Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6EC9A7CF5E511EF8B0869A3762E951A.roa
File: B6EC9A7CF5E511EF8B0869A3762E951A.roa (raw, json)
Hash identifier: uFEjydbR42xGG/ce88RHpz95oHnYj+qtoYC48qe8s3c=
Subject key identifier: EA:38:19:18:23:65:B4:7B:41:C7:4D:46:67:7C:21:DE:FD:6F:B6:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6EC9A7CF5E511EF8B0869A3762E951A.roa
Signing time: Fri 28 Feb 2025 15:07:24 +0000
ROA not before: Fri 28 Feb 2025 15:07:20 +0000
ROA not after: Wed 26 Mar 2025 15:07:20 +0000
asID: 62240
IP address blocks: 154.194.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93078 (0x16b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 15:07:20 2025 GMT
Not After : Mar 26 15:07:20 2025 GMT
Subject: CN=67c1d12c-ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:d4:e7:2f:01:fc:14:b7:b8:39:5f:1d:fa:
e9:87:e8:d5:8f:bb:99:2a:a1:8f:e8:4b:3f:0e:b6:
fb:fa:15:7f:bc:24:3e:ab:62:44:81:5e:3f:8d:97:
ee:3e:71:e5:ec:f5:c4:8b:1d:78:d1:af:a6:c1:90:
90:ee:28:58:bd:5a:cf:1c:05:29:de:4e:10:c9:c1:
63:96:64:b3:92:7f:51:a3:32:c1:54:35:6d:09:cf:
d6:9e:73:13:f5:e9:0c:9a:f6:5c:80:7d:5d:00:52:
fc:cb:d2:7e:0b:69:ce:2c:ea:5a:6b:f6:3b:00:95:
40:49:96:00:1d:da:fa:f4:25:22:68:f2:28:53:a4:
21:aa:c3:13:ec:6f:69:ec:38:1d:28:e8:b3:5d:17:
96:69:6e:ce:06:69:e9:e9:3c:60:b7:e9:36:d4:ae:
8d:8d:37:a4:75:6b:75:d3:25:f8:64:d5:e5:0c:c7:
d6:ac:b1:6c:3d:0d:e1:e2:7c:e0:fb:4d:a5:aa:ed:
04:81:18:91:39:c6:1b:45:d0:ff:84:f3:18:f3:1c:
32:17:43:96:48:3b:1d:74:d2:b3:44:d0:e6:35:9a:
88:4d:c8:ee:57:25:f2:1b:4f:93:02:ef:c9:3c:80:
73:12:0f:ed:78:cc:34:36:3b:61:c1:29:04:83:1b:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:19:18:23:65:B4:7B:41:C7:4D:46:67:7C:21:DE:FD:6F:B6:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6EC9A7CF5E511EF8B0869A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.75.0/24
Signature Algorithm: sha256WithRSAEncryption
13:42:cc:dd:02:7f:f5:1e:68:71:db:c4:8b:66:a6:2f:35:f4:
fd:5d:43:47:49:e1:65:fd:20:a4:f4:1f:b5:89:14:8f:ae:a9:
42:db:c2:e1:44:4d:20:18:b3:06:26:b5:0f:37:0e:4b:78:66:
44:39:42:15:ed:b4:f8:be:68:2c:09:05:3d:fb:68:72:60:e6:
31:8c:5f:dc:64:8d:ab:cf:ab:29:9b:3d:ab:32:7b:e6:97:d7:
6a:9a:1e:c9:00:f5:98:46:8a:d7:6d:00:de:3d:36:db:dc:4a:
39:b8:02:da:db:89:7c:c2:ae:88:77:22:8a:68:f3:de:9a:cb:
a0:63:c3:2a:85:23:11:29:41:da:f5:0c:0e:7c:b7:9c:f5:91:
26:72:63:f1:2b:94:a8:5e:b2:49:ab:4e:4f:3f:54:52:79:0e:
fb:e2:de:3c:00:bf:12:b6:0d:97:fa:9d:5d:d7:e3:0f:80:d8:
43:62:f1:3d:a2:54:62:3f:51:57:c8:c8:b1:3b:af:ba:6e:52:
10:e1:fa:94:ed:bf:73:d2:9c:e3:da:87:89:be:b7:c9:45:aa:
e3:e2:8c:bd:6e:d7:e7:3c:b3:49:84:fa:f0:dd:9c:01:66:c8:
65:92:85:74:2b:90:ed:0b:6e:76:2c:4f:6a:64:8d:f7:b6:91:
7e:d5:9d:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWuWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTUwNzIwWhcNMjUwMzI2MTUwNzIwWjAYMRYw
FAYDVQQDEw02N2MxZDEyYy1lYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1zvU5y8B/BS3uDlfHfrph+jVj7uZKqGP6Es/Drb7+hV/vCQ+q2JEgV4/
jZfuPnHl7PXEix140a+mwZCQ7ihYvVrPHAUp3k4QycFjlmSzkn9RozLBVDVtCc/W
nnMT9ekMmvZcgH1dAFL8y9J+C2nOLOpaa/Y7AJVASZYAHdr69CUiaPIoU6QhqsMT
7G9p7DgdKOizXReWaW7OBmnp6Txgt+k21K6NjTekdWt10yX4ZNXlDMfWrLFsPQ3h
4nzg+02lqu0EgRiROcYbRdD/hPMY8xwyF0OWSDsddNKzRNDmNZqITcjuVyXyG0+T
Au/JPIBzEg/teMw0NjthwSkEgxueqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOo4
GRgjZbR7QcdNRmd8Id79b7apMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNkVDOUE3Q0Y1RTUxMUVGOEIwODY5QTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJLMA0GCSqGSIb3DQEB
CwUAA4IBAQATQszdAn/1Hmhx28SLZqYvNfT9XUNHSeFl/SCk9B+1iRSPrqlC28Lh
RE0gGLMGJrUPNw5LeGZEOUIV7bT4vmgsCQU9+2hyYOYxjF/cZI2rz6spmz2rMnvm
l9dqmh7JAPWYRorXbQDePTbb3Eo5uALa24l8wq6IdyKKaPPemsugY8MqhSMRKUHa
9QwOfLec9ZEmcmPxK5SoXrJJq05PP1RSeQ774t48AL8Stg2X+p1d1+MPgNhDYvE9
olRiP1FXyMixO6+6blIQ4fqU7b9z0pzj2oeJvrfJRarj4oy9btfnPLNJhPrw3ZwB
ZshlkoV0K5DtC252LE9qZI33tpF+1Z0h
-----END CERTIFICATE-----
Generated at Fri May 9 05:15:33 2025 by rpki-client