Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AA632AF4D711EF89CAFB69762E951A.roa
File: C8AA632AF4D711EF89CAFB69762E951A.roa (raw, json)
Hash identifier: wz7ylFtqEq17w7IZMe7EUEfDh1oT82q2Hi+WB/8GrmQ=
Subject key identifier: 15:79:75:0E:75:71:15:19:EE:E8:85:0A:17:37:0E:A3:F9:96:A3:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016683
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AA632AF4D711EF89CAFB69762E951A.roa
Signing time: Thu 27 Feb 2025 06:55:09 +0000
ROA not before: Thu 27 Feb 2025 06:55:06 +0000
ROA not after: Wed 26 Mar 2025 06:55:06 +0000
asID: 62240
IP address blocks: 154.195.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91779 (0x16683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 06:55:06 2025 GMT
Not After : Mar 26 06:55:06 2025 GMT
Subject: CN=67c00c4d-6e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:a5:d5:1f:48:87:8f:3c:73:67:c2:cb:96:
c1:a1:e1:e8:d5:9b:cf:b0:52:11:08:ac:34:43:cd:
b5:41:10:3a:50:c4:48:37:68:f3:f3:e5:b2:fa:57:
ec:7a:b3:db:03:54:71:d3:e6:bb:9c:2c:cf:f1:88:
c5:e5:be:4b:60:3d:a8:a0:a8:39:a3:5c:c4:67:90:
1f:8a:09:26:eb:cb:1c:67:3e:cc:f1:99:4e:bf:6d:
d9:60:a1:a4:1d:0c:4d:3c:ac:ac:b5:00:d7:ba:6b:
91:19:39:30:b6:bb:5e:6d:ad:2c:2c:4e:6b:5f:43:
02:e5:15:75:76:32:eb:dc:56:b1:f8:ae:a8:8d:ba:
54:97:a0:78:9f:b4:9c:58:63:b9:28:74:c0:ac:8f:
85:b8:96:85:34:65:33:7e:4c:07:de:f5:23:12:9b:
b4:03:ac:22:7a:0c:95:e2:d1:6e:2b:aa:83:ff:e6:
8e:9e:7b:85:2a:ee:5f:25:3f:c2:0a:fb:d6:04:5b:
f9:76:2c:ad:ba:c0:7d:43:f4:d0:de:7c:58:e2:27:
1c:2b:56:49:55:93:31:ca:66:19:97:4e:ae:cd:08:
ed:44:32:03:0b:0d:c3:c6:cc:99:d8:69:ef:68:1b:
c0:9d:c2:8b:5b:17:d9:4a:93:2c:ae:1f:34:71:ab:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:79:75:0E:75:71:15:19:EE:E8:85:0A:17:37:0E:A3:F9:96:A3:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AA632AF4D711EF89CAFB69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.155.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:c3:ac:8e:82:1b:ca:2c:6e:c5:8b:3e:ac:01:aa:56:5a:72:
72:97:96:00:ab:34:a5:1a:0a:41:2f:e2:eb:cc:04:d7:c1:d8:
e5:ff:a5:ab:0d:92:a2:8f:a3:dd:bc:3b:0f:c8:79:c8:aa:16:
a8:f4:65:9d:42:56:f5:8b:4f:17:bb:2a:2b:6f:43:0b:a9:44:
4d:dc:e1:85:d5:7b:42:0b:86:ba:a3:77:b0:41:c3:75:80:91:
e0:c8:23:7a:a7:77:b6:67:fe:db:a0:9e:15:23:6f:ad:eb:ed:
ba:73:77:02:0a:c5:9d:ca:84:ff:7c:f1:0f:f1:62:92:93:8a:
96:1e:65:e6:a5:42:da:28:02:17:90:df:81:4d:cd:24:7b:d8:
8f:34:68:8d:7d:26:d9:79:bd:ac:ca:f4:c9:ba:92:2a:38:97:
42:38:60:0d:cf:74:95:27:3e:41:58:cf:df:f3:cd:5e:19:11:
f0:f6:ab:46:ad:e1:f6:d9:49:e6:c3:f0:96:4a:8a:79:d2:78:
98:77:51:c2:ed:60:eb:89:40:e2:55:2a:39:f6:cb:ee:64:6e:
53:23:88:18:74:1c:fd:ee:19:f7:a7:e2:32:20:79:c3:fd:c7:
f2:38:d5:73:29:e1:48:ac:19:a7:56:e5:90:42:72:f9:7b:8b:
60:54:34:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWaDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDY1NTA2WhcNMjUwMzI2MDY1NTA2WjAYMRYw
FAYDVQQDEw02N2MwMGM0ZC02ZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy/il1R9Ih488c2fCy5bBoeHo1ZvPsFIRCKw0Q821QRA6UMRIN2jz8+Wy
+lfserPbA1Rx0+a7nCzP8YjF5b5LYD2ooKg5o1zEZ5Afigkm68scZz7M8ZlOv23Z
YKGkHQxNPKystQDXumuRGTkwtrteba0sLE5rX0MC5RV1djLr3Fax+K6ojbpUl6B4
n7ScWGO5KHTArI+FuJaFNGUzfkwH3vUjEpu0A6wiegyV4tFuK6qD/+aOnnuFKu5f
JT/CCvvWBFv5diytusB9Q/TQ3nxY4iccK1ZJVZMxymYZl06uzQjtRDIDCw3DxsyZ
2GnvaBvAncKLWxfZSpMsrh80catLHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBV5
dQ51cRUZ7uiFChc3DqP5lqMXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOEFBNjMyQUY0RDcxMUVGODlDQUZCNjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsObMA0GCSqGSIb3DQEB
CwUAA4IBAQDRw6yOghvKLG7Fiz6sAapWWnJyl5YAqzSlGgpBL+LrzATXwdjl/6Wr
DZKij6PdvDsPyHnIqhao9GWdQlb1i08Xuyorb0MLqURN3OGF1XtCC4a6o3ewQcN1
gJHgyCN6p3e2Z/7boJ4VI2+t6+26c3cCCsWdyoT/fPEP8WKSk4qWHmXmpULaKAIX
kN+BTc0ke9iPNGiNfSbZeb2syvTJupIqOJdCOGANz3SVJz5BWM/f881eGRHw9qtG
reH22Unmw/CWSop50niYd1HC7WDriUDiVSo59svuZG5TI4gYdBz97hn3p+IyIHnD
/cfyONVzKeFIrBmnVuWQQnL5e4tgVDQ5
-----END CERTIFICATE-----
Generated at Fri May 9 05:52:36 2025 by rpki-client