Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6657FAF4ED11EF9CD91281762E951A.roa
File: AF6657FAF4ED11EF9CD91281762E951A.roa (raw, json)
Hash identifier: xw6+GyPOQkkWIskFR00HayuLU2TykG1fwbksDUdAM7g=
Subject key identifier: 9D:AD:87:35:2B:C9:F0:11:9C:CB:FC:19:FB:A4:B4:FA:BB:46:3F:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01673C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6657FAF4ED11EF9CD91281762E951A.roa
Signing time: Thu 27 Feb 2025 09:31:56 +0000
ROA not before: Thu 27 Feb 2025 09:31:52 +0000
ROA not after: Wed 26 Mar 2025 09:31:52 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91964 (0x1673c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:31:52 2025 GMT
Not After : Mar 26 09:31:52 2025 GMT
Subject: CN=67c0310c-911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:30:d7:24:84:d6:b0:76:be:83:76:6a:38:
9d:16:e0:28:5b:3d:66:f2:11:ad:19:14:02:d5:ea:
10:82:18:3f:12:79:8e:5e:d5:e6:4b:cc:ff:0a:b7:
5e:e4:97:61:ac:bf:45:f3:90:51:c1:d2:f6:12:15:
97:81:3e:8a:f6:5b:28:4c:66:1f:ea:e6:d4:c7:56:
f2:78:8e:11:51:e8:af:80:69:82:e5:cc:44:c7:2b:
1b:18:ba:a8:32:07:f9:03:d6:59:7c:95:86:f1:c7:
8b:14:b7:7c:e9:e3:71:21:9e:8b:75:ee:17:57:c1:
f5:13:26:33:f5:90:22:ef:2b:2e:f7:22:ea:1e:ba:
32:99:55:bd:c0:8d:50:01:70:1b:b2:f5:80:0b:d3:
45:83:aa:3d:1a:e8:33:2c:3f:ff:7e:cf:44:7e:c4:
30:2d:d2:e3:29:e2:26:2f:1b:67:7b:cc:ac:85:8d:
a2:1c:b6:2b:f8:25:fe:40:de:08:92:37:ce:e1:21:
a0:99:ec:30:27:d8:97:f6:2a:06:57:8c:e3:1a:53:
a6:14:65:54:e1:99:3e:4e:c5:f3:db:93:4c:f9:e8:
5b:33:a1:ff:c8:7e:fc:8f:68:82:ac:80:b7:56:0f:
7c:1c:b5:a4:c7:5f:74:66:b6:d9:fa:55:68:84:ad:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:87:35:2B:C9:F0:11:9C:CB:FC:19:FB:A4:B4:FA:BB:46:3F:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF6657FAF4ED11EF9CD91281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6b:d8:69:1f:47:61:68:de:44:7c:ae:fb:88:53:10:ca:3e:
fb:db:7d:31:a1:f3:5b:12:f5:77:4b:a4:20:c3:8c:3c:62:47:
d3:1b:fc:6a:7c:ee:30:54:c5:a9:df:7a:5b:09:c8:57:b5:d5:
57:e9:df:70:b7:00:7f:73:91:53:31:72:44:fa:c6:76:03:53:
79:76:4e:3c:a5:a1:a4:85:ac:d3:9a:30:aa:4c:ed:08:5d:68:
b0:0f:5e:f4:28:89:05:9e:2e:7b:e1:9d:5a:4d:ab:a6:c0:c7:
56:99:f8:5b:b8:a4:36:68:ed:ac:4f:83:05:87:8a:c0:65:01:
4d:23:9f:b0:22:85:fd:b4:77:13:a6:63:09:1a:fc:55:66:af:
b5:5f:19:89:d6:00:19:11:c0:30:76:28:21:bb:78:5d:05:14:
27:32:3c:a1:d2:4e:a3:97:fb:23:d3:72:0f:e5:f0:7a:e3:22:
0e:dd:c3:e6:06:54:4a:8a:aa:67:bc:59:51:9b:50:71:91:c9:
25:bc:b8:ec:fc:15:6f:c0:89:89:16:2b:9d:38:3f:b2:67:f3:
99:ca:66:8f:9a:7f:b6:77:a1:b7:cb:b4:da:57:ff:00:2f:3b:
53:ba:02:cb:2e:54:31:18:47:f9:c1:c6:68:bc:84:16:00:bb:
e7:9d:a8:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWc8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDkzMTUyWhcNMjUwMzI2MDkzMTUyWjAYMRYw
FAYDVQQDEw02N2MwMzEwYy05MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt8gw1ySE1rB2voN2ajidFuAoWz1m8hGtGRQC1eoQghg/EnmOXtXmS8z/
Crde5JdhrL9F85BRwdL2EhWXgT6K9lsoTGYf6ubUx1byeI4RUeivgGmC5cxExysb
GLqoMgf5A9ZZfJWG8ceLFLd86eNxIZ6Lde4XV8H1EyYz9ZAi7ysu9yLqHroymVW9
wI1QAXAbsvWAC9NFg6o9GugzLD//fs9EfsQwLdLjKeImLxtne8yshY2iHLYr+CX+
QN4IkjfO4SGgmewwJ9iX9ioGV4zjGlOmFGVU4Zk+TsXz25NM+ehbM6H/yH78j2iC
rIC3Vg98HLWkx190ZrbZ+lVohK3DYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ2t
hzUryfARnMv8GfuktPq7Rj+WMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRjY2NTdGQUY0RUQxMUVGOUNEOTEyODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMGMA0GCSqGSIb3DQEB
CwUAA4IBAQBPa9hpH0dhaN5EfK77iFMQyj77230xofNbEvV3S6Qgw4w8YkfTG/xq
fO4wVMWp33pbCchXtdVX6d9wtwB/c5FTMXJE+sZ2A1N5dk48paGkhazTmjCqTO0I
XWiwD170KIkFni574Z1aTaumwMdWmfhbuKQ2aO2sT4MFh4rAZQFNI5+wIoX9tHcT
pmMJGvxVZq+1XxmJ1gAZEcAwdighu3hdBRQnMjyh0k6jl/sj03IP5fB64yIO3cPm
BlRKiqpnvFlRm1BxkcklvLjs/BVvwImJFiudOD+yZ/OZymaPmn+2d6G3y7TaV/8A
LztTugLLLlQxGEf5wcZovIQWALvnnai8
-----END CERTIFICATE-----
Generated at Fri May 9 17:20:33 2025 by rpki-client