Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C688011ADA6511EFA51C5668762E951A.roa
File: C688011ADA6511EFA51C5668762E951A.roa (raw, json)
Hash identifier: rHzZXGQHLZgAA6f7X0f2We6ma7GSh14DXMdQAiWOOCo=
Subject key identifier: 0E:2E:49:9D:D6:86:20:D1:5B:7D:C2:85:0F:99:BE:BD:4D:DF:D5:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01489C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C688011ADA6511EFA51C5668762E951A.roa
Signing time: Fri 24 Jan 2025 15:13:33 +0000
ROA not before: Fri 24 Jan 2025 15:13:29 +0000
ROA not after: Wed 05 Mar 2025 15:13:29 +0000
asID: 49505
IP address blocks: 154.209.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84124 (0x1489c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 15:13:29 2025 GMT
Not After : Mar 5 15:13:29 2025 GMT
Subject: CN=6793ae1d-ea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:de:69:0b:24:41:b9:29:ff:87:4b:a2:69:
e9:9e:3c:c7:a1:8b:b8:60:e7:83:12:47:71:75:f3:
c7:38:34:86:10:f1:ae:73:dc:30:43:56:68:31:d5:
60:05:1a:e8:40:32:2a:af:f2:42:56:59:e6:63:b5:
dd:0d:1d:ab:fd:a6:41:86:36:23:be:85:16:0e:af:
ac:58:ef:68:9b:e5:27:50:6c:99:82:13:81:e0:fb:
b8:7b:fc:7f:77:fc:bb:8c:9b:56:b0:30:a3:62:40:
0e:fc:42:c8:31:21:44:d3:fb:dd:99:38:ca:52:a8:
62:b2:f4:88:39:c0:dc:96:e4:91:5a:a4:8d:30:53:
07:62:ba:4a:4a:ed:72:bf:c0:0e:08:2d:86:c5:da:
a6:b1:da:7e:56:8c:d0:9c:54:1d:e2:b5:5f:44:da:
77:7e:c2:f0:92:67:a1:e3:1d:84:ad:4c:a3:96:01:
e4:6b:86:a0:e8:02:6e:ac:72:67:13:49:d2:b3:61:
ab:0b:3e:45:51:0b:13:c5:d0:f0:e6:0b:d0:68:bc:
d2:72:84:cc:30:9c:89:f1:9a:51:30:0d:c2:4d:d0:
24:0d:85:3c:fe:39:7a:9f:3b:08:e2:76:e0:f1:20:
bb:bb:40:9b:3a:a4:ea:ad:cb:3a:14:31:df:d9:22:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:49:9D:D6:86:20:D1:5B:7D:C2:85:0F:99:BE:BD:4D:DF:D5:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C688011ADA6511EFA51C5668762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2d:a6:c9:2c:d3:58:ac:cf:64:a9:ce:a3:64:c0:0e:4d:04:
12:24:4e:9e:2d:10:e9:dc:59:85:5e:21:bf:31:ca:01:81:0b:
a3:50:64:16:40:ad:33:c7:87:14:56:cb:0b:4d:39:66:bf:10:
0b:77:14:7e:10:59:47:d0:83:20:8f:41:f3:b3:90:e4:4b:1e:
ea:73:09:6d:2a:34:c2:6a:1f:8b:21:7d:48:99:09:92:7f:ce:
f1:09:4f:fa:22:f3:cc:e8:7e:cf:31:9c:8e:30:52:22:74:6a:
69:12:ee:5b:09:58:67:f5:9c:17:b0:cb:fb:5a:63:6e:fb:ac:
81:b7:dc:c1:52:8c:69:81:fb:bf:2e:c5:4b:7e:4f:f0:eb:7f:
77:ca:84:56:0f:63:4f:d2:59:83:e5:d1:3d:da:99:42:c9:b9:
de:b8:db:5f:89:a6:5d:58:ed:50:43:e8:92:80:f5:40:62:9e:
43:82:cc:30:ea:41:53:e7:82:b8:b0:15:e6:dc:37:db:6b:e5:
d4:37:73:e4:1a:3d:52:b6:8b:4c:19:20:6a:ce:3b:e9:2c:b6:
4e:3e:6c:2c:27:d1:3c:87:50:a5:33:5a:cb:8c:7a:bb:ea:8a:
3f:3d:d6:c8:86:a9:5f:76:8f:ed:50:d2:5a:2b:c5:f1:22:40:
c3:08:bb:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUicMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTUxMzI5WhcNMjUwMzA1MTUxMzI5WjAYMRYw
FAYDVQQDEw02NzkzYWUxZC1lYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxCzeaQskQbkp/4dLomnpnjzHoYu4YOeDEkdxdfPHODSGEPGuc9wwQ1Zo
MdVgBRroQDIqr/JCVlnmY7XdDR2r/aZBhjYjvoUWDq+sWO9om+UnUGyZghOB4Pu4
e/x/d/y7jJtWsDCjYkAO/ELIMSFE0/vdmTjKUqhisvSIOcDcluSRWqSNMFMHYrpK
Su1yv8AOCC2Gxdqmsdp+VozQnFQd4rVfRNp3fsLwkmeh4x2ErUyjlgHka4ag6AJu
rHJnE0nSs2GrCz5FUQsTxdDw5gvQaLzScoTMMJyJ8ZpRMA3CTdAkDYU8/jl6nzsI
4nbg8SC7u0CbOqTqrcs6FDHf2SL8zwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA4u
SZ3WhiDRW33ChQ+Zvr1N39VzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjg4MDExQURBNjUxMUVGQTUxQzU2Njg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtHfMA0GCSqGSIb3DQEB
CwUAA4IBAQCkLabJLNNYrM9kqc6jZMAOTQQSJE6eLRDp3FmFXiG/McoBgQujUGQW
QK0zx4cUVssLTTlmvxALdxR+EFlH0IMgj0Hzs5DkSx7qcwltKjTCah+LIX1ImQmS
f87xCU/6IvPM6H7PMZyOMFIidGppEu5bCVhn9ZwXsMv7WmNu+6yBt9zBUoxpgfu/
LsVLfk/w6393yoRWD2NP0lmD5dE92plCybneuNtfiaZdWO1QQ+iSgPVAYp5Dgsww
6kFT54K4sBXm3Dfba+XUN3PkGj1StotMGSBqzjvpLLZOPmwsJ9E8h1ClM1rLjHq7
6oo/PdbIhqlfdo/tUNJaK8XxIkDDCLtr
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:45:39 2025 by rpki-client