Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D41DB96F6B211EFB75EF29A762E951A.roa
File: 9D41DB96F6B211EFB75EF29A762E951A.roa (raw, json)
Hash identifier: legujkA3gi/0LkDgH05ZpXVfoaVpfP/mE2qecNjt3N4=
Subject key identifier: 93:5D:E3:7D:82:58:A7:65:68:10:25:01:0E:2B:6A:81:91:50:8A:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D41DB96F6B211EFB75EF29A762E951A.roa
Signing time: Sat 01 Mar 2025 15:34:08 +0000
ROA not before: Sat 01 Mar 2025 15:34:04 +0000
ROA not after: Mon 31 Mar 2025 15:34:04 +0000
asID: 202656
IP address blocks: 154.219.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93873 (0x16eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 15:34:04 2025 GMT
Not After : Mar 31 15:34:04 2025 GMT
Subject: CN=67c328ef-a568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8c:3d:98:b6:ce:d7:b5:06:cb:5d:28:58:76:
65:54:10:b3:8a:fb:f5:21:13:70:31:6b:00:27:4e:
19:f5:2e:d2:27:a8:e5:db:84:b3:4f:3e:46:b2:fa:
21:ed:cf:cb:d0:5a:e9:0f:26:c0:5b:42:5d:b6:0e:
ef:2d:a7:41:d0:58:06:fb:fa:b4:c3:69:3e:0e:c2:
72:3c:34:07:97:f1:8a:33:2a:18:b3:f3:9d:09:4e:
08:19:66:37:2e:fc:64:1b:5a:73:66:cf:a7:e0:46:
c9:c4:bd:ac:49:fc:51:b7:79:12:54:8e:51:a3:6c:
55:a5:1e:1e:11:8c:8c:71:6a:a5:b7:d9:d2:42:4e:
38:0d:1c:3f:ab:f6:e4:db:69:d5:a7:b7:d9:d5:73:
8a:e9:c4:d6:e4:9e:5d:22:8b:d1:18:5c:50:cc:fe:
c9:e9:ae:88:fe:56:ae:b1:07:4f:1e:3a:f4:d1:64:
c8:60:16:5e:d7:b7:20:04:42:3d:78:c2:50:e5:b1:
86:f4:7a:2f:bb:03:c6:4c:6a:a1:37:ab:f4:44:be:
ae:98:a7:c5:49:4f:51:c6:43:b1:28:ad:cb:94:1e:
28:7f:a4:f2:2d:91:01:8c:7a:2f:6a:51:ec:e4:36:
9d:47:cb:0b:09:fb:bf:85:50:f9:bb:17:84:c7:47:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5D:E3:7D:82:58:A7:65:68:10:25:01:0E:2B:6A:81:91:50:8A:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D41DB96F6B211EFB75EF29A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.210.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bb:28:f1:b6:65:f8:70:4e:dc:a2:81:f1:47:a8:1d:cb:b8:
67:d1:1c:9a:5e:ef:56:cd:f7:59:39:6f:50:c2:19:ab:31:55:
60:4c:22:2e:1a:83:76:8d:86:a6:47:13:ac:0c:7e:92:83:69:
8d:fe:4e:d1:dd:8e:2c:9b:1e:59:4a:a7:f8:6e:72:b0:a4:32:
3b:56:ca:0b:98:66:f0:b9:08:01:93:db:f8:3a:ff:a6:bc:ed:
1e:ad:5d:d7:42:f5:63:45:ce:13:bb:be:ae:1d:ec:41:16:72:
17:9f:37:b3:cf:82:81:cc:e7:8d:4c:56:fd:85:d0:47:1d:58:
47:4f:e3:04:48:79:3d:62:88:2e:4e:d0:5b:61:3b:8f:6a:14:
42:93:7a:be:7a:95:d8:55:a3:5c:2d:1c:f1:0a:8a:f9:34:5c:
22:c6:16:54:ab:8b:ff:c6:b7:1d:ec:a7:36:5f:0f:9a:0e:7e:
07:33:69:57:84:f2:56:c1:bc:b6:da:32:e9:a4:4f:21:b7:7b:
f1:9e:9e:0c:33:8d:b0:a2:dd:4a:a4:74:eb:19:8c:6d:da:a7:
31:4f:98:b4:05:0b:e1:3b:67:84:91:9d:36:bb:a2:8e:9f:18:
77:af:c6:bf:1c:53:aa:2b:63:14:7d:64:6e:72:81:85:0d:06:
b8:fb:93:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW6xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTUzNDA0WhcNMjUwMzMxMTUzNDA0WjAYMRYw
FAYDVQQDEw02N2MzMjhlZi1hNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6ow9mLbO17UGy10oWHZlVBCzivv1IRNwMWsAJ04Z9S7SJ6jl24SzTz5G
svoh7c/L0FrpDybAW0Jdtg7vLadB0FgG+/q0w2k+DsJyPDQHl/GKMyoYs/OdCU4I
GWY3LvxkG1pzZs+n4EbJxL2sSfxRt3kSVI5Ro2xVpR4eEYyMcWqlt9nSQk44DRw/
q/bk22nVp7fZ1XOK6cTW5J5dIovRGFxQzP7J6a6I/lausQdPHjr00WTIYBZe17cg
BEI9eMJQ5bGG9HovuwPGTGqhN6v0RL6umKfFSU9RxkOxKK3LlB4of6TyLZEBjHov
alHs5DadR8sLCfu/hVD5uxeEx0etHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJNd
432CWKdlaBAlAQ4raoGRUIoZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RDQxREI5NkY2QjIxMUVGQjc1RUYyOUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvSMA0GCSqGSIb3DQEB
CwUAA4IBAQCEuyjxtmX4cE7cooHxR6gdy7hn0RyaXu9WzfdZOW9QwhmrMVVgTCIu
GoN2jYamRxOsDH6Sg2mN/k7R3Y4smx5ZSqf4bnKwpDI7VsoLmGbwuQgBk9v4Ov+m
vO0erV3XQvVjRc4Tu76uHexBFnIXnzezz4KBzOeNTFb9hdBHHVhHT+MESHk9Yogu
TtBbYTuPahRCk3q+epXYVaNcLRzxCor5NFwixhZUq4v/xrcd7Kc2Xw+aDn4HM2lX
hPJWwby22jLppE8ht3vxnp4MM42wot1KpHTrGYxt2qcxT5i0BQvhO2eEkZ02u6KO
nxh3r8a/HFOqK2MUfWRucoGFDQa4+5Mi
-----END CERTIFICATE-----
Generated at Fri May 9 11:49:28 2025 by rpki-client