Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3900ECAD0C211EF9755E58D762E951A.roa
File: A3900ECAD0C211EF9755E58D762E951A.roa (raw, json)
Hash identifier: v80UTk4HfB/p6g7qVqUSu0XE1NG6UvsYQRsSplAR0kk=
Subject key identifier: C1:E2:FA:F1:E7:A5:FD:0B:3B:AA:6C:3B:26:8E:E7:A5:EC:57:2D:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ABB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3900ECAD0C211EF9755E58D762E951A.roa
Signing time: Sun 12 Jan 2025 08:53:06 +0000
ROA not before: Sun 12 Jan 2025 08:53:02 +0000
ROA not after: Mon 31 Mar 2025 08:53:02 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80571 (0x13abb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 12 08:53:02 2025 GMT
Not After : Mar 31 08:53:02 2025 GMT
Subject: CN=678382f2-5c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:fa:15:41:35:17:1c:24:fe:62:9e:d2:e6:
06:d8:e6:2a:9f:12:78:3a:99:c0:3c:40:de:c8:fe:
a8:4b:8a:57:f3:e5:ee:e6:77:d1:48:cf:73:6d:e1:
bd:75:2d:d8:2d:f9:b6:23:de:d2:8a:cf:f9:c1:e2:
98:fa:e5:a8:c6:52:eb:74:2b:bc:be:75:f4:45:2a:
7d:f1:e9:3a:67:16:55:3b:97:68:05:ed:e5:cc:f2:
3e:8e:8b:a8:6e:70:14:67:86:15:2b:ba:c2:a1:e3:
41:c7:19:45:88:a8:f6:5a:d7:a2:7e:ff:b7:35:f2:
43:16:56:e3:3d:07:9b:04:2a:a1:86:5b:0d:62:b1:
e8:78:10:c9:45:74:b3:a0:a5:35:93:73:26:c6:2d:
f8:60:c2:cb:dc:ff:5d:f1:67:35:4e:c1:db:e6:bc:
dc:2c:86:1d:58:f3:27:fa:b8:bf:3d:2f:be:03:24:
be:24:50:70:ec:80:6f:dc:30:6b:70:48:e3:8f:da:
1c:5c:14:ea:41:6a:3d:09:3a:2c:5b:0e:bb:34:7f:
ce:c6:e1:b3:7d:f6:e3:d5:ba:b3:5f:06:57:58:39:
bf:c5:77:06:3c:02:67:4d:e7:50:1d:d8:e8:b7:08:
34:b7:1b:d8:0a:1b:e7:a4:50:b1:20:44:d3:4f:a6:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:FA:F1:E7:A5:FD:0B:3B:AA:6C:3B:26:8E:E7:A5:EC:57:2D:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3900ECAD0C211EF9755E58D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
Signature Algorithm: sha256WithRSAEncryption
87:42:af:e6:9e:e1:25:5b:7b:61:c9:70:70:8a:df:a8:91:1a:
e7:0f:39:dc:38:86:d2:64:68:dd:35:49:0b:91:bb:b8:d4:bb:
60:b2:48:da:f2:21:29:c9:85:98:6b:55:81:c6:be:95:05:91:
bb:a7:c0:72:9e:49:23:a7:80:7b:df:cd:f3:77:ae:16:8f:e6:
20:43:ca:7a:65:ab:0b:c5:dc:53:97:53:3a:00:6f:36:0b:0c:
90:25:54:e0:60:68:e9:2e:fd:a4:3c:6d:84:d9:c7:24:03:6f:
75:e9:6a:22:fa:a7:44:1b:96:ff:f7:ad:a1:9a:34:0c:ea:86:
33:af:02:54:9f:8f:0d:b9:3e:45:69:03:b4:32:3e:cf:3a:f4:
a2:c5:1a:fc:88:3e:6b:7d:17:56:32:88:37:dc:24:84:16:9d:
d9:00:ea:88:cb:34:73:4e:65:e9:0f:d6:0b:e3:84:06:00:de:
21:c6:a4:9c:ca:8a:03:1a:fe:45:98:ff:f7:c0:69:85:9e:03:
08:4b:e7:e4:6c:5e:b1:44:75:68:b6:f7:94:8c:5d:b7:ed:89:
55:26:f3:13:7d:78:e3:30:92:cb:fe:19:ca:f9:a9:39:c5:f1:
0f:b3:3a:5a:b1:f9:ff:4c:73:32:5a:00:b3:df:0a:2a:fa:6c:
6b:4a:dc:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATq7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEyMDg1MzAyWhcNMjUwMzMxMDg1MzAyWjAYMRYw
FAYDVQQDEw02NzgzODJmMi01YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1N36FUE1Fxwk/mKe0uYG2OYqnxJ4OpnAPEDeyP6oS4pX8+Xu5nfRSM9z
beG9dS3YLfm2I97Sis/5weKY+uWoxlLrdCu8vnX0RSp98ek6ZxZVO5doBe3lzPI+
jouobnAUZ4YVK7rCoeNBxxlFiKj2Wteifv+3NfJDFlbjPQebBCqhhlsNYrHoeBDJ
RXSzoKU1k3Mmxi34YMLL3P9d8Wc1TsHb5rzcLIYdWPMn+ri/PS++AyS+JFBw7IBv
3DBrcEjjj9ocXBTqQWo9CTosWw67NH/OxuGzffbj1bqzXwZXWDm/xXcGPAJnTedQ
Hdjotwg0txvYChvnpFCxIETTT6Zr9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMHi
+vHnpf0LO6psOyaO56XsVy3PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMzkwMEVDQUQwQzIxMUVGOTc1NUU1OEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlHcMA0GCSqGSIb3DQEB
CwUAA4IBAQCHQq/mnuElW3thyXBwit+okRrnDzncOIbSZGjdNUkLkbu41Ltgskja
8iEpyYWYa1WBxr6VBZG7p8Bynkkjp4B7383zd64Wj+YgQ8p6ZasLxdxTl1M6AG82
CwyQJVTgYGjpLv2kPG2E2cckA2916Woi+qdEG5b/962hmjQM6oYzrwJUn48NuT5F
aQO0Mj7POvSixRr8iD5rfRdWMog33CSEFp3ZAOqIyzRzTmXpD9YL44QGAN4hxqSc
yooDGv5FmP/3wGmFngMIS+fkbF6xRHVotveUjF237YlVJvMTfXjjMJLL/hnK+ak5
xfEPszpasfn/THMyWgCz3woq+mxrStyW
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:41:05 2025 by rpki-client