Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1FB6B16FF2211EFBD1A8562762E951A.roa
File: A1FB6B16FF2211EFBD1A8562762E951A.roa (raw, json)
Hash identifier: 02MI7mIpW9135MPYD5K9a1cGO4CZoBFjbXv0KlCL4JQ=
Subject key identifier: 48:D0:16:C7:33:46:F2:0D:98:CF:6C:93:95:25:C9:31:BC:03:B8:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1FB6B16FF2211EFBD1A8562762E951A.roa
Signing time: Wed 12 Mar 2025 09:16:08 +0000
ROA not before: Wed 12 Mar 2025 09:16:05 +0000
ROA not after: Mon 31 Mar 2025 09:16:05 +0000
asID: 5065
IP address blocks: 154.82.10.0/24 maxlen: 24
154.83.202.0/24 maxlen: 24
154.83.203.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.120.0/22 maxlen: 24
154.93.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95175 (0x173c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 09:16:05 2025 GMT
Not After : Mar 31 09:16:05 2025 GMT
Subject: CN=67d150d8-9037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:6f:da:97:22:12:51:12:16:1a:b0:0e:ee:
c1:39:98:56:72:00:e5:92:db:02:c1:33:a8:26:69:
ef:a4:10:8d:38:f3:c2:b0:b0:6a:a7:0c:15:b7:57:
93:4c:01:ef:62:47:59:51:22:4b:b1:eb:07:c3:70:
50:a9:a7:4f:cb:95:b0:ae:5a:82:80:79:29:4b:7d:
1e:91:ce:b9:e9:b5:d2:e0:42:d7:15:ee:6c:fb:1b:
09:bd:eb:cd:1d:d8:d2:9a:d8:d2:97:3a:7c:1d:14:
3b:f2:03:e0:4d:1b:6d:09:7c:39:98:25:af:48:1b:
f8:ea:b0:48:8c:0e:b8:45:12:4f:eb:25:c5:70:2c:
26:35:3a:a6:9a:d0:f7:53:2b:c6:da:e6:15:d9:23:
ea:45:d3:a1:58:37:13:4d:d4:06:45:79:33:70:3b:
66:5d:9a:45:65:d8:a4:56:25:89:3d:3c:5e:b7:19:
29:76:78:ba:fc:cb:50:c0:51:04:cc:39:2a:e7:5c:
23:e0:16:6e:40:e9:79:df:a6:82:f2:01:35:a1:c4:
d5:02:13:04:73:b7:0a:fb:8d:de:05:a6:b4:22:9d:
41:16:ff:f2:c7:c4:41:ea:a7:45:be:ad:1d:66:ee:
da:1a:97:b7:3a:1b:7c:b4:fd:c0:4b:29:32:e9:20:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D0:16:C7:33:46:F2:0D:98:CF:6C:93:95:25:C9:31:BC:03:B8:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1FB6B16FF2211EFBD1A8562762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.10.0/24
154.83.202.0/23
154.85.110.0/24
154.85.120.0/22
154.93.16.0/22
Signature Algorithm: sha256WithRSAEncryption
42:5a:93:da:a7:4f:ba:5c:6c:ed:8e:b6:3c:99:8d:26:54:a4:
35:15:37:2e:7e:5e:cd:ca:cf:26:22:f5:8f:6f:f1:c8:0a:8f:
ef:49:34:c5:d0:9a:e0:1d:67:7a:f8:e1:f4:16:ac:76:20:25:
74:a9:16:64:59:96:a0:4e:c0:a2:39:d5:48:1e:a1:c8:66:6e:
21:8e:03:3b:14:1a:cc:a9:fa:02:e9:3a:40:0c:9c:1a:86:8f:
89:e4:21:fa:28:9c:78:ec:7a:7b:e0:ce:fd:55:6a:e0:e5:f8:
3f:a5:9f:78:e5:00:a0:88:8c:13:72:d3:11:17:15:74:05:ae:
14:1c:ed:ed:eb:18:20:a4:f0:b8:81:99:0c:36:01:0c:dc:f7:
76:87:30:5f:27:6b:3c:55:73:a8:b7:11:6c:8f:71:ee:68:7f:
78:7f:a8:56:45:e0:20:9a:e3:e1:75:b9:1e:e4:ad:2e:a6:74:
30:7c:02:a3:b9:f0:8f:a1:cc:c7:f2:fc:47:f7:02:4d:cd:ec:
0d:09:7d:5a:93:13:b0:4d:c6:cd:0d:c5:f8:89:75:d1:8b:c4:
c8:ff:a2:c9:55:eb:4d:fa:ed:a4:9e:61:73:22:61:b5:f2:36:
9b:9b:e6:ca:36:6e:95:f9:3c:fc:fe:43:ad:ed:13:eb:6d:c3:
1f:a1:d8:f4
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAXPHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMDkxNjA1WhcNMjUwMzMxMDkxNjA1WjAYMRYw
FAYDVQQDEw02N2QxNTBkOC05MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Ydv2pciElESFhqwDu7BOZhWcgDlktsCwTOoJmnvpBCNOPPCsLBqpwwV
t1eTTAHvYkdZUSJLsesHw3BQqadPy5WwrlqCgHkpS30ekc656bXS4ELXFe5s+xsJ
vevNHdjSmtjSlzp8HRQ78gPgTRttCXw5mCWvSBv46rBIjA64RRJP6yXFcCwmNTqm
mtD3UyvG2uYV2SPqRdOhWDcTTdQGRXkzcDtmXZpFZdikViWJPTxetxkpdni6/MtQ
wFEEzDkq51wj4BZuQOl536aC8gE1ocTVAhMEc7cK+43eBaa0Ip1BFv/yx8RB6qdF
vq0dZu7aGpe3Oht8tP3ASyky6SCywQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFEjQ
FsczRvINmM9sk5UlyTG8A7j7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMUZCNkIxNkZGMjIxMUVGQkQxQTg1NjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAmlIKAwQBmlPKAwQAmlVu
AwQCmlV4AwQCml0QMA0GCSqGSIb3DQEBCwUAA4IBAQBCWpPap0+6XGztjrY8mY0m
VKQ1FTcufl7Nys8mIvWPb/HICo/vSTTF0JrgHWd6+OH0Fqx2ICV0qRZkWZagTsCi
OdVIHqHIZm4hjgM7FBrMqfoC6TpADJwaho+J5CH6KJx47Hp74M79VWrg5fg/pZ94
5QCgiIwTctMRFxV0Ba4UHO3t6xggpPC4gZkMNgEM3Pd2hzBfJ2s8VXOotxFsj3Hu
aH94f6hWReAgmuPhdbke5K0upnQwfAKjufCPoczH8vxH9wJNzewNCX1akxOwTcbN
DcX4iXXRi8TI/6LJVetN+u2knmFzImG18jabm+bKNm6V+Tz8/kOt7RPrbcMfodj0
-----END CERTIFICATE-----
Generated at Fri May 9 21:26:22 2025 by rpki-client