Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C109D328A8B11EEA594697B4AD9E6FC.roa
File: 9C109D328A8B11EEA594697B4AD9E6FC.roa (raw, json)
Hash identifier: Gn8ULQMtoTkZlUwomx35SWsFW2dVvgTx2v+b32P4pSY=
Subject key identifier: B5:DE:B3:E4:9B:06:19:B0:DD:CC:39:AA:5D:22:AF:8E:09:88:6F:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5344
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C109D328A8B11EEA594697B4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:37:52 +0000
ROA not before: Fri 24 Nov 2023 05:37:49 +0000
ROA not after: Tue 26 Dec 2023 05:37:49 +0000
asID: 62240
IP address blocks: 154.194.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21316 (0x5344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:37:49 2023 GMT
Not After : Dec 26 05:37:49 2023 GMT
Subject: CN=656036b0-f76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:37:e8:15:51:f7:7a:c7:56:7e:31:fe:e0:
58:8f:64:d0:97:bb:f2:20:86:b9:6e:ea:e9:b1:c2:
12:fa:9d:0d:bf:fc:ac:03:f3:7a:63:58:d8:a2:01:
36:0d:a0:89:41:20:7e:c6:cf:96:6e:2b:6a:3a:f1:
82:9a:e0:b0:92:e9:7d:47:23:bb:04:fb:c9:23:5d:
7d:72:8b:0b:2a:f2:f6:a6:21:c9:d0:0c:ab:d0:86:
ad:ec:fb:90:fe:c0:05:6c:23:62:60:cc:3b:4e:c7:
90:95:58:be:e5:79:16:76:9b:01:5d:cf:e7:cb:04:
28:88:51:1e:73:dd:ce:a9:68:c2:4a:f1:43:19:24:
4c:f9:3f:6d:3f:37:08:5b:16:0f:d6:77:0a:f2:64:
90:f0:37:b3:32:2d:87:1d:83:db:88:2b:48:56:6c:
96:03:db:f3:70:3a:50:0a:c3:7f:e6:b5:9a:06:8b:
57:2e:a5:52:49:75:2a:87:db:af:4a:f3:21:3e:9a:
eb:1f:9f:32:3b:25:5c:bf:e1:54:dc:88:7b:9b:41:
2a:2a:1d:7a:8d:da:09:75:64:ad:3d:5b:23:7e:e7:
b5:b8:24:33:97:7e:b6:96:00:75:6c:70:58:32:ed:
5a:e8:5a:ce:de:48:06:15:dc:a7:f7:58:d5:9e:76:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DE:B3:E4:9B:06:19:B0:DD:CC:39:AA:5D:22:AF:8E:09:88:6F:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C109D328A8B11EEA594697B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:67:5d:b9:98:28:ba:b3:1e:af:12:88:6e:82:be:40:06:4e:
7e:c1:81:9a:67:68:b3:21:c8:6f:f6:6b:63:c5:ab:39:61:a7:
8c:d0:88:58:ad:cb:f7:55:65:8c:bd:0d:94:fc:8e:ff:82:26:
b3:4c:9f:94:b7:fe:a7:69:3c:fd:94:1c:e2:df:7c:17:2a:d3:
e9:8c:ec:b0:7a:52:97:1b:9b:69:f1:88:b2:b0:be:8a:6f:59:
fb:f2:b7:ac:c3:b2:8f:b0:f2:b7:67:6a:9d:c4:5c:72:c3:c6:
86:78:cf:eb:7e:3a:f9:e2:b5:a0:7a:1d:64:65:02:fa:b5:3f:
05:65:65:56:4d:f6:45:71:31:5c:bf:6b:5a:48:4e:d5:78:86:
49:2f:ef:fe:3f:73:d6:30:99:99:04:98:70:cf:97:22:0a:f3:
2c:43:35:84:4b:4e:d3:46:53:3c:25:88:75:36:49:dc:07:af:
2c:6d:e8:8f:7d:e0:a5:6a:ff:78:3f:a5:a6:80:4c:3c:56:14:
fb:55:0b:bb:17:e7:7c:7f:21:cb:40:9d:0a:fb:a8:b6:d6:2e:
35:ab:50:e0:03:64:19:f5:27:4d:62:09:11:7f:59:e4:5a:51:
30:12:1b:eb:e9:fb:aa:44:72:6a:a4:c9:40:ae:11:6a:2b:36:
56:9e:e5:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU0QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNTM3NDlaFw0yMzEyMjYwNTM3NDlaMBgxFjAU
BgNVBAMTDTY1NjAzNmIwLWY3NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmeTfoFVH3esdWfjH+4FiPZNCXu/Ighrlu6umxwhL6nQ2//KwD83pjWNii
ATYNoIlBIH7Gz5ZuK2o68YKa4LCS6X1HI7sE+8kjXX1yiwsq8vamIcnQDKvQhq3s
+5D+wAVsI2JgzDtOx5CVWL7leRZ2mwFdz+fLBCiIUR5z3c6paMJK8UMZJEz5P20/
NwhbFg/WdwryZJDwN7MyLYcdg9uIK0hWbJYD2/NwOlAKw3/mtZoGi1cupVJJdSqH
269K8yE+musfnzI7JVy/4VTciHubQSoqHXqN2gl1ZK09WyN+57W4JDOXfraWAHVs
cFgy7VroWs7eSAYV3Kf3WNWedu2jAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtd6z
5JsGGbDdzDmqXSKvjgmIb2QwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzlDMTA5RDMyOEE4QjExRUVBNTk0Njk3QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawnMwDQYJKoZIhvcNAQEL
BQADggEBAEpnXbmYKLqzHq8SiG6CvkAGTn7BgZpnaLMhyG/2a2PFqzlhp4zQiFit
y/dVZYy9DZT8jv+CJrNMn5S3/qdpPP2UHOLffBcq0+mM7LB6Upcbm2nxiLKwvopv
Wfvyt6zDso+w8rdnap3EXHLDxoZ4z+t+OvnitaB6HWRlAvq1PwVlZVZN9kVxMVy/
a1pITtV4hkkv7/4/c9YwmZkEmHDPlyIK8yxDNYRLTtNGUzwliHU2SdwHryxt6I99
4KVq/3g/paaATDxWFPtVC7sX53x/IctAnQr7qLbWLjWrUOADZBn1J01iCRF/WeRa
UTASG+vp+6pEcmqkyUCuEWorNlae5b8=
-----END CERTIFICATE-----
Generated at Fri May 9 11:11:09 2025 by rpki-client