Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC33C5EADA6211EF93449853762E951A.roa
File: AC33C5EADA6211EF93449853762E951A.roa (raw, json)
Hash identifier: mRGLxK1TBlM/FkSTt2kY2J4Xg+hmYbFHJJP8+wDULeQ=
Subject key identifier: DD:A8:4A:6D:25:B5:8F:9E:CB:AF:A1:DB:89:40:22:84:79:32:87:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01486F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC33C5EADA6211EF93449853762E951A.roa
Signing time: Fri 24 Jan 2025 14:51:20 +0000
ROA not before: Fri 24 Jan 2025 14:51:17 +0000
ROA not after: Wed 05 Mar 2025 14:51:17 +0000
asID: 49505
IP address blocks: 154.209.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84079 (0x1486f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 14:51:17 2025 GMT
Not After : Mar 5 14:51:17 2025 GMT
Subject: CN=6793a8e8-4519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:0a:94:13:14:96:3c:13:07:e3:03:59:74:
59:4c:ab:11:3a:e8:b9:2d:87:c2:55:ea:48:2c:38:
72:ff:ce:f4:bf:5f:dc:e9:24:2d:d2:b9:58:01:01:
fb:80:f9:9d:cf:06:f6:2e:fc:01:77:e0:c5:65:44:
dc:a8:fc:cd:1b:30:99:c4:74:2a:22:7a:c2:8f:d2:
ed:7c:70:0a:ea:1a:a6:e4:b0:4e:88:90:0f:59:df:
4d:12:ea:34:61:08:38:3c:a0:c3:44:9d:48:51:b5:
57:99:50:98:a7:6b:f5:95:0e:fa:be:61:8f:67:d7:
e9:75:94:94:42:a4:72:75:7f:e3:12:3d:d4:4c:a2:
36:84:8d:aa:15:a2:03:89:18:db:84:50:33:a7:5e:
63:4c:0e:ef:d8:80:6f:3f:63:b0:35:46:c0:7f:02:
c0:67:43:64:1c:3a:fe:c0:83:78:0f:4b:51:c3:6b:
3e:41:91:8f:8c:06:0d:d2:79:33:63:88:4a:44:24:
f5:8e:d0:39:14:b1:97:19:ec:ff:c5:28:d5:91:84:
df:c2:26:70:cb:49:0c:10:2a:8a:5a:39:ce:0a:8d:
57:e4:f0:82:01:71:95:56:6f:29:1c:7e:92:97:ab:
45:52:dd:5f:1e:34:03:a6:99:df:95:43:13:1d:7e:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:4A:6D:25:B5:8F:9E:CB:AF:A1:DB:89:40:22:84:79:32:87:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC33C5EADA6211EF93449853762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.212.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:81:c0:79:a9:9d:ec:32:49:65:e0:fe:ed:7b:28:ad:c4:cc:
b9:38:11:5e:0e:7e:12:13:60:5f:69:2c:dd:a2:10:e9:44:07:
c7:ca:60:85:87:84:d8:e2:fe:4a:a8:58:7c:61:13:56:d5:f8:
6c:19:af:c5:79:d0:77:2f:67:09:dd:78:cc:9f:b1:be:62:40:
ab:b7:5e:f7:e5:68:60:16:72:7e:ed:09:ca:6b:16:e8:29:c8:
7d:56:ad:cf:fc:87:ff:c3:30:5e:49:bc:3d:ca:03:e5:87:9e:
32:28:70:96:47:91:ec:55:98:4e:53:f1:ce:cb:79:d8:53:2f:
f1:b1:27:41:ad:33:dd:62:69:3e:5c:c3:4e:d8:61:a1:86:f0:
4a:1b:07:f5:25:7d:4a:19:06:c6:19:f2:34:9f:92:9d:f0:94:
48:08:80:aa:8b:98:1e:af:b6:dc:e7:bc:a4:31:06:66:26:08:
69:0e:57:06:49:f9:53:ab:c3:84:ee:6b:f2:92:ab:0c:43:34:
d4:07:f1:ec:c8:83:f3:3c:b2:ea:1b:35:4f:dd:22:48:14:83:
15:7e:af:b6:f3:d9:51:26:78:fd:3b:a0:08:3c:54:d8:b9:81:
39:41:05:3f:d8:f4:83:f1:2d:4a:1b:0a:eb:45:60:2e:74:98:
09:6a:94:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUhvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQ1MTE3WhcNMjUwMzA1MTQ1MTE3WjAYMRYw
FAYDVQQDEw02NzkzYThlOC00NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsBgKlBMUljwTB+MDWXRZTKsROui5LYfCVepILDhy/870v1/c6SQt0rlY
AQH7gPmdzwb2LvwBd+DFZUTcqPzNGzCZxHQqInrCj9LtfHAK6hqm5LBOiJAPWd9N
Euo0YQg4PKDDRJ1IUbVXmVCYp2v1lQ76vmGPZ9fpdZSUQqRydX/jEj3UTKI2hI2q
FaIDiRjbhFAzp15jTA7v2IBvP2OwNUbAfwLAZ0NkHDr+wIN4D0tRw2s+QZGPjAYN
0nkzY4hKRCT1jtA5FLGXGez/xSjVkYTfwiZwy0kMECqKWjnOCo1X5PCCAXGVVm8p
HH6Sl6tFUt1fHjQDppnflUMTHX4YVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN2o
Sm0ltY+ey6+h24lAIoR5MoexMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQzMzQzVFQURBNjIxMUVGOTM0NDk4NTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtHUMA0GCSqGSIb3DQEB
CwUAA4IBAQCqgcB5qZ3sMkll4P7teyitxMy5OBFeDn4SE2BfaSzdohDpRAfHymCF
h4TY4v5KqFh8YRNW1fhsGa/FedB3L2cJ3XjMn7G+YkCrt1735WhgFnJ+7QnKaxbo
Kch9Vq3P/If/wzBeSbw9ygPlh54yKHCWR5HsVZhOU/HOy3nYUy/xsSdBrTPdYmk+
XMNO2GGhhvBKGwf1JX1KGQbGGfI0n5Kd8JRICICqi5ger7bc57ykMQZmJghpDlcG
SflTq8OE7mvykqsMQzTUB/HsyIPzPLLqGzVP3SJIFIMVfq+289lRJnj9O6AIPFTY
uYE5QQU/2PSD8S1KGwrrRWAudJgJapRd
-----END CERTIFICATE-----
Generated at Wed Mar 26 23:41:18 2025 by rpki-client