Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11DA70AF4E711EFB982AA57762E951A.roa
File: D11DA70AF4E711EFB982AA57762E951A.roa (raw, json)
Hash identifier: kWYF5WzjPKnjURkGT+0vBXiJAS5ZKg4aWOaoI9zunCI=
Subject key identifier: 05:27:AC:60:65:3D:EE:9C:ED:9E:8B:AE:13:0A:88:8F:54:DD:A8:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016703
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11DA70AF4E711EFB982AA57762E951A.roa
Signing time: Thu 27 Feb 2025 08:49:56 +0000
ROA not before: Thu 27 Feb 2025 08:49:52 +0000
ROA not after: Wed 26 Mar 2025 08:49:52 +0000
asID: 62240
IP address blocks: 154.195.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91907 (0x16703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:49:52 2025 GMT
Not After : Mar 26 08:49:52 2025 GMT
Subject: CN=67c02733-fedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:11:06:ff:3b:82:8c:5f:e3:0a:db:4e:90:
a4:3a:19:66:e6:b1:17:ad:0a:0e:ab:b3:aa:c6:fb:
90:27:66:09:0d:4d:05:ed:fd:bf:8e:78:0b:e1:19:
8f:76:5a:44:ac:89:04:c6:49:58:61:1e:d0:ab:1b:
00:3f:1f:a7:b8:73:a7:e2:81:28:28:4e:6b:90:13:
c7:d4:2e:33:17:1a:ac:25:a7:13:67:a6:3e:71:3b:
66:7e:2e:6e:42:43:3f:33:f2:26:a2:a5:03:6f:30:
fc:af:16:ce:2b:07:3b:8f:f9:07:66:55:3a:41:b5:
a0:f6:57:56:47:72:b2:e8:4b:4c:b9:5e:ac:5e:6c:
f8:f0:2f:2f:09:40:e6:68:eb:bf:c6:0c:37:0c:30:
b8:f3:ef:90:79:71:89:b8:48:5a:33:8f:4c:36:a8:
1f:2a:0f:f5:6a:91:03:91:0d:c2:d5:ed:df:0c:f3:
ed:f2:c3:52:ee:32:42:37:95:31:6c:c2:cd:e4:70:
9f:09:d0:fd:d1:16:dc:58:25:7a:8e:51:e6:71:7e:
d9:fc:3d:be:d6:db:2c:27:3d:04:6b:a1:21:68:ea:
1c:a2:04:da:c1:8d:d8:d5:34:aa:d1:63:aa:8d:5c:
84:20:89:cc:e8:2d:3a:4b:57:0c:a2:47:54:02:a4:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:AC:60:65:3D:EE:9C:ED:9E:8B:AE:13:0A:88:8F:54:DD:A8:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D11DA70AF4E711EFB982AA57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.16.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7a:e4:a7:b2:ab:00:a2:a6:1d:b5:2d:29:08:64:3b:2d:36:
7f:a7:e0:21:73:8a:9b:fc:ec:32:46:99:81:0e:b2:98:0f:50:
b4:04:14:96:db:c1:66:43:c4:6f:f2:2b:03:43:2e:40:32:59:
7d:49:89:2f:98:cb:db:88:1f:af:a8:e3:6d:ee:eb:9e:87:f3:
8f:0b:a3:3c:a5:ac:3e:a1:95:17:36:0e:c5:7f:90:b8:4b:ca:
2a:68:7c:da:34:43:47:dc:54:f0:18:1a:11:72:f0:cb:bd:90:
a1:ef:e6:16:85:d2:0a:d2:02:13:4b:88:cc:7a:81:a5:03:e9:
f4:8f:48:5b:b7:92:9d:2b:0b:f2:f0:af:aa:df:e5:41:41:0d:
2b:87:85:3f:45:c2:c5:50:bb:b5:6a:ab:0b:85:53:eb:1d:89:
63:e0:96:f8:c7:07:46:8a:f5:9b:c3:dd:4c:53:78:91:87:05:
a4:d8:3c:96:9f:b1:db:71:75:91:ae:13:40:1f:e4:a1:bc:70:
99:30:f7:1d:2b:32:59:72:c3:c6:01:78:97:0e:6e:59:7a:55:
3e:c7:a9:ff:20:48:6b:6b:0d:4f:2e:5e:c5:f8:cf:fb:6b:35:
08:d6:8b:d3:75:18:91:73:22:cd:3b:45:74:46:b6:85:b1:e9:
5f:f2:11:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWcDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDg0OTUyWhcNMjUwMzI2MDg0OTUyWjAYMRYw
FAYDVQQDEw02N2MwMjczMy1mZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxXARBv87goxf4wrbTpCkOhlm5rEXrQoOq7OqxvuQJ2YJDU0F7f2/jngL
4RmPdlpErIkExklYYR7QqxsAPx+nuHOn4oEoKE5rkBPH1C4zFxqsJacTZ6Y+cTtm
fi5uQkM/M/ImoqUDbzD8rxbOKwc7j/kHZlU6QbWg9ldWR3Ky6EtMuV6sXmz48C8v
CUDmaOu/xgw3DDC48++QeXGJuEhaM49MNqgfKg/1apEDkQ3C1e3fDPPt8sNS7jJC
N5UxbMLN5HCfCdD90RbcWCV6jlHmcX7Z/D2+1tssJz0Ea6EhaOocogTawY3Y1TSq
0WOqjVyEIInM6C06S1cMokdUAqQAoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAUn
rGBlPe6c7Z6LrhMKiI9U3aiVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMTFEQTcwQUY0RTcxMUVGQjk4MkFBNTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMQMA0GCSqGSIb3DQEB
CwUAA4IBAQBQeuSnsqsAoqYdtS0pCGQ7LTZ/p+Ahc4qb/OwyRpmBDrKYD1C0BBSW
28FmQ8Rv8isDQy5AMll9SYkvmMvbiB+vqONt7uueh/OPC6M8paw+oZUXNg7Ff5C4
S8oqaHzaNENH3FTwGBoRcvDLvZCh7+YWhdIK0gITS4jMeoGlA+n0j0hbt5KdKwvy
8K+q3+VBQQ0rh4U/RcLFULu1aqsLhVPrHYlj4Jb4xwdGivWbw91MU3iRhwWk2DyW
n7HbcXWRrhNAH+ShvHCZMPcdKzJZcsPGAXiXDm5ZelU+x6n/IEhraw1PLl7F+M/7
azUI1ovTdRiRcyLNO0V0RraFself8hGw
-----END CERTIFICATE-----
Generated at Fri May 9 06:34:45 2025 by rpki-client