Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C177E9B0F61C11EFABA23293762E951A.roa
File: C177E9B0F61C11EFABA23293762E951A.roa (raw, json)
Hash identifier: lIybUMW4icqkjjngc30Jsc9k4Ktr312LZeDTjOzHD9I=
Subject key identifier: 82:C1:7F:35:65:E4:A9:3A:4C:0C:F9:D6:AF:F2:15:C9:57:B2:77:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C177E9B0F61C11EFABA23293762E951A.roa
Signing time: Fri 28 Feb 2025 21:41:24 +0000
ROA not before: Fri 28 Feb 2025 21:41:20 +0000
ROA not after: Wed 26 Mar 2025 21:41:20 +0000
asID: 62240
IP address blocks: 154.194.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93265 (0x16c51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 21:41:20 2025 GMT
Not After : Mar 26 21:41:20 2025 GMT
Subject: CN=67c22d84-81e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:60:c2:e2:ef:f5:59:d2:28:80:05:8d:18:
5b:64:fd:db:a7:1e:b0:f1:fa:58:0d:1a:4e:d9:ca:
23:57:86:81:8c:da:4e:8d:69:07:b6:21:db:db:e5:
f5:5c:df:73:d3:f9:41:94:7e:74:f6:cf:9e:e2:11:
d2:15:c5:15:b0:0a:9e:aa:05:11:d3:29:91:25:4d:
ec:3b:83:d8:7f:6b:28:6b:80:b4:6a:e1:da:df:db:
1a:15:42:c4:db:9d:fb:84:db:4a:d4:6b:e6:a2:1f:
1f:2b:e6:d7:5d:1c:72:33:e5:e3:38:82:9e:57:56:
b7:1e:54:57:8b:ad:54:4b:22:c4:1a:04:72:d7:2b:
70:d2:33:31:34:83:6c:f0:e4:b0:01:57:1e:7b:57:
e9:57:61:4e:d2:78:0d:b5:ee:17:05:17:e2:c7:de:
c4:54:01:ca:53:f1:d0:32:0f:f0:7e:57:48:1e:9b:
dc:f8:99:70:46:3d:49:4d:6f:fd:5f:ae:5a:88:47:
60:3a:5b:a7:e5:65:84:70:37:2e:76:ac:03:b3:69:
e2:85:cb:a4:17:62:14:b9:b4:ee:8f:e1:f6:e3:62:
9d:52:5d:eb:42:5e:97:4e:22:7e:bd:58:60:e8:e2:
f5:b9:3a:16:47:97:a1:30:80:b1:11:a0:5a:fa:14:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C1:7F:35:65:E4:A9:3A:4C:0C:F9:D6:AF:F2:15:C9:57:B2:77:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C177E9B0F61C11EFABA23293762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:74:92:b4:50:3b:44:e1:f3:f1:a2:87:4f:3e:c5:ff:2c:45:
36:87:9b:a2:81:a9:e1:d8:75:82:4e:a1:7f:6c:0c:cf:b1:41:
d1:eb:f0:02:0a:8c:1c:b7:39:89:d2:d9:9d:60:95:58:23:dc:
92:b2:b0:14:d9:66:b1:9b:61:c6:88:61:6b:a0:78:7c:08:0c:
49:e3:28:5b:68:b3:a2:66:c2:c4:98:86:dd:3f:5b:21:11:68:
0b:45:0c:7e:07:ca:a0:75:bb:c5:0d:92:04:47:62:70:55:92:
47:08:14:80:da:f4:e7:05:de:5b:75:5f:28:5a:0a:44:ce:1a:
89:c0:b9:8a:d9:08:8c:21:cf:f8:12:56:2b:5a:8c:f6:73:74:
bb:fd:5d:8f:85:6b:5c:92:cf:3e:a1:ce:b6:71:b9:12:f0:ad:
13:cc:1e:8e:9c:67:e6:9e:2b:22:0c:ee:9c:3f:3b:52:53:b7:
68:4e:0a:03:67:61:11:d5:97:bc:18:fa:21:8b:33:98:d5:63:
56:77:5f:e6:1a:24:cf:0d:ee:1d:d6:bf:2f:92:a3:57:b4:ea:
77:81:f3:50:b4:93:ef:e5:48:cd:8f:1d:1b:e9:c1:3f:d0:c7:
f6:b7:d6:2e:03:8c:fa:9f:71:b5:c2:78:e2:36:21:bb:da:7f:
af:09:60:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWxRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjE0MTIwWhcNMjUwMzI2MjE0MTIwWjAYMRYw
FAYDVQQDEw02N2MyMmQ4NC04MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArdhgwuLv9VnSKIAFjRhbZP3bpx6w8fpYDRpO2cojV4aBjNpOjWkHtiHb
2+X1XN9z0/lBlH509s+e4hHSFcUVsAqeqgUR0ymRJU3sO4PYf2soa4C0auHa39sa
FULE2537hNtK1Gvmoh8fK+bXXRxyM+XjOIKeV1a3HlRXi61USyLEGgRy1ytw0jMx
NINs8OSwAVcee1fpV2FO0ngNte4XBRfix97EVAHKU/HQMg/wfldIHpvc+JlwRj1J
TW/9X65aiEdgOlun5WWEcDcudqwDs2nihcukF2IUubTuj+H242KdUl3rQl6XTiJ+
vVhg6OL1uToWR5ehMICxEaBa+hRRSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFILB
fzVl5Kk6TAz51q/yFclXsncYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTc3RTlCMEY2MUMxMUVGQUJBMjMyOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJsMA0GCSqGSIb3DQEB
CwUAA4IBAQCidJK0UDtE4fPxoodPPsX/LEU2h5uiganh2HWCTqF/bAzPsUHR6/AC
CowctzmJ0tmdYJVYI9ySsrAU2Waxm2HGiGFroHh8CAxJ4yhbaLOiZsLEmIbdP1sh
EWgLRQx+B8qgdbvFDZIER2JwVZJHCBSA2vTnBd5bdV8oWgpEzhqJwLmK2QiMIc/4
ElYrWoz2c3S7/V2PhWtcks8+oc62cbkS8K0TzB6OnGfmnisiDO6cPztSU7doTgoD
Z2ER1Ze8GPohizOY1WNWd1/mGiTPDe4d1r8vkqNXtOp3gfNQtJPv5UjNjx0b6cE/
0Mf2t9YuA4z6n3G1wnjiNiG72n+vCWCf
-----END CERTIFICATE-----
Generated at Fri May 9 07:05:58 2025 by rpki-client