Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C050C30EF67B11EF8EEE85A7762E951A.roa
File: C050C30EF67B11EF8EEE85A7762E951A.roa (raw, json)
Hash identifier: bhMJnFEBYOkZQieJ4mA0Hjeq3OTuosIuHpAHNpYZRf8=
Subject key identifier: 48:92:EB:5B:84:16:1A:D1:83:95:2C:65:7C:61:1B:63:B1:F9:9B:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C050C30EF67B11EF8EEE85A7762E951A.roa
Signing time: Sat 01 Mar 2025 09:01:24 +0000
ROA not before: Sat 01 Mar 2025 09:01:20 +0000
ROA not after: Mon 31 Mar 2025 09:01:20 +0000
asID: 44559
IP address blocks: 154.209.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93563 (0x16d7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 09:01:20 2025 GMT
Not After : Mar 31 09:01:20 2025 GMT
Subject: CN=67c2cce4-c9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:70:99:46:40:33:e3:3a:3e:dd:7e:3b:51:
ea:2c:37:86:6f:c5:ee:09:d6:54:33:db:7f:c6:06:
cc:8a:8f:b2:1a:b3:7d:c5:4c:ad:ec:25:41:b9:8a:
54:50:eb:7b:e0:95:13:c8:b3:f5:c5:48:80:f7:06:
24:b8:13:b8:db:75:5d:21:ad:77:3d:d0:7a:f6:81:
b2:cb:04:e0:72:b2:37:75:ab:bb:53:2e:85:fe:4c:
d2:c9:8d:aa:76:0f:d1:2e:f1:92:1b:13:66:b6:87:
22:2e:07:62:1f:7b:16:6c:7e:67:4e:10:68:9c:0b:
77:19:7b:fa:6c:65:42:d2:25:8d:f5:67:d2:f2:63:
d6:07:c3:d5:73:9c:1a:29:b6:8d:df:f9:23:1d:43:
46:ca:7f:5a:1d:0e:77:02:22:05:45:6f:57:6e:fa:
1e:5b:5a:85:68:a3:ae:62:68:b4:ce:d0:88:32:de:
e2:a2:bb:b3:d4:46:36:d1:f9:34:4e:b0:ab:ea:88:
8c:90:c1:82:b8:b3:1b:a0:0d:92:c1:8b:ed:26:6e:
30:1d:f7:64:1a:ee:43:f1:b6:13:43:a8:53:b5:ab:
32:9f:ee:c5:5f:a1:fa:58:f3:b0:73:9a:1f:0b:22:
12:82:fe:b6:12:5b:d3:fe:2a:c4:fa:ed:52:5f:c9:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:EB:5B:84:16:1A:D1:83:95:2C:65:7C:61:1B:63:B1:F9:9B:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C050C30EF67B11EF8EEE85A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:39:c4:9c:90:80:13:df:bd:08:e5:11:f5:11:49:a1:63:f4:
f9:77:68:7e:a4:0d:2f:5d:4a:cb:56:cc:76:ee:b2:3b:83:36:
af:be:3e:11:22:12:d9:51:aa:e8:6c:6d:b1:4e:37:4e:cb:47:
76:0f:97:42:7f:f8:b5:bc:55:05:29:a5:a5:1b:4c:59:e9:f9:
88:1c:41:4e:22:6b:9e:78:b6:f5:1e:54:9e:94:82:04:09:67:
57:b6:d3:1f:14:c5:73:90:70:48:4d:8f:80:92:e2:d9:7e:91:
99:b7:8e:4e:9e:e6:35:de:8a:bf:67:b4:39:7c:13:fd:7b:35:
bb:d1:ba:4b:95:87:9c:82:f3:82:3a:95:90:d4:1f:29:93:32:
c7:ee:c9:c8:6a:ba:b4:70:09:01:41:43:74:0c:7d:8d:97:92:
16:12:fd:42:03:51:0b:18:e7:a3:17:d4:cb:e6:be:b2:d2:c3:
87:c7:49:a2:e0:ec:57:e1:25:17:70:6e:00:f5:8d:94:3d:50:
16:16:48:ba:be:ac:82:fe:0a:74:66:eb:de:8c:1d:c8:1d:60:
98:5c:88:92:7b:df:8a:4d:72:a1:51:80:5d:d6:5e:8d:96:91:
cf:91:e2:05:e6:2e:91:8b:71:4b:3f:be:ef:27:db:30:ab:30:
9e:36:47:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW17MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDkwMTIwWhcNMjUwMzMxMDkwMTIwWjAYMRYw
FAYDVQQDEw02N2MyY2NlNC1jOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnk5wmUZAM+M6Pt1+O1HqLDeGb8XuCdZUM9t/xgbMio+yGrN9xUyt7CVB
uYpUUOt74JUTyLP1xUiA9wYkuBO423VdIa13PdB69oGyywTgcrI3dau7Uy6F/kzS
yY2qdg/RLvGSGxNmtociLgdiH3sWbH5nThBonAt3GXv6bGVC0iWN9WfS8mPWB8PV
c5waKbaN3/kjHUNGyn9aHQ53AiIFRW9XbvoeW1qFaKOuYmi0ztCIMt7ioruz1EY2
0fk0TrCr6oiMkMGCuLMboA2SwYvtJm4wHfdkGu5D8bYTQ6hTtasyn+7FX6H6WPOw
c5ofCyISgv62ElvT/irE+u1SX8nM1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEiS
61uEFhrRg5UsZXxhG2Ox+ZvzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDUwQzMwRUY2N0IxMUVGOEVFRTg1QTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtHBMA0GCSqGSIb3DQEB
CwUAA4IBAQAuOcSckIAT370I5RH1EUmhY/T5d2h+pA0vXUrLVsx27rI7gzavvj4R
IhLZUarobG2xTjdOy0d2D5dCf/i1vFUFKaWlG0xZ6fmIHEFOImueeLb1HlSelIIE
CWdXttMfFMVzkHBITY+AkuLZfpGZt45OnuY13oq/Z7Q5fBP9ezW70bpLlYecgvOC
OpWQ1B8pkzLH7snIarq0cAkBQUN0DH2Nl5IWEv1CA1ELGOejF9TL5r6y0sOHx0mi
4OxX4SUXcG4A9Y2UPVAWFki6vqyC/gp0ZuvejB3IHWCYXIiSe9+KTXKhUYBd1l6N
lpHPkeIF5i6Ri3FLP77vJ9swqzCeNkcR
-----END CERTIFICATE-----
Generated at Fri May 9 06:29:33 2025 by rpki-client