Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2645E9AF82A11EFB2971A94762E951A.roa
File: A2645E9AF82A11EFB2971A94762E951A.roa (raw, json)
Hash identifier: +S/3yol8bFApTiR+0nd6oJJmUvK1rpo0s2IhyeeJY/k=
Subject key identifier: 3F:17:54:39:5F:1B:E4:77:6C:3F:FD:E4:F2:66:B1:C6:EF:B5:8D:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017094
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2645E9AF82A11EFB2971A94762E951A.roa
Signing time: Mon 03 Mar 2025 12:25:47 +0000
ROA not before: Mon 03 Mar 2025 12:25:43 +0000
ROA not after: Thu 27 Mar 2025 12:25:43 +0000
asID: 62240
IP address blocks: 154.195.100.0/24 maxlen: 24
154.195.113.0/24 maxlen: 24
154.195.141.0/24 maxlen: 24
154.195.142.0/24 maxlen: 24
154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94356 (0x17094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:25:43 2025 GMT
Not After : Mar 27 12:25:43 2025 GMT
Subject: CN=67c59fcb-742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:69:04:54:22:52:a4:83:9b:27:a9:0d:1c:
46:4e:a9:2e:b5:3b:bf:71:30:57:9b:d5:e1:91:24:
33:5f:a4:f9:96:ab:12:95:1f:7c:6a:1a:d2:d7:10:
e9:0c:22:dd:67:fd:99:f8:d4:47:6e:c2:de:82:6d:
78:9f:b6:41:aa:64:c3:ee:dc:49:8a:ff:1a:e6:8e:
01:2d:c2:a8:71:1a:ff:af:36:db:cd:15:8c:3e:af:
60:23:30:bd:9a:92:65:57:d6:90:6b:fe:be:b8:d7:
af:ca:7d:ae:23:c4:6a:dc:1e:ec:f9:53:8d:fb:1f:
da:f0:16:92:63:94:20:70:7c:21:bc:48:e3:23:76:
10:fa:76:cd:ff:5f:72:14:2a:8c:30:52:27:de:9a:
43:b0:ac:8a:65:ab:06:fc:d7:76:e3:fe:5d:6d:73:
4b:09:c8:0e:f7:1e:8e:46:4c:89:b1:09:50:e7:39:
60:dc:e4:17:fa:91:e4:80:44:fd:e5:3d:fa:97:06:
5f:12:ca:c3:1d:07:32:be:a7:ca:1f:b2:a1:35:03:
65:ad:80:fb:23:68:69:06:da:34:2a:b4:61:c6:1c:
38:cc:49:25:2a:9c:13:9c:9d:52:a5:42:a1:05:ce:
a5:ab:5f:3f:04:1c:f0:2e:d3:5b:14:d2:07:f1:86:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:54:39:5F:1B:E4:77:6C:3F:FD:E4:F2:66:B1:C6:EF:B5:8D:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2645E9AF82A11EFB2971A94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.100.0/24
154.195.113.0/24
154.195.141.0-154.195.142.255
154.223.208.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:7e:58:76:de:05:62:b0:8e:ec:cd:c0:f3:07:7e:2f:03:12:
e6:b8:60:01:09:38:06:b2:65:e2:97:3c:50:54:b2:cd:fb:69:
d2:bb:ab:80:01:22:8d:31:3b:04:8a:7b:13:87:f7:9f:e4:58:
2f:e1:e6:be:11:1e:3c:46:c6:9e:7a:b6:42:0e:46:5e:b5:57:
2e:98:0e:72:c4:f4:c4:47:c2:0c:7a:69:3a:d7:37:ba:50:af:
49:64:0b:db:ba:c0:51:bf:07:7c:80:bd:dc:54:de:0c:57:df:
b2:31:3f:0d:4c:29:68:53:1e:4d:0e:7f:dc:b0:94:53:1f:86:
57:cb:55:f0:1d:68:73:af:e4:37:48:85:53:f6:99:15:8c:2e:
c4:7c:66:61:d7:d7:cb:1d:3a:19:dd:a0:fa:9b:5e:02:d4:39:
8c:90:0b:8d:bb:6e:a8:b8:bc:05:ce:c6:cc:4e:0b:b5:da:aa:
01:c7:de:2f:f5:66:d6:54:59:ee:37:18:1b:e1:19:68:62:08:
3e:30:1b:b6:67:a3:7c:ce:91:1c:0c:e6:a8:f9:03:55:84:54:
53:c5:63:bb:d5:a9:aa:7c:ef:2b:04:e0:a7:60:03:99:b9:0d:
a3:64:2f:e8:72:f9:ed:e1:ff:50:71:c8:63:17:5c:a8:cc:5d:
e9:bd:fb:c8
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAXCUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTIyNTQzWhcNMjUwMzI3MTIyNTQzWjAYMRYw
FAYDVQQDEw02N2M1OWZjYi03NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyhJpBFQiUqSDmyepDRxGTqkutTu/cTBXm9XhkSQzX6T5lqsSlR98ahrS
1xDpDCLdZ/2Z+NRHbsLegm14n7ZBqmTD7txJiv8a5o4BLcKocRr/rzbbzRWMPq9g
IzC9mpJlV9aQa/6+uNevyn2uI8Rq3B7s+VON+x/a8BaSY5QgcHwhvEjjI3YQ+nbN
/19yFCqMMFIn3ppDsKyKZasG/Nd24/5dbXNLCcgO9x6ORkyJsQlQ5zlg3OQX+pHk
gET95T36lwZfEsrDHQcyvqfKH7KhNQNlrYD7I2hpBto0KrRhxhw4zEklKpwTnJ1S
pUKhBc6lq18/BBzwLtNbFNIH8YbrrwIDAQABo4ICvzCCArswHQYDVR0OBBYEFD8X
VDlfG+R3bD/95PJmscbvtY3UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMjY0NUU5QUY4MkExMUVGQjI5NzFBOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsNkAwQAmsNxMAwDBACa
w40DBACaw44DBASa39AwDQYJKoZIhvcNAQELBQADggEBALh+WHbeBWKwjuzNwPMH
fi8DEua4YAEJOAayZeKXPFBUss37adK7q4ABIo0xOwSKexOH95/kWC/h5r4RHjxG
xp56tkIORl61Vy6YDnLE9MRHwgx6aTrXN7pQr0lkC9u6wFG/B3yAvdxU3gxX37Ix
Pw1MKWhTHk0Of9ywlFMfhlfLVfAdaHOv5DdIhVP2mRWMLsR8ZmHX18sdOhndoPqb
XgLUOYyQC427bqi4vAXOxsxOC7XaqgHH3i/1ZtZUWe43GBvhGWhiCD4wG7Zno3zO
kRwM5qj5A1WEVFPFY7vVqap87ysE4KdgA5m5DaNkL+hy+e3h/1BxyGMXXKjMXem9
+8g=
-----END CERTIFICATE-----
Generated at Fri May 9 12:08:26 2025 by rpki-client