBAMTDTY1NjAzZjExLTI2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOilrKDXFT2Y02kNDu2C5Khq/qFxSGEz4j38ZitlTfjqfBmsU4xnJs+LKQ
+oDXTpbLTB4As5bnOKTxoZp2cuPeiTzTJbIYZgnKkYJ1DC4YigljOZvlpK8pMRjz
XDxwvH6nd3TWsd8wgCknYqnwY4B0DtCW7vpZM6iHJfO/ZsTCSeHK1oYDIl42m/8u
SQhI+xtCnpIZFPxQ7p6hMHMStzb2oer6CmV2m+KH0+n79hKFEJD85BE2VRfO5Ej+
nMKLYRvK+wcO0XnXeGtqp9UwDm1iKEbTCbTHUugaVpxSXHnuRFXud5jkMbuOuv5B
nBEb6AFWsG7PmBJ9tfnbDjk9IGLZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2/nE
hq6IuHvJziRKw4n4Xa/KSJYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzlBQTMyMzE2OEE5MDExRUVBRTAyNzYwRDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw5IwDQYJKoZIhvcNAQEL
BQADggEBAI4YHBOzyrgR6cJ7naWVMKJk6ML+Wi7X5ZoFBUTD5+Njj0gwxd0eg7gE
1MNJwssPXMmjqfY0k/b9kcqDpA8jhAJ0/HU0QhEFDg6nL+1nHNLYtniC6+ihS7Dm
du85HOeTT50DWh+TB/23lqT+PnY0dMyOQHVrZqzRUd7KRCmoeJwM1gyC1VpadG1P
dMtUutVcKChYQ14WqvSkroQ5DKc5alEEe4RFWaa05vnJG/Pc75fAfybPpl1OaSYa
xrIZxsgKOnwD92MelUSGrTY02d2vL9lSSocv/UU8lfxjK4+tkMJNcLwmUpFCGmC3
Ml1EmntAllEPPmctJ2wdxSEhArDqYi0=
-----END CERTIFICATE-----
Generated at Fri May 9 11:46:24 2025 by rpki-client