Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB55ED6AF50411EF9A78219D762E951A.roa
File: CB55ED6AF50411EF9A78219D762E951A.roa (raw, json)
Hash identifier: oi2mv67i7F5avU19egi7agAYjMIz9UzNlz/V/FWmxGE=
Subject key identifier: E6:4E:21:06:97:D2:90:D8:39:DE:3E:00:65:3B:CB:A6:FC:EF:2D:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016833
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB55ED6AF50411EF9A78219D762E951A.roa
Signing time: Thu 27 Feb 2025 12:17:21 +0000
ROA not before: Thu 27 Feb 2025 12:17:18 +0000
ROA not after: Wed 26 Mar 2025 12:17:18 +0000
asID: 62240
IP address blocks: 154.195.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92211 (0x16833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 12:17:18 2025 GMT
Not After : Mar 26 12:17:18 2025 GMT
Subject: CN=67c057d1-ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:4a:58:c2:f3:36:d0:c8:3c:18:dc:94:cd:
12:b8:ea:17:1a:c2:ae:77:1c:1c:5f:ee:c0:1b:60:
39:00:35:c2:53:90:d0:03:88:c9:2f:17:ca:69:11:
bb:22:22:aa:db:68:d2:3f:3d:80:01:2f:44:14:fd:
a0:53:af:21:7f:a4:11:5b:89:6e:3b:73:1d:d4:7a:
34:23:d9:e9:9e:2f:b5:db:1a:79:56:c2:87:67:f4:
f7:29:bc:f9:cf:5f:d8:d2:30:d4:ec:52:df:41:cf:
f4:9a:d8:37:8e:36:15:e9:6a:a2:c5:33:9f:db:f1:
3c:45:e2:fa:4b:6d:3c:ea:f6:a7:63:3b:0f:93:5d:
2d:a9:47:f9:18:23:b4:4b:c1:38:7e:2c:7c:1f:40:
f9:8c:98:41:2d:eb:b3:a1:fb:0c:ea:78:77:b5:17:
e1:19:0f:d8:a4:da:f1:c1:21:21:b1:36:e5:68:c4:
98:d3:51:ad:dc:83:5e:d0:9f:25:3a:97:a3:89:7d:
fe:55:d0:32:69:47:9e:44:ad:ba:85:75:2d:1c:54:
ec:ea:b6:e0:d7:57:70:fb:3f:dc:e0:34:9c:e8:f3:
f0:47:1c:b0:4c:b2:2c:fe:c7:c8:e3:85:08:f4:db:
09:d2:7c:10:83:97:0d:12:63:a2:05:ec:2c:23:85:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4E:21:06:97:D2:90:D8:39:DE:3E:00:65:3B:CB:A6:FC:EF:2D:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB55ED6AF50411EF9A78219D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:1c:4d:fb:3e:d6:4c:17:4d:76:07:26:d2:38:0e:f1:46:15:
56:4d:64:1e:62:f1:7e:c2:b3:d1:a7:1b:2c:c6:2e:c1:68:75:
0b:b9:c6:76:57:e5:69:26:34:af:b9:42:00:0d:dd:d9:36:81:
65:73:6c:d7:8c:8c:db:08:2f:b8:ab:73:1d:ab:02:21:2e:f3:
dc:59:de:8e:37:80:c5:3c:1a:fe:da:ed:a6:ab:6c:73:00:d9:
49:37:79:b4:0e:32:aa:0c:29:c8:59:f0:2b:f9:7b:17:64:02:
1e:73:2c:05:12:14:ac:ad:3c:d4:7c:1c:73:77:6b:36:a3:d6:
b5:f9:66:98:da:6a:25:ec:73:75:97:69:91:70:ea:16:78:30:
3f:f9:df:89:4a:ac:62:d9:bf:8f:9b:2a:5d:9d:a7:5f:1b:1c:
10:a0:46:5a:72:cf:18:99:80:18:19:08:75:ab:77:35:8a:ed:
39:75:78:87:48:d1:e9:ee:f2:5b:ad:68:98:69:21:17:c7:5a:
a3:05:e0:27:0c:08:95:fa:ed:9f:bc:51:d3:81:c7:03:fb:f0:
f3:a2:ac:36:49:c7:1e:fc:b8:dd:39:98:95:e2:7a:e0:b3:40:
54:9d:45:43:fe:df:cb:61:8d:66:57:67:a9:a0:4f:7a:b6:32:
e6:13:e7:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWgzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTIxNzE4WhcNMjUwMzI2MTIxNzE4WjAYMRYw
FAYDVQQDEw02N2MwNTdkMS1hYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu6tKWMLzNtDIPBjclM0SuOoXGsKudxwcX+7AG2A5ADXCU5DQA4jJLxfK
aRG7IiKq22jSPz2AAS9EFP2gU68hf6QRW4luO3Md1Ho0I9npni+12xp5VsKHZ/T3
Kbz5z1/Y0jDU7FLfQc/0mtg3jjYV6WqixTOf2/E8ReL6S2086vanYzsPk10tqUf5
GCO0S8E4fix8H0D5jJhBLeuzofsM6nh3tRfhGQ/YpNrxwSEhsTblaMSY01Gt3INe
0J8lOpejiX3+VdAyaUeeRK26hXUtHFTs6rbg11dw+z/c4DSc6PPwRxywTLIs/sfI
44UI9NsJ0nwQg5cNEmOiBewsI4VTcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOZO
IQaX0pDYOd4+AGU7y6b87y1rMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjU1RUQ2QUY1MDQxMUVGOUE3ODIxOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsN8MA0GCSqGSIb3DQEB
CwUAA4IBAQDHHE37PtZMF012BybSOA7xRhVWTWQeYvF+wrPRpxssxi7BaHULucZ2
V+VpJjSvuUIADd3ZNoFlc2zXjIzbCC+4q3MdqwIhLvPcWd6ON4DFPBr+2u2mq2xz
ANlJN3m0DjKqDCnIWfAr+XsXZAIecywFEhSsrTzUfBxzd2s2o9a1+WaY2mol7HN1
l2mRcOoWeDA/+d+JSqxi2b+PmypdnadfGxwQoEZacs8YmYAYGQh1q3c1iu05dXiH
SNHp7vJbrWiYaSEXx1qjBeAnDAiV+u2fvFHTgccD+/Dzoqw2Scce/LjdOZiV4nrg
s0BUnUVD/t/LYY1mV2epoE96tjLmE+er
-----END CERTIFICATE-----
Generated at Fri May 9 17:15:15 2025 by rpki-client