Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA00CEADA5311EF99534A6E762E951A.roa
File: DFA00CEADA5311EF99534A6E762E951A.roa (raw, json)
Hash identifier: TCnQiphwdzumvsStFl+uoOWSPYM2scr3gtn8VYxgLY0=
Subject key identifier: 3B:D8:AA:6A:3C:82:05:AC:19:69:8F:B8:B2:24:95:68:1D:E7:97:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01473C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA00CEADA5311EF99534A6E762E951A.roa
Signing time: Fri 24 Jan 2025 13:05:24 +0000
ROA not before: Fri 24 Jan 2025 13:05:20 +0000
ROA not after: Sat 01 Mar 2025 13:05:20 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83772 (0x1473c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 13:05:20 2025 GMT
Not After : Mar 1 13:05:20 2025 GMT
Subject: CN=67939014-e5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:72:ec:09:1a:65:65:8e:c2:7f:25:a6:a8:
c1:d9:1c:c5:71:a1:a3:5d:d4:bd:33:78:28:90:10:
07:d1:07:78:b5:ff:c9:78:da:ae:ab:11:6a:8c:d9:
a4:4d:ef:80:72:d1:df:c5:04:95:02:24:c5:6f:77:
e0:06:3c:e1:0f:38:11:83:f5:f9:87:fc:cc:18:76:
cb:fc:f5:a0:af:84:2c:33:b8:46:b1:e7:b9:9d:10:
9e:15:64:b2:40:24:4c:40:b3:f6:af:d2:f7:0c:d6:
51:5e:c9:71:0a:2a:64:98:4e:66:02:65:72:2b:b5:
92:24:73:76:53:dc:8f:b3:39:37:d3:5f:e3:91:b2:
b0:1d:f5:a9:87:4f:66:ef:2f:09:51:49:88:00:b4:
44:64:18:72:c5:38:51:3f:eb:75:fa:f4:ed:9e:52:
51:16:83:59:2b:cd:d0:ec:90:09:4c:fb:bb:96:cb:
25:e3:77:88:60:af:49:b6:61:95:ba:52:41:2c:67:
2c:e6:e2:8b:7c:d1:b0:3e:93:5f:43:58:bd:71:4c:
24:1f:fd:b8:83:96:ff:aa:2b:d8:8a:be:65:bc:b7:
8e:61:7f:0e:3c:13:e9:4c:36:4c:fd:55:7e:8a:cb:
5a:29:79:b8:a6:6a:28:cc:ce:6c:c4:cf:c0:7b:dc:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:AA:6A:3C:82:05:AC:19:69:8F:B8:B2:24:95:68:1D:E7:97:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA00CEADA5311EF99534A6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/24
Signature Algorithm: sha256WithRSAEncryption
83:77:15:49:6d:0b:68:6b:c3:6b:cb:f6:d6:b0:39:19:8c:d1:
c9:6c:28:2d:8e:77:7d:e8:7d:17:c2:ae:9d:ae:a8:15:9b:bb:
f9:ea:ed:9d:fd:47:01:ba:1b:09:3a:9e:ed:34:65:31:2b:1b:
60:7b:70:cf:91:26:ad:25:51:62:6d:e9:e3:06:60:26:9f:f8:
48:29:2d:0a:c2:6d:2a:f1:14:90:32:58:b9:04:92:ff:46:cf:
96:46:43:dd:a8:34:57:4b:6d:d3:60:5d:6d:29:af:b9:b4:1b:
07:03:bd:7b:42:26:bf:52:fa:e5:0c:ee:38:53:43:4d:f6:80:
4a:ad:38:0a:9b:fb:78:fa:a3:df:2f:74:36:ab:d8:31:b6:74:
41:de:1a:08:19:4b:2e:db:a4:84:57:5d:06:b8:44:3e:4d:20:
cc:77:7f:b9:d5:03:58:e0:fb:a9:29:a3:b4:17:8e:14:f1:e7:
c2:04:27:57:e9:29:25:11:11:60:5e:fe:75:a0:eb:5b:e3:6e:
e6:dc:ff:3b:b5:78:0b:a9:8a:89:27:7f:3a:43:78:0a:76:7e:
82:ca:47:a1:b0:e0:73:02:a8:8f:7c:17:68:35:2d:34:38:2c:
8b:16:09:4a:3d:19:f8:fa:36:d6:3f:08:d1:c8:a0:86:0c:f6:
ea:3b:be:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUc8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTMwNTIwWhcNMjUwMzAxMTMwNTIwWjAYMRYw
FAYDVQQDEw02NzkzOTAxNC1lNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7gBy7AkaZWWOwn8lpqjB2RzFcaGjXdS9M3gokBAH0Qd4tf/JeNquqxFq
jNmkTe+ActHfxQSVAiTFb3fgBjzhDzgRg/X5h/zMGHbL/PWgr4QsM7hGsee5nRCe
FWSyQCRMQLP2r9L3DNZRXslxCipkmE5mAmVyK7WSJHN2U9yPszk301/jkbKwHfWp
h09m7y8JUUmIALREZBhyxThRP+t1+vTtnlJRFoNZK83Q7JAJTPu7lssl43eIYK9J
tmGVulJBLGcs5uKLfNGwPpNfQ1i9cUwkH/24g5b/qivYir5lvLeOYX8OPBPpTDZM
/VV+istaKXm4pmoozM5sxM/Ae9wxNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDvY
qmo8ggWsGWmPuLIklWgd55eZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERkEwMENFQURBNTMxMUVGOTk1MzRBNkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/MMA0GCSqGSIb3DQEB
CwUAA4IBAQCDdxVJbQtoa8Nry/bWsDkZjNHJbCgtjnd96H0Xwq6drqgVm7v56u2d
/UcBuhsJOp7tNGUxKxtge3DPkSatJVFibenjBmAmn/hIKS0Kwm0q8RSQMli5BJL/
Rs+WRkPdqDRXS23TYF1tKa+5tBsHA717Qia/UvrlDO44U0NN9oBKrTgKm/t4+qPf
L3Q2q9gxtnRB3hoIGUsu26SEV10GuEQ+TSDMd3+51QNY4PupKaO0F44U8efCBCdX
6SklERFgXv51oOtb427m3P87tXgLqYqJJ386Q3gKdn6CykehsOBzAqiPfBdoNS00
OCyLFglKPRn4+jbWPwjRyKCGDPbqO756
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:42:14 2025 by rpki-client