Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C26C3F6CF40D11EFBF239D68762E951A.roa
File: C26C3F6CF40D11EFBF239D68762E951A.roa (raw, json)
Hash identifier: cmLXKcEx15FqXr0wh9mcl666UYsssOqby5bp8ctaP5M=
Subject key identifier: 9E:28:E5:2F:83:85:1E:A7:8B:26:B1:F0:71:27:74:EC:CA:31:75:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016101
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C26C3F6CF40D11EFBF239D68762E951A.roa
Signing time: Wed 26 Feb 2025 06:49:01 +0000
ROA not before: Wed 26 Feb 2025 06:48:57 +0000
ROA not after: Fri 28 Mar 2025 06:48:57 +0000
asID: 214413
IP address blocks: 154.193.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90369 (0x16101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 26 06:48:57 2025 GMT
Not After : Mar 28 06:48:57 2025 GMT
Subject: CN=67beb95c-2969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:7e:f9:b1:b5:fe:a6:b0:4d:08:41:5f:18:
24:6c:5b:24:12:72:0f:ab:77:66:b8:7b:3a:e0:9c:
d1:26:f8:53:30:71:e4:c4:4d:19:51:6c:45:3b:e0:
92:9f:b6:fb:30:ac:ed:07:12:9f:86:9c:06:37:9a:
d2:08:a2:e0:28:da:13:e8:e8:17:5e:b2:86:1f:9b:
b2:41:37:03:9a:46:92:0b:32:68:c4:0a:cd:91:58:
f8:fa:25:2b:4b:4b:44:6c:f4:ca:5c:32:9f:26:fb:
84:cd:88:3e:94:a7:12:27:ab:c8:53:19:d0:fc:31:
14:42:d0:6f:16:f5:36:3d:75:59:f3:7a:db:f7:40:
a5:5e:4d:b7:38:32:b4:b2:32:9b:87:d1:c2:fe:a5:
8b:83:e4:5d:2e:7c:88:0e:47:24:af:d2:61:f4:db:
df:a1:07:c4:cc:af:9a:f7:d5:23:70:9a:67:6b:b4:
19:97:84:52:cd:49:1b:f0:02:64:29:a3:59:d3:f3:
8b:9d:b1:17:c1:00:13:e5:59:49:b1:58:02:5d:e2:
bf:64:86:00:bc:1a:d4:55:e5:45:a2:e3:ae:7d:10:
ab:64:61:0b:b3:8f:f8:82:36:79:32:dd:fb:2f:d8:
93:2c:a8:ff:bb:f9:77:1f:f6:19:45:e1:ba:f3:eb:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:E5:2F:83:85:1E:A7:8B:26:B1:F0:71:27:74:EC:CA:31:75:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C26C3F6CF40D11EFBF239D68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9b:79:49:77:b1:df:d4:c8:42:55:d2:46:47:2f:ac:c0:fe:
19:b2:69:7c:e9:80:1a:57:e0:cf:ba:12:f0:cf:d6:21:36:ea:
d1:9e:f4:6d:7a:e6:f9:5b:20:e4:63:22:4b:bb:c9:14:d7:c5:
fe:ed:96:ff:aa:dd:d5:33:03:df:24:8d:26:8c:ea:7b:57:46:
59:2f:32:38:a3:c2:02:e2:49:c1:5f:93:43:a7:cf:85:e8:76:
a6:08:43:61:23:a0:76:1f:93:fa:42:eb:47:c7:26:ea:14:03:
bb:27:9f:3b:f8:4f:5e:7f:1d:0d:98:9b:0e:59:4f:2d:9a:68:
02:d6:88:13:b2:1a:37:b7:28:29:a4:0d:e7:34:2c:38:38:9f:
15:15:79:3f:79:39:a9:df:84:03:6d:b5:46:ad:26:59:30:6a:
bb:27:bd:ab:07:e5:56:52:c5:f7:ec:58:b9:52:ba:a6:cd:e5:
78:6d:e7:cd:f9:6e:51:fd:7a:13:1b:f1:33:83:86:75:c2:6f:
d8:96:b9:ae:7c:3e:81:bf:94:f3:b9:8f:fe:d5:52:47:ed:6c:
ab:c0:94:3f:2f:79:66:ce:2e:c4:99:bc:0b:cc:27:94:c8:9a:
c0:19:e8:aa:44:ea:a6:aa:0a:ff:dc:66:66:06:65:2b:fc:c0:
9b:7f:b9:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWEBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDY0ODU3WhcNMjUwMzI4MDY0ODU3WjAYMRYw
FAYDVQQDEw02N2JlYjk1Yy0yOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy3Z++bG1/qawTQhBXxgkbFskEnIPq3dmuHs64JzRJvhTMHHkxE0ZUWxF
O+CSn7b7MKztBxKfhpwGN5rSCKLgKNoT6OgXXrKGH5uyQTcDmkaSCzJoxArNkVj4
+iUrS0tEbPTKXDKfJvuEzYg+lKcSJ6vIUxnQ/DEUQtBvFvU2PXVZ83rb90ClXk23
ODK0sjKbh9HC/qWLg+RdLnyIDkckr9Jh9NvfoQfEzK+a99UjcJpna7QZl4RSzUkb
8AJkKaNZ0/OLnbEXwQAT5VlJsVgCXeK/ZIYAvBrUVeVFouOufRCrZGELs4/4gjZ5
Mt37L9iTLKj/u/l3H/YZReG68+sUAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ4o
5S+DhR6niyax8HEndOzKMXWSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjZDM0Y2Q0Y0MEQxMUVGQkYyMzlENjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsGsMA0GCSqGSIb3DQEB
CwUAA4IBAQA8m3lJd7Hf1MhCVdJGRy+swP4Zsml86YAaV+DPuhLwz9YhNurRnvRt
eub5WyDkYyJLu8kU18X+7Zb/qt3VMwPfJI0mjOp7V0ZZLzI4o8IC4knBX5NDp8+F
6HamCENhI6B2H5P6QutHxybqFAO7J587+E9efx0NmJsOWU8tmmgC1ogTsho3tygp
pA3nNCw4OJ8VFXk/eTmp34QDbbVGrSZZMGq7J72rB+VWUsX37Fi5UrqmzeV4befN
+W5R/XoTG/Ezg4Z1wm/YlrmufD6Bv5TzuY/+1VJH7WyrwJQ/L3lmzi7EmbwLzCeU
yJrAGeiqROqmqgr/3GZmBmUr/MCbf7lf
-----END CERTIFICATE-----
Generated at Fri May 9 06:34:35 2025 by rpki-client