Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3A088D63BB911F0882689B1DAE4EC9C.roa
File: C3A088D63BB911F0882689B1DAE4EC9C.roa (raw, json)
Hash identifier: y6hDmevbcBhrzLLqEd63C3xJ1YmLXwY2K8Xbs1h5Wks=
Subject key identifier: BF:4B:6B:20:D8:7C:6C:F8:65:C9:DF:76:83:C3:49:46:10:66:30:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018356
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3A088D63BB911F0882689B1DAE4EC9C.roa
Signing time: Wed 28 May 2025 11:49:09 +0000
ROA not before: Wed 28 May 2025 11:49:04 +0000
ROA not after: Sat 07 Jun 2025 11:49:04 +0000
asID: 5650
IP address blocks: 154.194.20.0/22 maxlen: 24
154.205.176.0/22 maxlen: 24
154.205.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99158 (0x18356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 11:49:04 2025 GMT
Not After : Jun 7 11:49:04 2025 GMT
Subject: CN=6836f835-ea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:3d:22:3f:28:65:72:c2:53:cc:72:4b:40:
67:a8:1f:46:3f:fa:f2:d8:03:88:39:5b:91:58:6e:
92:f5:12:0c:6e:96:b3:f3:d1:c5:a2:06:e7:60:32:
4c:94:25:93:19:6e:42:23:02:90:08:ff:cf:3e:e6:
f8:32:5a:9b:59:24:6c:e7:58:0f:8a:9b:7f:a4:f3:
8d:e9:78:c7:27:19:aa:87:a3:f8:5e:f5:9f:48:5d:
7a:48:69:45:d4:ec:0a:5f:c5:5e:58:1e:4c:5d:59:
ac:db:7e:f8:4d:d6:e3:6f:37:a8:4a:f9:b3:81:c0:
f8:a6:bc:d9:46:59:33:60:ea:9e:4b:7d:5d:34:56:
5b:e5:8e:70:83:eb:39:ae:e0:91:8f:d5:dd:e7:09:
f0:eb:69:84:84:a8:4f:aa:f2:26:d6:b3:d9:13:97:
b6:ef:68:8a:e2:0e:6b:7c:f3:5e:e7:38:36:22:d0:
a0:59:f6:f2:44:74:c6:fb:bc:7a:94:b7:ba:cd:09:
58:43:29:2c:ff:a6:d3:89:b4:03:25:75:90:71:b3:
c9:69:ce:1f:f1:d2:a6:20:3d:8b:11:cb:9e:9e:01:
92:90:7b:8e:c3:f7:a8:0a:ad:17:40:28:74:88:c6:
df:4a:ae:16:1e:95:61:03:06:b7:c0:b9:c8:a4:78:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:6B:20:D8:7C:6C:F8:65:C9:DF:76:83:C3:49:46:10:66:30:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3A088D63BB911F0882689B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
154.205.176.0/21
Signature Algorithm: sha256WithRSAEncryption
c7:ea:a3:65:fb:1b:5f:2b:57:e1:61:32:ed:b4:d7:73:a3:09:
d5:1f:ed:85:19:66:04:de:31:b1:bc:6d:b9:64:f9:54:4e:33:
45:35:3e:1c:3a:df:98:63:10:9a:92:b5:00:c5:06:93:ff:6d:
82:44:2a:83:d9:ef:54:45:43:1d:0e:d7:4e:98:39:0d:42:1d:
7d:14:0d:91:18:24:4e:e5:8b:31:88:f7:3f:40:c2:5c:0f:3b:
b2:fe:35:4e:a7:e4:75:6e:06:32:e6:1f:12:ae:1d:90:04:51:
61:59:e5:82:6a:30:39:0a:f6:73:b6:b1:84:12:54:79:e4:8e:
2b:61:1f:e7:55:49:40:39:7e:07:c4:62:50:57:9a:e3:57:37:
3d:11:c5:26:6a:2d:a9:a8:6a:47:ec:86:3d:29:88:28:09:0c:
83:f7:26:23:61:92:50:60:b6:fe:43:80:ee:99:01:81:dd:20:
64:08:b0:78:3e:b4:cc:a1:63:5c:03:9d:98:50:d1:25:1a:16:
fe:fa:35:ec:e8:ae:ab:93:0f:a9:3e:1a:8b:8b:de:8a:3d:76:
67:b5:cf:25:de:a8:0c:38:43:19:28:3a:35:1b:d1:4d:fb:ed:
e2:d2:44:b1:dd:d3:40:ef:fb:f9:7e:ae:b7:7d:94:c3:41:33:
1a:eb:70:d9
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYNWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI4MTE0OTA0WhcNMjUwNjA3MTE0OTA0WjAYMRYw
FAYDVQQDEw02ODM2ZjgzNS1lYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3uE9Ij8oZXLCU8xyS0BnqB9GP/ry2AOIOVuRWG6S9RIMbpaz89HFogbn
YDJMlCWTGW5CIwKQCP/PPub4MlqbWSRs51gPipt/pPON6XjHJxmqh6P4XvWfSF16
SGlF1OwKX8VeWB5MXVms2374TdbjbzeoSvmzgcD4przZRlkzYOqeS31dNFZb5Y5w
g+s5ruCRj9Xd5wnw62mEhKhPqvIm1rPZE5e272iK4g5rfPNe5zg2ItCgWfbyRHTG
+7x6lLe6zQlYQyks/6bTibQDJXWQcbPJac4f8dKmID2LEcuengGSkHuOw/eoCq0X
QCh0iMbfSq4WHpVhAwa3wLnIpHhD3wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFL9L
ayDYfGz4ZcnfdoPDSUYQZjCjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DM0EwODhENjNCQjkxMUYwODgyNjg5QjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsIUAwQDms2wMA0GCSqG
SIb3DQEBCwUAA4IBAQDH6qNl+xtfK1fhYTLttNdzownVH+2FGWYE3jGxvG25ZPlU
TjNFNT4cOt+YYxCakrUAxQaT/22CRCqD2e9URUMdDtdOmDkNQh19FA2RGCRO5Ysx
iPc/QMJcDzuy/jVOp+R1bgYy5h8Srh2QBFFhWeWCajA5CvZztrGEElR55I4rYR/n
VUlAOX4HxGJQV5rjVzc9EcUmai2pqGpH7IY9KYgoCQyD9yYjYZJQYLb+Q4DumQGB
3SBkCLB4PrTMoWNcA52YUNElGhb++jXs6K6rkw+pPhqLi96KPXZntc8l3qgMOEMZ
KDo1G9FN++3i0kSx3dNA7/v5fq63fZTDQTMa63DZ
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:47:09 2025 by rpki-client