Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9D991BA8A7E11EEB48729504AD9E6FC.roa
File: A9D991BA8A7E11EEB48729504AD9E6FC.roa (raw, json)
Hash identifier: zye0od30jtv+YiSfP3KYomVoCa9PsbHbPpdWTv/fUjA=
Subject key identifier: CD:80:B3:C5:FD:88:E1:58:BE:5D:C7:D4:FB:00:26:C5:A7:B8:EA:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 529E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9D991BA8A7E11EEB48729504AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:05:12 +0000
ROA not before: Fri 24 Nov 2023 04:05:08 +0000
ROA not after: Tue 26 Dec 2023 04:05:08 +0000
asID: 62240
IP address blocks: 154.194.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21150 (0x529e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:05:08 2023 GMT
Not After : Dec 26 04:05:08 2023 GMT
Subject: CN=656020f7-6d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:a2:a7:27:60:ee:65:c5:88:1e:62:ff:d1:
60:36:12:f2:60:91:99:98:19:3a:ef:48:2d:87:95:
a8:2e:49:3d:86:46:fd:ef:f3:a7:4f:eb:fb:9d:c3:
34:23:bc:c3:3e:5a:91:33:db:c2:39:9d:35:b9:7b:
2b:23:aa:27:35:07:01:bf:d9:c1:51:6c:8d:c0:f1:
14:88:69:38:0d:5d:e6:f1:4e:8a:52:03:7e:24:8e:
a6:49:b5:1c:72:48:ae:ce:a7:a5:c4:c2:25:73:0f:
82:b4:06:14:0b:46:9f:1e:3e:ac:f3:e6:fb:9a:30:
1d:8b:4d:ee:56:3f:a1:c1:17:30:a2:35:63:ec:16:
3a:c4:67:26:06:cc:a1:dc:11:67:df:23:c3:17:8d:
1a:3d:42:c6:ee:2c:81:66:17:f6:ac:95:0e:17:24:
83:c4:59:36:82:0b:1e:76:fe:43:e0:5e:57:eb:1b:
06:41:60:19:ce:00:7e:7a:40:ac:6a:83:08:c4:53:
61:38:bb:4d:53:ed:b0:3e:8d:bd:fe:3f:db:c9:28:
1f:bb:34:7c:18:38:f9:ef:d2:59:72:1e:31:0d:ac:
c1:bf:a6:95:ef:e2:ab:8e:d1:df:90:77:82:84:b6:
c4:83:42:81:31:93:00:06:52:b1:dd:ef:3f:0f:2d:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:80:B3:C5:FD:88:E1:58:BE:5D:C7:D4:FB:00:26:C5:A7:B8:EA:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9D991BA8A7E11EEB48729504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ac:7c:0c:08:19:80:9e:30:15:79:74:a1:76:d7:a9:62:d7:
eb:2d:72:d7:89:3e:fe:20:09:35:79:dd:cd:fd:82:dd:cb:f8:
24:e8:da:fd:7c:71:42:26:cd:70:cc:0b:31:58:24:fc:e6:dc:
c9:73:bb:c9:76:72:97:ad:f5:de:73:f2:33:75:10:8a:24:44:
d0:b5:39:0f:31:84:3d:b4:db:6f:fd:1b:fa:21:ef:41:b4:b1:
73:98:87:d1:07:ba:f8:36:48:4c:aa:02:cf:b9:83:9b:24:79:
1a:89:2c:68:66:71:56:3e:fe:5a:61:e4:e9:44:ea:16:49:57:
7d:20:9e:33:fd:63:78:6c:9f:89:30:b3:86:ff:95:2a:f9:a9:
b4:79:d8:32:e8:aa:78:13:1a:2d:6c:95:96:39:cf:ea:2b:c8:
7b:e9:25:97:b9:66:ed:14:88:4a:06:fd:a0:7d:5d:13:5c:6b:
fd:0b:90:3d:3a:32:aa:8a:88:26:4b:11:76:a0:82:2c:58:b4:
c7:cb:e2:88:33:9e:90:bd:83:ec:3a:b7:63:a4:b8:78:03:fb:
d6:7e:bf:b8:48:e6:24:47:8a:ed:8e:e7:eb:2f:b1:a4:96:d2:
5d:1d:1e:e3:51:f4:55:1c:e1:25:30:3d:a6:17:d7:0b:25:87:
c9:eb:d6:cb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUp4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNDA1MDhaFw0yMzEyMjYwNDA1MDhaMBgxFjAU
BgNVBAMTDTY1NjAyMGY3LTZkNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNoKKnJ2DuZcWIHmL/0WA2EvJgkZmYGTrvSC2HlaguST2GRv3v86dP6/ud
wzQjvMM+WpEz28I5nTW5eysjqic1BwG/2cFRbI3A8RSIaTgNXebxTopSA34kjqZJ
tRxySK7Op6XEwiVzD4K0BhQLRp8ePqzz5vuaMB2LTe5WP6HBFzCiNWPsFjrEZyYG
zKHcEWffI8MXjRo9QsbuLIFmF/aslQ4XJIPEWTaCCx52/kPgXlfrGwZBYBnOAH56
QKxqgwjEU2E4u01T7bA+jb3+P9vJKB+7NHwYOPnv0llyHjENrMG/ppXv4quO0d+Q
d4KEtsSDQoExkwAGUrHd7z8PLaMfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzYCz
xf2I4Vi+XcfU+wAmxae46rkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0E5RDk5MUJBOEE3RTExRUVCNDg3Mjk1MDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawn0wDQYJKoZIhvcNAQEL
BQADggEBALKsfAwIGYCeMBV5dKF216li1+stcteJPv4gCTV53c39gt3L+CTo2v18
cUImzXDMCzFYJPzm3Mlzu8l2cpet9d5z8jN1EIokRNC1OQ8xhD2022/9G/oh70G0
sXOYh9EHuvg2SEyqAs+5g5skeRqJLGhmcVY+/lph5OlE6hZJV30gnjP9Y3hsn4kw
s4b/lSr5qbR52DLoqngTGi1slZY5z+oryHvpJZe5Zu0UiEoG/aB9XRNca/0LkD06
MqqKiCZLEXaggixYtMfL4ogznpC9g+w6t2OkuHgD+9Z+v7hI5iRHiu2O5+svsaSW
0l0dHuNR9FUc4SUwPaYX1wslh8nr1ss=
-----END CERTIFICATE-----
Generated at Fri May 9 17:18:27 2025 by rpki-client