Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C601E3A88A9011EEBA2EFC0D4AD9E6FC.roa
File: C601E3A88A9011EEBA2EFC0D4AD9E6FC.roa (raw, json)
Hash identifier: xf9r1BmOpipW2/uMtmkg26XkOtxZ5rPQnYCTJSEeie0=
Subject key identifier: E3:1E:08:5A:40:91:00:5C:DB:4F:C9:70:77:AC:81:90:57:A5:A9:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 539D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C601E3A88A9011EEBA2EFC0D4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:14:50 +0000
ROA not before: Fri 24 Nov 2023 06:14:46 +0000
ROA not after: Tue 26 Dec 2023 06:14:46 +0000
asID: 62240
IP address blocks: 154.195.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21405 (0x539d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:14:46 2023 GMT
Not After : Dec 26 06:14:46 2023 GMT
Subject: CN=65603f5a-9f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:4b:11:8d:a5:bf:30:b8:a7:d8:cb:4e:f8:
36:b2:74:d9:d1:f4:2e:13:54:26:79:a9:a1:f1:46:
78:51:d6:d5:8c:15:7b:df:0a:46:82:43:cc:b1:d0:
0e:11:32:91:78:0f:c1:15:ce:8e:9b:dc:19:6c:27:
1e:fc:6f:8f:50:a2:e4:9e:ef:09:7f:5d:2d:b0:b0:
96:a8:93:7b:15:33:84:70:ef:5c:72:9a:31:c8:17:
82:39:ee:e8:d9:e7:94:8e:ba:23:e9:6d:99:bc:2b:
ea:0b:f5:a5:4f:79:3b:90:19:2c:d8:ee:c3:48:49:
f9:c4:5c:2d:3a:43:7d:cd:39:19:49:b8:e1:18:f2:
cd:a5:dd:a6:01:a6:f0:ac:09:23:4b:e7:51:64:ef:
05:fb:06:0f:0d:98:c9:e8:01:39:8b:07:3e:fa:1b:
b1:10:98:5f:4f:44:64:2b:9d:61:da:5c:72:2c:01:
4b:c9:f0:d3:00:23:65:03:d3:2d:5f:33:0b:3a:49:
19:28:23:4f:82:b2:0f:42:51:e7:53:8d:d6:77:cf:
58:5d:b1:0e:e0:ac:14:90:ff:5e:36:e5:0f:f0:31:
91:42:16:53:d7:35:b1:e2:50:ed:68:09:f8:df:77:
f1:d0:5c:57:8d:a5:d5:11:5b:75:32:94:45:cd:7f:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:08:5A:40:91:00:5C:DB:4F:C9:70:77:AC:81:90:57:A5:A9:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C601E3A88A9011EEBA2EFC0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8d:8f:5b:c5:27:3b:24:0a:4e:27:5d:31:ee:f1:83:b5:a5:
34:e0:7f:f4:b5:cf:89:0e:36:22:09:78:c5:3d:02:f3:b7:2f:
5e:88:6a:90:85:45:cc:7d:df:47:25:ff:d5:e7:57:b5:72:6c:
0c:ba:b2:8d:f4:4f:ed:68:2e:08:ff:db:f8:68:81:00:fd:9b:
62:09:4c:3e:61:44:78:90:c6:3b:86:81:ff:af:54:4a:04:72:
9e:bb:2d:f2:68:3c:9a:a4:73:54:2f:77:58:b1:68:c3:2d:d0:
7e:20:50:ae:d5:67:3c:c2:8d:e5:5d:37:51:17:6e:a9:1b:fc:
5d:63:86:aa:23:60:73:39:e6:70:21:59:76:3b:e9:99:a3:2b:
ac:26:59:23:50:ab:d1:cc:ef:25:46:09:17:bc:6f:2d:be:27:
95:53:d6:5b:30:89:2e:c7:93:80:65:f0:a5:aa:7d:d4:21:7e:
4c:06:ee:e6:d5:dc:56:af:47:a5:b6:f8:c2:f3:a5:cc:b1:45:
09:5f:02:4e:d1:3e:ee:26:cc:65:c9:3f:ac:38:52:14:7f:64:
56:7d:c4:a4:9e:34:46:82:28:85:2e:29:5c:1d:f2:7b:9a:c5:
2b:97:41:1e:d0:e5:89:05:35:17:bb:df:57:44:42:29:53:b1:
73:4d:a6:fd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU50wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNjE0NDZaFw0yMzEyMjYwNjE0NDZaMBgxFjAU
BgNVBAMTDTY1NjAzZjVhLTlmOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtoEsRjaW/MLin2MtO+DaydNnR9C4TVCZ5qaHxRnhR1tWMFXvfCkaCQ8yx
0A4RMpF4D8EVzo6b3BlsJx78b49QouSe7wl/XS2wsJaok3sVM4Rw71xymjHIF4I5
7ujZ55SOuiPpbZm8K+oL9aVPeTuQGSzY7sNISfnEXC06Q33NORlJuOEY8s2l3aYB
pvCsCSNL51Fk7wX7Bg8NmMnoATmLBz76G7EQmF9PRGQrnWHaXHIsAUvJ8NMAI2UD
0y1fMws6SRkoI0+Csg9CUedTjdZ3z1hdsQ7grBSQ/1425Q/wMZFCFlPXNbHiUO1o
Cfjfd/HQXFeNpdURW3UylEXNf2ITAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4x4I
WkCRAFzbT8lwd6yBkFelqQYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M2MDFFM0E4OEE5MDExRUVCQTJFRkMwRDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw30wDQYJKoZIhvcNAQEL
BQADggEBAKaNj1vFJzskCk4nXTHu8YO1pTTgf/S1z4kONiIJeMU9AvO3L16IapCF
Rcx930cl/9XnV7VybAy6so30T+1oLgj/2/hogQD9m2IJTD5hRHiQxjuGgf+vVEoE
cp67LfJoPJqkc1Qvd1ixaMMt0H4gUK7VZzzCjeVdN1EXbqkb/F1jhqojYHM55nAh
WXY76ZmjK6wmWSNQq9HM7yVGCRe8by2+J5VT1lswiS7Hk4Bl8KWqfdQhfkwG7ubV
3FavR6W2+MLzpcyxRQlfAk7RPu4mzGXJP6w4UhR/ZFZ9xKSeNEaCKIUuKVwd8nua
xSuXQR7Q5YkFNRe731dEQilTsXNNpv0=
-----END CERTIFICATE-----
Generated at Fri May 9 10:50:02 2025 by rpki-client