Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D5E358F82711EFA8631281762E951A.roa
File: B4D5E358F82711EFA8631281762E951A.roa (raw, json)
Hash identifier: wAB6y18IqhAxb+9VMlJQOYTrUQr/QAJFuyOUqUtW8FU=
Subject key identifier: E1:B0:02:B1:C6:1A:9E:D1:C8:E5:F5:AA:E8:A3:22:4E:E3:3B:3D:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017075
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D5E358F82711EFA8631281762E951A.roa
Signing time: Mon 03 Mar 2025 12:04:49 +0000
ROA not before: Mon 03 Mar 2025 12:04:45 +0000
ROA not after: Mon 31 Mar 2025 12:04:45 +0000
asID: 202656
IP address blocks: 154.218.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94325 (0x17075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:04:45 2025 GMT
Not After : Mar 31 12:04:45 2025 GMT
Subject: CN=67c59ae1-ddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:ca:8e:f4:b0:75:2b:44:5d:a0:f6:5c:34:
61:65:1a:1d:ae:97:05:07:91:d3:3a:e5:73:a1:14:
9b:a8:80:76:2a:ba:12:57:ee:04:78:1a:57:47:f7:
43:67:55:45:aa:a8:a7:5f:60:75:04:70:18:b0:61:
e7:56:2a:3f:90:3e:3c:c3:b7:96:cc:e0:26:e9:48:
45:22:52:a0:2b:9a:bd:1c:c5:d4:a1:c0:f3:e4:43:
66:0f:21:13:55:39:c7:66:21:5c:55:5a:d2:10:f6:
57:64:eb:e9:c8:38:ee:77:7a:92:73:eb:71:b8:11:
cf:b7:b4:2e:20:6e:b7:96:a5:97:72:df:1b:87:c6:
c9:8d:14:1c:27:af:00:aa:62:43:b3:4c:17:b6:d4:
75:1d:e9:93:c1:e7:0f:af:45:a4:0b:38:44:42:d5:
e6:92:82:b7:38:6f:f4:04:87:50:b9:ad:ef:f1:e1:
d2:48:ff:a5:ec:22:f4:ae:6a:ce:52:4c:94:ff:1e:
7e:ad:ca:69:33:6f:7a:d5:e8:5e:af:41:da:99:98:
eb:6e:ab:dd:21:c8:e5:53:ae:51:d6:56:05:e9:eb:
e0:4b:8d:26:29:80:84:23:7f:9a:bb:f3:04:82:83:
cc:04:5b:5b:96:0e:75:a9:63:b2:18:d9:7c:8b:46:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:02:B1:C6:1A:9E:D1:C8:E5:F5:AA:E8:A3:22:4E:E3:3B:3D:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D5E358F82711EFA8631281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9c:0e:18:b8:7c:8a:1a:80:d0:86:03:0c:37:6a:e0:09:ce:
e8:71:ab:98:3f:f3:2d:6f:77:50:7c:15:b2:f0:91:b8:a4:71:
47:a4:e7:31:cd:b9:1b:75:4f:6e:d5:ca:bd:ce:00:dd:ff:97:
00:13:a5:e6:66:09:20:23:f3:61:24:07:1a:d5:9d:d9:2b:d1:
3f:96:3d:64:fc:b0:2a:85:ea:20:0e:fc:9b:6c:55:65:e0:0f:
01:3c:69:02:33:1e:9d:b3:3c:60:60:f2:6b:7d:59:6c:4f:ab:
e9:2f:c3:0e:ea:0e:fe:fb:75:ed:c7:5e:20:e0:92:66:ac:62:
ae:a2:61:1f:25:e0:4d:12:15:08:b5:7c:65:f5:33:fb:05:d9:
36:07:df:1c:4e:78:d3:d7:fe:47:cc:88:a9:59:31:ad:81:00:
20:5a:9b:22:aa:31:71:b2:13:6c:b9:a0:e3:30:a1:c0:75:c3:
b7:d5:9b:28:92:88:55:b9:47:c5:ce:f5:2a:8e:21:62:2a:98:
c9:ff:c9:6d:ec:ea:71:d0:3b:88:13:1b:a6:91:08:04:b7:74:
51:66:64:2c:26:c1:1f:a0:bc:7e:14:f5:2a:2b:5b:21:cd:b9:
8d:47:10:c7:c0:c9:16:57:2c:25:14:53:28:94:9a:a3:8d:f1:
6b:34:e4:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXB1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTIwNDQ1WhcNMjUwMzMxMTIwNDQ1WjAYMRYw
FAYDVQQDEw02N2M1OWFlMS1kZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwBjKjvSwdStEXaD2XDRhZRodrpcFB5HTOuVzoRSbqIB2KroSV+4EeBpX
R/dDZ1VFqqinX2B1BHAYsGHnVio/kD48w7eWzOAm6UhFIlKgK5q9HMXUocDz5ENm
DyETVTnHZiFcVVrSEPZXZOvpyDjud3qSc+txuBHPt7QuIG63lqWXct8bh8bJjRQc
J68AqmJDs0wXttR1HemTwecPr0WkCzhEQtXmkoK3OG/0BIdQua3v8eHSSP+l7CL0
rmrOUkyU/x5+rcppM2961eher0HamZjrbqvdIcjlU65R1lYF6evgS40mKYCEI3+a
u/MEgoPMBFtblg51qWOyGNl8i0b4fQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOGw
ArHGGp7RyOX1quijIk7jOz0VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNEQ1RTM1OEY4MjcxMUVGQTg2MzEyODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtocMA0GCSqGSIb3DQEB
CwUAA4IBAQBdnA4YuHyKGoDQhgMMN2rgCc7ocauYP/Mtb3dQfBWy8JG4pHFHpOcx
zbkbdU9u1cq9zgDd/5cAE6XmZgkgI/NhJAca1Z3ZK9E/lj1k/LAqheogDvybbFVl
4A8BPGkCMx6dszxgYPJrfVlsT6vpL8MO6g7++3Xtx14g4JJmrGKuomEfJeBNEhUI
tXxl9TP7Bdk2B98cTnjT1/5HzIipWTGtgQAgWpsiqjFxshNsuaDjMKHAdcO31Zso
kohVuUfFzvUqjiFiKpjJ/8lt7Opx0DuIExumkQgEt3RRZmQsJsEfoLx+FPUqK1sh
zbmNRxDHwMkWVywlFFMolJqjjfFrNOSG
-----END CERTIFICATE-----
Generated at Fri May 9 10:51:57 2025 by rpki-client