Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A37FACC0F52411EFA93CCF74762E951A.roa
File: A37FACC0F52411EFA93CCF74762E951A.roa (raw, json)
Hash identifier: 1xvuPhrccToEk9migWjS+HLTlpN/fQki9PMVNU36odQ=
Subject key identifier: 7F:E5:85:9C:99:CE:CD:91:41:6E:57:05:2B:08:D7:9A:16:C2:F2:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016938
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A37FACC0F52411EFA93CCF74762E951A.roa
Signing time: Thu 27 Feb 2025 16:05:18 +0000
ROA not before: Thu 27 Feb 2025 16:05:14 +0000
ROA not after: Fri 28 Mar 2025 16:05:14 +0000
asID: 395793
IP address blocks: 154.193.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92472 (0x16938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 16:05:14 2025 GMT
Not After : Mar 28 16:05:14 2025 GMT
Subject: CN=67c08d3e-e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:c5:88:c2:b2:d6:11:51:d7:32:cf:43:5b:
03:8c:3c:8f:ed:be:eb:2a:e1:a2:58:a0:a9:cd:5d:
be:53:41:b1:89:d1:22:c8:06:8b:48:41:d9:ac:f9:
2b:a3:b0:b0:e0:67:db:fa:12:01:76:aa:4f:39:db:
cd:b5:a9:2c:cd:fd:5b:96:78:97:8d:1e:ea:95:b0:
c3:0c:a3:9e:7d:db:07:4b:41:1c:0f:d7:7c:cd:17:
38:33:95:54:f7:85:25:bb:09:88:40:32:b5:44:14:
b0:c5:4a:0d:d8:f7:b9:83:bf:f4:d8:f6:78:47:56:
6d:74:b1:e8:60:bf:d7:f1:dc:11:6e:99:d6:c6:1c:
43:22:d8:fe:ac:9b:b3:7f:9c:63:e7:1a:29:b8:28:
07:76:3d:3b:01:0f:e3:30:26:0f:77:f9:8c:13:a3:
d5:a4:6b:d0:91:c9:5c:41:93:db:7d:b5:23:9a:b2:
7e:46:f2:4c:3e:db:8b:77:59:6a:69:28:b4:26:a2:
66:39:db:e8:77:ac:c4:8b:f1:ca:e9:da:09:bc:17:
81:b5:f9:cd:46:06:f6:36:a1:ee:21:b6:00:20:a6:
93:09:c5:52:79:92:c9:3d:e2:f9:24:51:19:ee:93:
fd:8a:e9:2a:ef:c5:e8:79:58:8d:bc:de:5b:09:5b:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:85:9C:99:CE:CD:91:41:6E:57:05:2B:08:D7:9A:16:C2:F2:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A37FACC0F52411EFA93CCF74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.100.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f1:80:d9:df:9f:ca:f1:ed:46:a9:ec:17:d2:37:fe:4d:a3:
b7:32:8c:8a:d8:ce:28:40:7f:48:08:6c:cf:fb:62:1b:a5:f6:
c8:39:50:aa:b8:0a:a8:88:65:10:47:26:0c:ad:30:a1:94:87:
87:9c:85:c2:a4:dd:4a:bd:79:b7:01:36:ad:71:83:b7:e1:c7:
da:7c:40:b2:bc:7e:e4:70:41:d1:04:25:24:4f:1c:12:81:68:
d3:51:82:cf:e2:de:29:fe:99:17:86:c0:8e:8e:7e:72:22:33:
b8:3e:43:6a:a9:3d:8b:4f:14:42:61:8b:e2:40:cf:e1:f0:5b:
34:37:49:4c:f8:ee:9b:3c:2e:78:cc:36:f5:90:e7:24:7b:cc:
55:d9:86:86:b8:a6:76:fd:6d:1b:06:4b:54:21:b1:ca:61:69:
64:33:af:7c:96:6f:74:91:89:24:ca:a7:c1:08:05:83:66:75:
59:a9:44:c3:58:fb:53:61:95:d7:fc:eb:f0:33:d7:18:01:1e:
d8:3a:0e:f9:b2:f3:e3:da:a5:80:7e:0e:83:33:cf:9c:6f:56:
35:ea:2e:3b:87:52:e7:49:58:b0:39:5a:73:2e:b2:69:d6:01:
9d:eb:7d:7c:b2:97:90:e3:3c:a6:e0:83:58:8a:3a:ca:23:f8:
f5:09:80:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWk4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTYwNTE0WhcNMjUwMzI4MTYwNTE0WjAYMRYw
FAYDVQQDEw02N2MwOGQzZS1lNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv3TFiMKy1hFR1zLPQ1sDjDyP7b7rKuGiWKCpzV2+U0GxidEiyAaLSEHZ
rPkro7Cw4Gfb+hIBdqpPOdvNtakszf1blniXjR7qlbDDDKOefdsHS0EcD9d8zRc4
M5VU94UluwmIQDK1RBSwxUoN2Pe5g7/02PZ4R1ZtdLHoYL/X8dwRbpnWxhxDItj+
rJuzf5xj5xopuCgHdj07AQ/jMCYPd/mME6PVpGvQkclcQZPbfbUjmrJ+RvJMPtuL
d1lqaSi0JqJmOdvod6zEi/HK6doJvBeBtfnNRgb2NqHuIbYAIKaTCcVSeZLJPeL5
JFEZ7pP9iukq78XoeViNvN5bCVt9eQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH/l
hZyZzs2RQW5XBSsI15oWwvL3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMzdGQUNDMEY1MjQxMUVGQTkzQ0NGNzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFkMA0GCSqGSIb3DQEB
CwUAA4IBAQCC8YDZ35/K8e1GqewX0jf+TaO3MoyK2M4oQH9ICGzP+2IbpfbIOVCq
uAqoiGUQRyYMrTChlIeHnIXCpN1KvXm3ATatcYO34cfafECyvH7kcEHRBCUkTxwS
gWjTUYLP4t4p/pkXhsCOjn5yIjO4PkNqqT2LTxRCYYviQM/h8Fs0N0lM+O6bPC54
zDb1kOcke8xV2YaGuKZ2/W0bBktUIbHKYWlkM698lm90kYkkyqfBCAWDZnVZqUTD
WPtTYZXX/OvwM9cYAR7YOg75svPj2qWAfg6DM8+cb1Y16i47h1LnSViwOVpzLrJp
1gGd6318speQ4zym4INYijrKI/j1CYC4
-----END CERTIFICATE-----
Generated at Fri May 9 06:19:47 2025 by rpki-client