Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B1A87AEF9411EF83D52260762E951A.roa
File: C4B1A87AEF9411EF83D52260762E951A.roa (raw, json)
Hash identifier: FKTuEfm61n8bMfqgyLPo02U21eznxCwjxzPJE12R9os=
Subject key identifier: 85:0A:2C:8C:3F:24:7D:89:17:BE:34:0C:4E:D9:54:09:98:8E:BB:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01591D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B1A87AEF9411EF83D52260762E951A.roa
Signing time: Thu 20 Feb 2025 14:12:51 +0000
ROA not before: Thu 20 Feb 2025 14:12:47 +0000
ROA not after: Thu 20 Mar 2025 14:12:47 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88349 (0x1591d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 20 14:12:47 2025 GMT
Not After : Mar 20 14:12:47 2025 GMT
Subject: CN=67b73862-fdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:82:da:9a:a2:d5:5f:84:8e:71:a0:48:fd:
2a:48:35:35:bc:af:30:67:78:fd:ce:73:21:61:44:
97:cf:18:03:33:50:82:cd:e9:a4:e8:4c:c9:54:00:
eb:b1:52:dc:15:85:b4:df:da:83:b8:e0:bb:ed:f7:
44:7a:3f:70:86:c0:de:61:31:25:ce:17:ad:bb:1c:
9e:a9:bf:70:99:37:ac:ca:02:f6:14:ba:2e:b8:81:
ad:a1:a8:8e:d6:ea:38:a6:b7:d3:30:51:38:8c:c6:
72:27:63:9f:de:40:d9:69:bd:aa:21:99:78:89:83:
7c:91:92:9d:23:60:88:96:c1:4e:e2:36:75:d3:5d:
c2:ba:6d:26:db:d5:63:63:ef:c0:59:57:48:3e:07:
25:2c:7e:5d:56:80:37:41:ce:28:48:7e:e3:4e:1c:
c0:f3:06:11:f5:ee:8c:49:3b:9d:be:5a:d3:41:75:
09:b2:eb:6d:cb:13:ff:76:e9:82:50:39:6d:b4:0c:
ea:83:a7:0a:03:ee:ae:76:aa:8a:ef:8c:6c:37:4a:
fa:8c:bb:5e:4d:0c:64:00:fd:b1:dd:07:3b:ab:83:
7b:03:e8:1f:2d:7d:1c:fe:a5:40:dc:53:32:72:10:
f5:c2:7e:da:9f:ee:24:da:5d:c2:52:4b:1b:2e:6a:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:2C:8C:3F:24:7D:89:17:BE:34:0C:4E:D9:54:09:98:8E:BB:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B1A87AEF9411EF83D52260762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:68:29:01:6e:87:3d:c5:ca:b0:56:66:2c:99:53:45:73:a2:
d8:aa:9f:25:1b:d1:47:cf:24:fe:5f:c8:15:99:2e:9c:e5:23:
ee:91:14:ba:43:01:45:e9:4a:23:74:6f:97:5c:ad:e7:43:d0:
50:e7:db:f6:79:31:66:2f:04:e4:82:c6:b4:bc:9d:bb:a1:be:
44:39:44:11:93:4c:6b:da:c1:8f:e8:2f:f7:e5:8e:b5:7e:64:
f6:32:40:d8:ad:72:40:67:94:a4:bc:7e:f1:a9:d6:80:93:2e:
21:a0:ee:e9:13:a2:1b:c1:22:fe:23:7d:29:fa:67:ea:14:1e:
f5:dc:66:29:8a:70:3f:55:0e:44:e4:b2:5c:11:f0:f6:2e:4e:
c7:88:3a:ab:33:a6:17:33:61:62:36:8f:d9:7e:c5:ba:8a:7b:
b6:13:0c:2b:06:4a:ab:2d:ec:49:4f:6d:c8:d4:ff:2e:1d:ee:
96:48:12:55:a7:39:ec:a3:3a:79:a2:e0:41:4f:d4:c7:5d:77:
1f:c4:ab:37:48:7a:ea:d7:41:7a:0e:8a:b2:72:39:7e:42:9e:
2c:6b:45:00:e9:c5:79:3a:f6:88:4a:2d:38:39:d4:e5:3c:33:
e3:68:07:6d:62:c6:b0:f6:13:d3:4c:dd:a6:d8:90:6d:c6:b4:
8d:e6:92:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVkdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIwMTQxMjQ3WhcNMjUwMzIwMTQxMjQ3WjAYMRYw
FAYDVQQDEw02N2I3Mzg2Mi1mZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsRSC2pqi1V+EjnGgSP0qSDU1vK8wZ3j9znMhYUSXzxgDM1CCzemk6EzJ
VADrsVLcFYW039qDuOC77fdEej9whsDeYTElzhetuxyeqb9wmTesygL2FLouuIGt
oaiO1uo4prfTMFE4jMZyJ2Of3kDZab2qIZl4iYN8kZKdI2CIlsFO4jZ1013Cum0m
29VjY+/AWVdIPgclLH5dVoA3Qc4oSH7jThzA8wYR9e6MSTudvlrTQXUJsuttyxP/
dumCUDlttAzqg6cKA+6udqqK74xsN0r6jLteTQxkAP2x3Qc7q4N7A+gfLX0c/qVA
3FMychD1wn7an+4k2l3CUksbLmqHewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIUK
LIw/JH2JF740DE7ZVAmYjruPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNEIxQTg3QUVGOTQxMUVGODNENTIyNjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlmQMA0GCSqGSIb3DQEB
CwUAA4IBAQCLaCkBboc9xcqwVmYsmVNFc6LYqp8lG9FHzyT+X8gVmS6c5SPukRS6
QwFF6UojdG+XXK3nQ9BQ59v2eTFmLwTkgsa0vJ27ob5EOUQRk0xr2sGP6C/35Y61
fmT2MkDYrXJAZ5SkvH7xqdaAky4hoO7pE6IbwSL+I30p+mfqFB713GYpinA/VQ5E
5LJcEfD2Lk7HiDqrM6YXM2FiNo/ZfsW6inu2EwwrBkqrLexJT23I1P8uHe6WSBJV
pznsozp5ouBBT9THXXcfxKs3SHrq10F6Doqycjl+Qp4sa0UA6cV5OvaISi04OdTl
PDPjaAdtYsaw9hPTTN2m2JBtxrSN5pKu
-----END CERTIFICATE-----
Generated at Fri May 9 09:43:51 2025 by rpki-client