Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72ED63CF39B11EF9ACCB556762E951A.roa
File: A72ED63CF39B11EF9ACCB556762E951A.roa (raw, json)
Hash identifier: FTuDxiyTPPqTUn2hFoAElF4iX2LY/lfm03pkgoE2bX8=
Subject key identifier: 1D:8E:76:E5:91:2F:94:DF:D8:7D:85:37:48:17:CB:36:27:D3:45:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72ED63CF39B11EF9ACCB556762E951A.roa
Signing time: Tue 25 Feb 2025 17:12:12 +0000
ROA not before: Tue 25 Feb 2025 17:12:09 +0000
ROA not after: Wed 09 Apr 2025 17:12:09 +0000
asID: 138915
IP address blocks: 154.95.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90044 (0x15fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 17:12:09 2025 GMT
Not After : Apr 9 17:12:09 2025 GMT
Subject: CN=67bdf9ec-c6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:10:43:4a:73:d6:a3:5f:f2:63:2d:ca:02:
8e:ba:4d:6f:b9:e4:44:78:d4:49:90:45:c8:86:01:
c9:c3:e4:e9:76:8b:18:ce:c3:49:ed:d0:b3:0c:36:
25:a8:69:97:d9:e0:1a:9b:60:50:d0:76:79:62:05:
f0:03:31:c7:90:0e:d5:e5:aa:4a:87:97:7a:d6:a3:
ca:24:54:1a:ce:ab:58:05:9c:67:37:95:63:57:92:
cc:07:60:1e:0d:05:05:78:bf:4c:ae:82:90:e1:4f:
81:e5:09:96:f0:f6:df:ae:32:5e:79:d8:b8:4a:8b:
1a:b7:07:26:1d:32:35:04:53:af:03:f3:4a:2e:9a:
6d:6e:af:e9:6a:26:01:0a:d0:02:85:ba:22:6e:a8:
8f:1f:b6:a1:1e:33:39:4d:08:88:c6:28:6c:0a:4a:
57:8a:76:a4:2e:40:95:b4:a2:e1:99:39:2e:0a:f9:
66:bb:c9:5f:8a:23:65:9c:7c:4e:4a:9f:6f:3c:fb:
54:f6:de:c8:83:74:cf:42:86:d3:02:b3:96:75:17:
b4:f8:be:a2:6e:0a:ee:d2:dc:e1:ce:f8:11:a6:d5:
f6:d1:8e:96:db:b2:07:bb:99:8e:85:de:0e:3c:7f:
b5:95:77:c4:7d:f8:cc:90:6a:d9:7f:7a:0f:72:24:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:76:E5:91:2F:94:DF:D8:7D:85:37:48:17:CB:36:27:D3:45:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72ED63CF39B11EF9ACCB556762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.90.0/24
Signature Algorithm: sha256WithRSAEncryption
92:df:2a:1b:9c:d0:08:26:1c:e8:3a:40:d3:b0:34:a4:26:9a:
c8:f2:e2:61:9e:25:aa:65:95:1b:60:2a:ff:3d:fb:51:c1:90:
9c:15:4b:be:ae:49:93:e8:7a:c5:25:3d:59:f1:93:d4:81:66:
dd:15:53:15:24:fe:43:70:9e:81:1f:7d:59:dd:aa:de:41:b4:
e8:60:e6:c8:1b:14:46:ef:74:81:f2:1d:76:40:90:d0:92:5b:
2b:e5:6f:00:72:a6:4f:4f:c4:fc:0e:0e:92:ed:ef:51:9b:34:
8b:15:0c:e3:3d:70:04:37:57:9b:f3:2e:47:23:7e:70:e9:b9:
09:ef:fa:23:58:93:21:0f:91:50:d1:0e:ca:7b:a0:ea:86:32:
c0:00:90:10:e1:a2:b8:58:76:18:7d:df:90:4c:cb:a2:5e:fc:
d7:0d:2c:df:2c:44:40:74:84:9a:a2:d4:5c:48:2e:fe:d1:a1:
c3:6d:e9:fa:f2:de:47:f6:fc:bc:37:97:9f:f4:55:25:b3:dd:
14:96:80:89:93:a3:a6:be:78:f9:c0:09:63:36:60:5c:2c:40:
f1:d7:a6:11:d0:c0:88:1d:db:25:0c:8a:bd:00:78:82:71:cb:
86:37:fa:c6:ee:58:8f:4a:07:54:de:9b:c5:89:d0:06:74:ba:
d3:27:38:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV+8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MTcxMjA5WhcNMjUwNDA5MTcxMjA5WjAYMRYw
FAYDVQQDEw02N2JkZjllYy1jNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0zoQQ0pz1qNf8mMtygKOuk1vueREeNRJkEXIhgHJw+TpdosYzsNJ7dCz
DDYlqGmX2eAam2BQ0HZ5YgXwAzHHkA7V5apKh5d61qPKJFQazqtYBZxnN5VjV5LM
B2AeDQUFeL9MroKQ4U+B5QmW8PbfrjJeedi4SosatwcmHTI1BFOvA/NKLpptbq/p
aiYBCtAChboibqiPH7ahHjM5TQiIxihsCkpXinakLkCVtKLhmTkuCvlmu8lfiiNl
nHxOSp9vPPtU9t7Ig3TPQobTArOWdRe0+L6ibgru0tzhzvgRptX20Y6W27IHu5mO
hd4OPH+1lXfEffjMkGrZf3oPciRUpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB2O
duWRL5Tf2H2FN0gXyzYn00XmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNzJFRDYzQ0YzOUIxMUVGOUFDQ0I1NTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml9aMA0GCSqGSIb3DQEB
CwUAA4IBAQCS3yobnNAIJhzoOkDTsDSkJprI8uJhniWqZZUbYCr/PftRwZCcFUu+
rkmT6HrFJT1Z8ZPUgWbdFVMVJP5DcJ6BH31Z3areQbToYObIGxRG73SB8h12QJDQ
klsr5W8AcqZPT8T8Dg6S7e9RmzSLFQzjPXAEN1eb8y5HI35w6bkJ7/ojWJMhD5FQ
0Q7Ke6DqhjLAAJAQ4aK4WHYYfd+QTMuiXvzXDSzfLERAdISaotRcSC7+0aHDben6
8t5H9vy8N5ef9FUls90UloCJk6Omvnj5wAljNmBcLEDx16YR0MCIHdslDIq9AHiC
ccuGN/rG7liPSgdU3pvFidAGdLrTJziF
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:00:59 2025 by rpki-client