Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3FD70688A8D11EE9452FA814AD9E6FC.roa
File: A3FD70688A8D11EE9452FA814AD9E6FC.roa (raw, json)
Hash identifier: YFnFEPxZ5uw/KmwG10CZy7aPbzQ/UoMP5bAanDl9PbI=
Subject key identifier: 7B:61:87:FB:7F:95:5F:FA:D8:BD:3D:E4:5C:35:54:48:DA:9C:0E:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5366
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3FD70688A8D11EE9452FA814AD9E6FC.roa
Signing time: Fri 24 Nov 2023 05:52:24 +0000
ROA not before: Fri 24 Nov 2023 05:52:21 +0000
ROA not after: Tue 26 Dec 2023 05:52:21 +0000
asID: 62240
IP address blocks: 154.194.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21350 (0x5366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 05:52:21 2023 GMT
Not After : Dec 26 05:52:21 2023 GMT
Subject: CN=65603a18-5b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:76:4c:a4:00:ab:a4:7d:f3:43:6b:5d:0f:
6b:b8:09:4c:c5:49:31:3e:99:af:68:92:88:02:40:
63:bd:22:0e:e5:b7:d1:4c:7a:f7:e1:eb:8e:04:d3:
36:03:3f:ac:62:34:5d:7a:10:3e:2d:e4:d1:e2:8a:
2e:c9:91:37:93:7e:03:fc:17:f9:54:36:d0:61:53:
3a:9d:ce:db:b1:bf:ef:c0:51:8b:d5:d9:d4:d6:be:
af:33:75:d0:7b:39:e6:1b:20:9f:d3:58:57:c0:ab:
66:b4:4f:67:c2:4a:d8:0f:51:ef:34:2f:4e:ce:37:
2c:43:38:16:33:89:1e:a6:0e:29:46:1c:37:c9:30:
42:19:f6:00:b6:68:92:8e:24:dd:57:98:0b:5a:54:
b8:cd:a9:e0:aa:f6:95:e5:af:8b:59:33:ad:51:72:
8b:95:43:0d:8f:8f:a7:2b:88:64:93:f3:2b:3f:e0:
1f:a6:f8:f0:8c:34:89:70:a7:b2:a1:8d:f2:64:e3:
ab:c0:7b:f7:4a:a7:67:50:64:a5:68:3a:26:ba:e2:
e3:a5:01:72:b8:17:a9:b2:89:08:bf:29:86:ea:66:
79:4e:41:73:a5:02:02:c1:10:c5:7a:a3:22:53:6b:
67:49:b0:29:ed:b8:f6:a4:2c:08:33:2b:66:93:77:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:61:87:FB:7F:95:5F:FA:D8:BD:3D:E4:5C:35:54:48:DA:9C:0E:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3FD70688A8D11EE9452FA814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:4e:86:1e:be:37:35:6c:ac:14:79:ee:47:c4:4e:0a:05:e7:
06:16:87:ed:e3:c3:e0:03:1b:af:e3:d5:a6:ba:85:b7:a9:ae:
7a:ce:6b:79:a4:7d:55:00:e1:5a:c5:28:6b:ca:18:73:bb:36:
20:3f:bb:3c:8f:82:27:b0:12:fe:df:84:df:bf:6e:0e:47:91:
c7:62:cf:23:36:59:64:a1:38:4b:48:06:99:eb:9a:c8:c8:63:
17:f4:51:a2:fa:74:d6:28:5c:12:85:2a:ec:e3:25:3e:c4:b7:
ed:ab:aa:c5:4d:c0:81:48:d8:3d:c8:ab:8d:b4:64:2e:f5:b4:
f6:e0:22:e8:c6:d2:a3:8a:2a:1c:15:80:9b:c6:e1:05:c6:65:
cc:af:96:53:26:d3:98:21:97:32:4b:af:3b:9b:fa:12:4c:4c:
61:74:30:07:f3:ae:1d:57:fc:23:0a:57:c5:be:2a:4d:2c:32:
0a:a0:46:1b:59:27:38:0d:79:0c:6f:99:e0:e3:20:cc:47:cd:
84:99:d3:04:ab:74:e0:ac:75:34:ad:60:10:23:38:47:8d:a8:
c4:fd:13:ff:ab:ac:4c:2c:da:0a:b2:4b:96:70:3f:bb:b6:09:
f8:b5:33:25:04:14:fe:f7:d8:ff:5e:1f:a4:5d:fc:cd:ef:e6:
b0:63:b9:74
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU2YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNTUyMjFaFw0yMzEyMjYwNTUyMjFaMBgxFjAU
BgNVBAMTDTY1NjAzYTE4LTViOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMYXZMpACrpH3zQ2tdD2u4CUzFSTE+ma9okogCQGO9Ig7lt9FMevfh644E
0zYDP6xiNF16ED4t5NHiii7JkTeTfgP8F/lUNtBhUzqdztuxv+/AUYvV2dTWvq8z
ddB7OeYbIJ/TWFfAq2a0T2fCStgPUe80L07ONyxDOBYziR6mDilGHDfJMEIZ9gC2
aJKOJN1XmAtaVLjNqeCq9pXlr4tZM61RcouVQw2Pj6criGST8ys/4B+m+PCMNIlw
p7KhjfJk46vAe/dKp2dQZKVoOia64uOlAXK4F6myiQi/KYbqZnlOQXOlAgLBEMV6
oyJTa2dJsCntuPakLAgzK2aTdzk1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUe2GH
+3+VX/rYvT3kXDVUSNqcDo8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0EzRkQ3MDY4OEE4RDExRUU5NDUyRkE4MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawnIwDQYJKoZIhvcNAQEL
BQADggEBAMxOhh6+NzVsrBR57kfETgoF5wYWh+3jw+ADG6/j1aa6hbeprnrOa3mk
fVUA4VrFKGvKGHO7NiA/uzyPgiewEv7fhN+/bg5HkcdizyM2WWShOEtIBpnrmsjI
Yxf0UaL6dNYoXBKFKuzjJT7Et+2rqsVNwIFI2D3Iq420ZC71tPbgIujG0qOKKhwV
gJvG4QXGZcyvllMm05ghlzJLrzub+hJMTGF0MAfzrh1X/CMKV8W+Kk0sMgqgRhtZ
JzgNeQxvmeDjIMxHzYSZ0wSrdOCsdTStYBAjOEeNqMT9E/+rrEws2gqyS5ZwP7u2
Cfi1MyUEFP732P9eH6Rd/M3v5rBjuXQ=
-----END CERTIFICATE-----
Generated at Fri May 9 10:45:19 2025 by rpki-client