Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7CF0248A9911EEADFC2C2B4AD9E6FC.roa
File: AA7CF0248A9911EEADFC2C2B4AD9E6FC.roa (raw, json)
Hash identifier: 6ak6jvntjFTvCEBZDz9ScE+eymNY2krALhTRzSYhd30=
Subject key identifier: 37:4E:40:12:9D:C8:D9:55:E4:6D:1C:36:8D:84:EC:18:9B:DF:01:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5450
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7CF0248A9911EEADFC2C2B4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:18:29 +0000
ROA not before: Fri 24 Nov 2023 07:18:26 +0000
ROA not after: Tue 26 Dec 2023 07:18:26 +0000
asID: 62240
IP address blocks: 154.195.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21584 (0x5450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:18:26 2023 GMT
Not After : Dec 26 07:18:26 2023 GMT
Subject: CN=65604e45-4068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:22:b0:7f:de:01:20:05:ce:cc:f1:11:00:
7d:38:88:00:52:36:fa:8e:cb:cf:aa:69:b4:ee:71:
38:20:c4:3b:65:90:06:5a:0b:29:39:25:9e:92:b0:
8d:f4:8d:4a:51:fa:84:e5:fa:ee:bb:e4:fc:84:b0:
44:cb:91:fb:7c:ae:1f:e7:d0:99:03:b5:bc:13:91:
38:5b:d5:df:1f:b3:5c:45:93:82:2a:57:f9:3d:d1:
9e:dc:43:af:79:e2:5c:a8:8d:44:35:1b:46:cb:1c:
db:bf:79:e9:df:9b:da:31:50:b2:dd:96:25:f8:8a:
d1:1a:8c:37:f6:e8:1e:0b:3a:9e:59:b8:6e:d0:f9:
b2:37:10:4e:a1:19:34:f3:19:03:e9:4c:90:08:6b:
a7:4d:a1:5c:ab:fb:f9:aa:dd:84:89:ea:dd:de:bd:
00:8f:8e:96:b3:dc:f2:77:04:7f:e4:a5:d3:2b:74:
92:13:3e:be:c2:c9:d4:40:64:ef:c4:e8:d2:91:34:
4a:27:38:67:1b:12:6e:09:2a:8f:26:d8:1a:c8:f3:
9c:9e:10:c5:c2:b4:ef:f0:76:94:4e:4a:4b:df:e4:
63:17:80:92:21:fe:14:07:70:1b:1f:b7:e2:89:56:
65:6a:9e:25:18:82:25:df:2a:f4:e9:89:87:1d:ae:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:40:12:9D:C8:D9:55:E4:6D:1C:36:8D:84:EC:18:9B:DF:01:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7CF0248A9911EEADFC2C2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
21:12:04:a1:a6:17:de:12:66:bc:24:09:cb:80:e8:d3:cb:d3:
2e:42:c3:ca:44:05:49:5c:c0:27:c8:6e:10:ca:d9:01:1c:8d:
d9:03:5a:f7:b9:23:21:61:7b:07:b5:e1:45:a4:e8:25:cf:cb:
bd:f2:1f:e9:f7:49:1d:25:53:59:2f:de:ca:94:79:38:92:a2:
be:0a:0a:c3:41:07:42:af:b5:48:7b:15:0c:11:45:39:2a:c2:
6e:1d:f9:ed:d2:a1:0e:3f:b4:69:69:2e:be:1b:c8:64:9a:51:
e6:d3:73:95:5b:37:1a:e6:47:12:6b:bb:da:95:25:a0:1e:82:
5c:97:74:51:14:24:68:73:fe:fb:d7:4e:57:ac:75:24:08:ba:
6d:50:2a:15:2d:60:bc:6c:2b:ca:01:76:6f:3c:10:46:f1:c5:
5e:a9:0b:65:61:24:ae:a4:b8:94:3c:82:bb:df:12:f9:81:4a:
0c:0c:9f:4a:d4:b6:5b:90:32:b0:ce:d9:45:e1:29:cc:27:f3:
ca:b9:84:86:21:1d:4e:fc:8a:85:ed:c4:42:2d:68:b6:68:b5:
a3:15:e0:a2:51:29:d7:9f:df:12:5d:3b:35:60:d1:08:88:6f:
3b:fa:dc:18:54:77:27:2b:92:df:eb:58:27:b8:79:0b:a4:ca:
e9:dc:5b:29
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVFAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNzE4MjZaFw0yMzEyMjYwNzE4MjZaMBgxFjAU
BgNVBAMTDTY1NjA0ZTQ1LTQwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCy4CKwf94BIAXOzPERAH04iABSNvqOy8+qabTucTggxDtlkAZaCyk5JZ6S
sI30jUpR+oTl+u675PyEsETLkft8rh/n0JkDtbwTkThb1d8fs1xFk4IqV/k90Z7c
Q6954lyojUQ1G0bLHNu/eenfm9oxULLdliX4itEajDf26B4LOp5ZuG7Q+bI3EE6h
GTTzGQPpTJAIa6dNoVyr+/mq3YSJ6t3evQCPjpaz3PJ3BH/kpdMrdJITPr7CydRA
ZO/E6NKRNEonOGcbEm4JKo8m2BrI85yeEMXCtO/wdpROSkvf5GMXgJIh/hQHcBsf
t+KJVmVqniUYgiXfKvTpiYcdrl9FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUN05A
Ep3I2VXkbRw2jYTsGJvfAScwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0FBN0NGMDI0OEE5OTExRUVBREZDMkMyQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw4YwDQYJKoZIhvcNAQEL
BQADggEBACESBKGmF94SZrwkCcuA6NPL0y5Cw8pEBUlcwCfIbhDK2QEcjdkDWve5
IyFhewe14UWk6CXPy73yH+n3SR0lU1kv3sqUeTiSor4KCsNBB0KvtUh7FQwRRTkq
wm4d+e3SoQ4/tGlpLr4byGSaUebTc5VbNxrmRxJru9qVJaAeglyXdFEUJGhz/vvX
TlesdSQIum1QKhUtYLxsK8oBdm88EEbxxV6pC2VhJK6kuJQ8grvfEvmBSgwMn0rU
tluQMrDO2UXhKcwn88q5hIYhHU78ioXtxEItaLZotaMV4KJRKdef3xJdOzVg0QiI
bzv63BhUdycrkt/rWCe4eQukyuncWyk=
-----END CERTIFICATE-----
Generated at Fri May 9 10:50:03 2025 by rpki-client