This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D894B2EAF62B11EFAA2C2C7B762E951A.roa
File:                     D894B2EAF62B11EFAA2C2C7B762E951A.roa (raw, json)
Hash identifier:          nlW/gGGlbmhV5ckxVzGLNbUJpBZOtFDlN2f8r/bauFM=
Subject key identifier:   69:BB:A4:5B:89:B8:37:FC:C1:E7:F1:D2:5A:5D:F8:10:43:DC:AF:8F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       016CD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D894B2EAF62B11EFAA2C2C7B762E951A.roa
Signing time:             Fri 28 Feb 2025 23:29:25 +0000
ROA not before:           Fri 28 Feb 2025 23:29:21 +0000
ROA not after:            Wed 26 Mar 2025 23:29:21 +0000
asID:                     62240
IP address blocks:        154.194.38.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93393 (0x16cd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 28 23:29:21 2025 GMT
            Not After : Mar 26 23:29:21 2025 GMT
        Subject: CN=67c246d5-39ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:c5:b1:db:e5:9b:27:b5:07:6f:cd:bc:ed:
                    d5:a3:81:eb:f7:cb:9d:f1:69:83:94:88:76:a8:6a:
                    b4:79:27:04:5d:63:6e:58:0f:ce:78:85:33:72:0a:
                    5b:d2:81:9e:16:1d:49:95:7d:56:6e:6b:a6:51:91:
                    74:64:ae:67:3e:44:1e:21:d4:49:ed:28:64:a8:5b:
                    c6:12:7f:4d:4f:5f:ca:99:98:e1:e4:1f:01:ca:a4:
                    b7:b3:2c:96:5d:5d:38:96:f9:75:27:ca:77:32:03:
                    bc:76:77:83:93:47:ac:3f:66:e9:43:29:9b:76:be:
                    de:4a:31:38:cf:9e:7d:61:15:01:9c:3a:29:36:fd:
                    21:13:a4:d3:ac:74:38:52:b7:b0:17:01:4d:34:46:
                    78:dd:84:c2:fe:a7:13:44:28:5d:56:9f:74:3f:b2:
                    46:7a:0c:2e:4b:bd:df:37:fb:cd:19:c5:a8:ff:10:
                    b7:dd:46:aa:78:11:60:ac:df:64:ee:a0:d2:19:fc:
                    c3:f0:80:ce:78:44:0e:bd:7a:f3:4a:06:00:ac:ab:
                    f2:cf:ea:26:4f:c6:7d:5d:65:de:e1:2e:06:d5:e4:
                    fe:e5:ea:c1:6b:41:4d:df:c6:83:be:bd:8c:56:0c:
                    77:23:bb:74:15:be:00:5b:04:d9:3e:e5:8b:43:ce:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:A4:5B:89:B8:37:FC:C1:E7:F1:D2:5A:5D:F8:10:43:DC:AF:8F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D894B2EAF62B11EFAA2C2C7B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:d4:26:9e:06:d9:af:75:12:0a:3a:90:f6:bf:1d:59:e2:
         58:dd:b6:ed:90:d0:53:23:b5:91:66:9a:89:08:64:13:3c:a1:
         25:26:28:aa:99:1e:ab:e9:40:fa:3d:0a:0a:5a:e4:9a:20:81:
         4a:f6:47:31:da:bc:64:3e:0f:59:96:b2:31:02:89:4a:60:53:
         85:0c:f4:d5:b4:b2:96:17:74:d6:2c:c8:73:b3:9f:1d:62:8a:
         9c:5f:c5:6f:a6:63:ad:ec:cc:cb:90:52:37:fe:0b:0d:40:8c:
         e7:fc:85:91:7f:44:3a:f9:d3:56:c2:98:02:ba:77:4c:1e:03:
         ba:9f:d9:49:23:e4:14:7f:f9:77:e9:d4:17:c5:79:1a:48:0e:
         65:56:44:d0:f8:a7:5d:05:3c:e8:4f:48:ff:98:23:d6:17:f3:
         66:d3:18:8b:81:70:bb:54:82:79:58:6e:09:ac:67:56:74:82:
         d1:be:52:25:6a:c7:fe:18:65:3e:46:64:64:61:b7:1b:54:d7:
         74:da:5c:39:37:2d:a3:db:e4:3f:50:32:23:7b:99:4e:d1:ea:
         9c:cb:ac:e4:43:c1:a2:3a:72:b1:4d:dd:dd:35:40:f4:b8:8a:
         58:9f:26:e6:0a:69:94:11:69:58:47:c0:e7:8e:4c:00:29:6e:
         e1:fd:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----