Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0EE43B68A9C11EEB4DCB1344AD9E6FC.roa
File: A0EE43B68A9C11EEB4DCB1344AD9E6FC.roa (raw, json)
Hash identifier: onoFKtGEE/edIlBTuVV7Ihx+wYs2pk8sM3nUmGiYXEc=
Subject key identifier: 41:09:DF:75:58:B5:42:A6:99:6C:7B:4A:05:49:28:BA:7D:B6:A7:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5489
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0EE43B68A9C11EEB4DCB1344AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:39:41 +0000
ROA not before: Fri 24 Nov 2023 07:39:38 +0000
ROA not after: Tue 26 Dec 2023 07:39:38 +0000
asID: 62240
IP address blocks: 154.195.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21641 (0x5489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:39:38 2023 GMT
Not After : Dec 26 07:39:38 2023 GMT
Subject: CN=6560533d-5e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:11:5c:c9:d6:48:a5:70:25:f5:98:5e:43:
a1:39:81:3a:b4:eb:e5:60:a0:9a:bb:d1:88:1a:0c:
15:9f:fb:d8:ae:99:4d:90:3c:b8:1d:b6:d2:ec:10:
f0:fe:fa:54:eb:f4:4a:24:b3:ea:d1:12:78:e8:05:
ba:bc:a8:fa:c8:eb:4c:83:52:27:d6:39:e5:3c:31:
21:dd:64:6b:03:5e:04:36:64:c0:db:be:77:eb:2e:
fd:af:e2:b5:8d:56:19:2e:00:c0:03:51:6b:55:8c:
7d:29:a4:98:28:47:dc:c8:97:b0:7b:90:32:30:8e:
e6:12:b8:81:fb:87:0c:f5:e9:92:09:4f:80:73:2f:
b5:16:22:42:48:e0:1e:f1:a2:3a:d7:aa:15:22:fd:
bd:a4:e1:1c:a9:8b:af:0d:a3:c6:63:33:a9:bb:47:
87:8e:50:ed:15:c9:36:39:3e:2c:ff:6c:45:28:57:
24:7c:c1:2c:66:1d:0e:d1:4b:3b:97:e2:36:69:e9:
88:1f:29:98:f0:51:d4:5a:8b:65:e3:a9:0d:0b:06:
fa:f4:5c:73:f3:f2:ef:21:f4:7e:3b:e6:8d:34:72:
7d:e0:8d:e9:1d:21:0c:bf:b8:7d:ad:7b:d7:c5:6a:
96:f5:71:1b:2b:5c:ec:b3:8e:e5:13:12:71:68:76:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:DF:75:58:B5:42:A6:99:6C:7B:4A:05:49:28:BA:7D:B6:A7:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0EE43B68A9C11EEB4DCB1344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:fd:f8:d8:7b:34:68:60:55:8d:68:58:00:78:e0:7d:5e:28:
3a:60:eb:3f:00:c1:cd:fb:1b:59:c1:07:1b:23:aa:0b:5e:67:
8c:4b:10:14:c7:81:34:c1:bd:1f:de:c2:89:68:d3:ab:19:f7:
07:18:2a:12:05:ae:b0:45:1d:23:ea:43:f5:16:33:11:29:a1:
b8:87:24:93:56:48:db:44:f7:73:0f:69:08:c3:49:f7:da:98:
f0:c2:69:23:f4:68:97:95:b1:1c:65:c9:81:3e:76:01:19:92:
d8:74:86:89:58:73:60:9c:fa:26:0f:8b:c1:5e:f7:1e:b7:37:
bd:d7:a2:ef:da:20:dc:41:5c:96:ca:76:36:b2:f7:dd:43:6c:
20:02:e3:00:a3:3b:e5:73:19:67:0a:a2:05:f6:d4:78:fe:14:
84:e3:7a:38:d2:e5:2a:cf:d4:1b:6b:cd:4d:73:19:e2:eb:9b:
b8:90:c3:f9:54:cf:72:8e:de:c2:64:1d:cc:24:3b:c1:46:9d:
84:9b:96:1b:f0:d0:b4:49:68:bb:d6:1c:51:ff:a6:9f:66:ee:
91:d5:bf:d3:cf:46:e2:95:b4:dc:f7:33:30:40:16:54:a7:e8:
f8:8a:e8:a9:bd:38:c0:a7:f9:08:55:37:be:6a:4b:30:91:bd:
65:d3:47:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVIkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNzM5MzhaFw0yMzEyMjYwNzM5MzhaMBgxFjAU
BgNVBAMTDTY1NjA1MzNkLTVlMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzJRFcydZIpXAl9ZheQ6E5gTq06+VgoJq70YgaDBWf+9iumU2QPLgdttLs
EPD++lTr9Eoks+rREnjoBbq8qPrI60yDUifWOeU8MSHdZGsDXgQ2ZMDbvnfrLv2v
4rWNVhkuAMADUWtVjH0ppJgoR9zIl7B7kDIwjuYSuIH7hwz16ZIJT4BzL7UWIkJI
4B7xojrXqhUi/b2k4Rypi68No8ZjM6m7R4eOUO0VyTY5Piz/bEUoVyR8wSxmHQ7R
SzuX4jZp6YgfKZjwUdRai2XjqQ0LBvr0XHPz8u8h9H475o00cn3gjekdIQy/uH2t
e9fFapb1cRsrXOyzjuUTEnFodqavAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQQnf
dVi1QqaZbHtKBUkoun22p8QwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0EwRUU0M0I2OEE5QzExRUVCNERDQjEzNDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw4QwDQYJKoZIhvcNAQEL
BQADggEBAKb9+Nh7NGhgVY1oWAB44H1eKDpg6z8Awc37G1nBBxsjqgteZ4xLEBTH
gTTBvR/ewolo06sZ9wcYKhIFrrBFHSPqQ/UWMxEpobiHJJNWSNtE93MPaQjDSffa
mPDCaSP0aJeVsRxlyYE+dgEZkth0holYc2Cc+iYPi8Fe9x63N73Xou/aINxBXJbK
djay991DbCAC4wCjO+VzGWcKogX21Hj+FITjejjS5SrP1BtrzU1zGeLrm7iQw/lU
z3KO3sJkHcwkO8FGnYSblhvw0LRJaLvWHFH/pp9m7pHVv9PPRuKVtNz3MzBAFlSn
6PiK6Km9OMCn+QhVN75qSzCRvWXTR/Q=
-----END CERTIFICATE-----
Generated at Fri May 9 10:58:03 2025 by rpki-client