Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAF82208CDA11EEA7C8625B4AD9E6FC.roa
File: BFAF82208CDA11EEA7C8625B4AD9E6FC.roa (raw, json)
Hash identifier: ZoTAyCKJmIymiJf9tOUzYamEprIWMyrGP6ycP6yiXfo=
Subject key identifier: 72:ED:EF:83:66:CB:58:E3:5B:CB:25:D7:1E:96:5A:42:EC:24:3D:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAF82208CDA11EEA7C8625B4AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:09:24 +0000
ROA not before: Mon 27 Nov 2023 04:09:21 +0000
ROA not after: Tue 26 Dec 2023 04:09:21 +0000
asID: 62240
IP address blocks: 154.196.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21680 (0x54b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:09:21 2023 GMT
Not After : Dec 26 04:09:21 2023 GMT
Subject: CN=65641674-9b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:3e:28:55:51:1b:84:bd:75:db:6f:b9:18:
3d:68:7e:27:85:e0:15:14:c7:e7:a0:23:a3:79:58:
3c:87:1b:30:16:c9:cb:3b:f8:50:ba:50:d9:14:ef:
2d:da:8a:65:62:f8:fb:12:26:ae:00:17:6f:2b:ba:
0b:8c:c4:31:81:9a:a4:0d:99:ae:3f:f4:97:16:f9:
14:b7:49:80:ae:ef:46:24:d9:d1:68:0a:71:9d:d9:
fd:2b:a6:f5:d3:f9:00:eb:0f:9e:65:cf:2c:2d:42:
ec:18:c7:c5:81:39:0b:7b:06:54:b7:cc:9c:84:8d:
3b:a3:85:0a:e6:df:b3:08:40:39:c6:4f:ce:56:5a:
f3:2f:18:c5:a1:ac:ea:13:86:b3:00:e5:a5:49:85:
0f:86:16:30:15:9f:8f:70:66:96:13:70:30:60:12:
70:6f:b6:56:67:6b:5d:74:25:4d:72:69:31:23:53:
3c:ac:b2:26:94:06:97:ad:d1:cb:59:54:e6:43:bd:
89:e6:18:66:25:ef:89:7d:bb:df:5b:fb:ad:1a:94:
0f:30:ad:17:98:bc:d4:e2:3f:cb:f0:4a:6c:d4:65:
3c:07:12:c0:48:5a:9b:96:b0:3c:5e:e5:55:83:5f:
f2:58:95:7f:81:dc:2a:d1:bc:a6:49:d0:e7:87:2d:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:ED:EF:83:66:CB:58:E3:5B:CB:25:D7:1E:96:5A:42:EC:24:3D:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAF82208CDA11EEA7C8625B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.52.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9b:b0:8b:80:db:16:d4:15:33:ca:ac:e3:67:af:04:0e:0d:
38:39:57:45:3c:a9:86:75:a0:da:fc:41:2b:7b:e1:c4:4f:2f:
22:6b:09:46:3f:95:4e:00:ea:f7:e7:d4:d4:65:d2:f2:ab:18:
d2:56:4d:01:d9:69:f9:d3:75:0d:70:7e:e0:d7:b7:3b:4c:7e:
0b:b2:18:2d:cf:37:2c:1f:46:e5:3c:7c:6a:b6:48:a5:95:e8:
cd:ce:34:08:ee:69:18:67:2d:a0:16:cf:7a:6f:60:4e:9c:07:
7e:df:cb:53:4a:ec:58:5b:ab:3d:47:77:57:aa:88:78:86:2e:
fb:f1:e7:bc:31:b9:03:83:1d:a7:be:c1:62:f6:7c:1c:a2:1e:
72:ec:db:88:5f:8f:d6:d0:3e:c6:20:83:a3:0c:0f:b6:4e:07:
8b:d2:85:30:3f:e0:fc:50:3c:c0:7b:80:3f:67:33:4a:14:67:
df:b3:f8:3c:cd:b6:8c:42:e1:3d:5a:12:13:e4:4a:1e:30:e2:
00:55:d5:1f:1a:69:18:58:ee:55:78:7f:4d:b4:0d:8d:f8:9f:
f0:79:78:3e:09:db:af:92:77:c0:7d:1a:82:0c:94:55:4f:29:
56:22:a1:fd:a1:9d:33:94:57:a0:06:ac:6d:d6:c5:da:bb:de:
9e:ff:cd:66
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVLAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNDA5MjFaFw0yMzEyMjYwNDA5MjFaMBgxFjAU
BgNVBAMTDTY1NjQxNjc0LTliMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFHz4oVVEbhL1122+5GD1ofieF4BUUx+egI6N5WDyHGzAWycs7+FC6UNkU
7y3aimVi+PsSJq4AF28ruguMxDGBmqQNma4/9JcW+RS3SYCu70Yk2dFoCnGd2f0r
pvXT+QDrD55lzywtQuwYx8WBOQt7BlS3zJyEjTujhQrm37MIQDnGT85WWvMvGMWh
rOoThrMA5aVJhQ+GFjAVn49wZpYTcDBgEnBvtlZna110JU1yaTEjUzyssiaUBpet
0ctZVOZDvYnmGGYl74l9u99b+60alA8wrReYvNTiP8vwSmzUZTwHEsBIWpuWsDxe
5VWDX/JYlX+B3CrRvKZJ0OeHLfzjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcu3v
g2bLWONbyyXXHpZaQuwkPYYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0JGQUY4MjIwOENEQTExRUVBN0M4NjI1QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxDQwDQYJKoZIhvcNAQEL
BQADggEBAIibsIuA2xbUFTPKrONnrwQODTg5V0U8qYZ1oNr8QSt74cRPLyJrCUY/
lU4A6vfn1NRl0vKrGNJWTQHZafnTdQ1wfuDXtztMfguyGC3PNywfRuU8fGq2SKWV
6M3ONAjuaRhnLaAWz3pvYE6cB37fy1NK7Fhbqz1Hd1eqiHiGLvvx57wxuQODHae+
wWL2fByiHnLs24hfj9bQPsYgg6MMD7ZOB4vShTA/4PxQPMB7gD9nM0oUZ9+z+DzN
toxC4T1aEhPkSh4w4gBV1R8aaRhY7lV4f020DY34n/B5eD4J26+Sd8B9GoIMlFVP
KVYiof2hnTOUV6AGrG3Wxdq73p7/zWY=
-----END CERTIFICATE-----
Generated at Fri May 9 11:41:13 2025 by rpki-client