Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEA40100F69511EF8DD3355C762E951A.roa
File: BEA40100F69511EF8DD3355C762E951A.roa (raw, json)
Hash identifier: Fu+1U3Olfc7h8UGdn3LP24cLfE4H47DS1THw96gxmfo=
Subject key identifier: 09:64:8F:12:5B:84:92:AA:D3:D3:C3:4E:27:53:2E:97:A1:BE:6A:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEA40100F69511EF8DD3355C762E951A.roa
Signing time: Sat 01 Mar 2025 12:07:28 +0000
ROA not before: Sat 01 Mar 2025 12:07:24 +0000
ROA not after: Mon 31 Mar 2025 12:07:24 +0000
asID: 202656
IP address blocks: 154.221.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93737 (0x16e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:07:24 2025 GMT
Not After : Mar 31 12:07:24 2025 GMT
Subject: CN=67c2f880-378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b0:01:33:03:01:be:24:6a:14:01:ec:b1:19:
b7:07:4f:ef:d7:f2:95:c4:a2:65:d1:8e:b3:ec:df:
ea:76:24:d9:f0:16:da:ce:0b:98:f5:33:06:eb:92:
53:5b:cf:9b:02:ef:e4:c8:c1:91:36:c4:3d:43:89:
e4:4d:df:29:7f:a8:6a:ee:99:a3:9d:ff:e3:b9:eb:
47:29:28:2c:87:2c:5d:ec:46:62:1c:06:2c:77:d5:
5c:c2:b2:d2:4d:6d:02:31:94:92:2c:58:f8:62:9f:
40:e2:8e:90:29:f1:a0:a3:2e:a2:8e:fd:58:21:5e:
2c:df:64:90:ba:7a:3f:22:2d:28:d6:e3:7c:77:66:
4f:2e:b7:7f:7c:a1:c2:1f:96:16:03:c0:87:2b:f1:
4b:d1:a9:fa:85:ba:0c:8d:a4:bc:64:f8:a1:02:d9:
fb:34:57:6a:af:c5:c5:fc:7f:c6:98:85:ec:ab:25:
da:f5:60:70:2a:d2:81:2f:fa:51:e5:86:b9:6a:26:
0f:7e:04:77:32:66:a7:03:aa:f5:61:30:79:d2:89:
5d:64:5c:82:26:aa:39:72:49:d2:f1:67:a3:31:8c:
36:82:b0:26:b7:eb:f2:28:96:71:9a:6c:ee:56:91:
43:64:77:16:c8:60:8d:3d:03:f8:fd:da:29:c7:05:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:64:8F:12:5B:84:92:AA:D3:D3:C3:4E:27:53:2E:97:A1:BE:6A:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEA40100F69511EF8DD3355C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2d:17:cb:02:81:85:86:44:bb:3b:0e:ad:13:59:2c:fa:59:
99:37:e4:b4:65:82:d0:1d:76:f2:4b:54:d2:05:da:c4:5e:08:
5a:40:91:7f:7c:27:92:21:75:15:06:60:27:39:af:59:41:05:
71:cd:83:0c:e8:bb:1c:69:a0:b5:4d:b6:ab:24:84:e0:62:e5:
f2:69:d7:47:38:f6:be:65:24:cf:5f:95:7d:09:3a:b1:49:8f:
19:0b:71:43:67:e3:3e:ab:1f:2a:de:c3:eb:f0:60:7a:b9:79:
63:53:4b:06:79:ef:d1:d0:ca:0b:8a:63:0d:6f:a6:98:fa:2e:
28:68:c7:4a:e3:3f:b0:af:ea:5f:8f:f5:5a:02:d6:00:2e:b0:
69:57:48:0d:9f:d0:24:e8:c3:04:e8:d4:49:ce:04:cf:96:2e:
93:52:df:a0:c4:90:b1:2e:5e:7d:b3:90:ba:98:a2:00:c9:06:
33:ac:bc:6f:ef:e5:df:f5:3f:b3:36:80:5e:f7:de:92:0d:90:
12:5f:aa:a1:dd:47:18:86:56:fa:ac:54:1b:b2:74:79:b4:f6:
d9:a5:32:3a:54:89:62:05:00:af:22:a4:7d:9a:f7:7c:92:77:
64:0e:d1:75:b9:a6:a5:4a:dc:13:c5:89:93:ea:69:a7:ff:50:
f9:ce:fd:5e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW4pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTIwNzI0WhcNMjUwMzMxMTIwNzI0WjAYMRYw
FAYDVQQDEw02N2MyZjg4MC0zNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA97ABMwMBviRqFAHssRm3B0/v1/KVxKJl0Y6z7N/qdiTZ8BbazguY9TMG
65JTW8+bAu/kyMGRNsQ9Q4nkTd8pf6hq7pmjnf/juetHKSgshyxd7EZiHAYsd9Vc
wrLSTW0CMZSSLFj4Yp9A4o6QKfGgoy6ijv1YIV4s32SQuno/Ii0o1uN8d2ZPLrd/
fKHCH5YWA8CHK/FL0an6hboMjaS8ZPihAtn7NFdqr8XF/H/GmIXsqyXa9WBwKtKB
L/pR5Ya5aiYPfgR3MmanA6r1YTB50oldZFyCJqo5cknS8WejMYw2grAmt+vyKJZx
mmzuVpFDZHcWyGCNPQP4/dopxwUe1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAlk
jxJbhJKq09PDTidTLpehvmqoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRUE0MDEwMEY2OTUxMUVGOEREMzM1NUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt0/MA0GCSqGSIb3DQEB
CwUAA4IBAQCPLRfLAoGFhkS7Ow6tE1ks+lmZN+S0ZYLQHXbyS1TSBdrEXghaQJF/
fCeSIXUVBmAnOa9ZQQVxzYMM6LscaaC1TbarJITgYuXyaddHOPa+ZSTPX5V9CTqx
SY8ZC3FDZ+M+qx8q3sPr8GB6uXljU0sGee/R0MoLimMNb6aY+i4oaMdK4z+wr+pf
j/VaAtYALrBpV0gNn9Ak6MME6NRJzgTPli6TUt+gxJCxLl59s5C6mKIAyQYzrLxv
7+Xf9T+zNoBe996SDZASX6qh3UcYhlb6rFQbsnR5tPbZpTI6VIliBQCvIqR9mvd8
kndkDtF1uaalStwTxYmT6mmn/1D5zv1e
-----END CERTIFICATE-----
Generated at Fri May 9 07:11:57 2025 by rpki-client