Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F4B47404B411F088AB8484762E951A.roa
File: E1F4B47404B411F088AB8484762E951A.roa (raw, json)
Hash identifier: VKaEVrmmufF2Ps8nmNRorpHpcguA92nugEvUjvDTdo0=
Subject key identifier: 35:49:93:A0:14:94:78:89:6F:25:64:C8:F2:A7:8D:B5:A7:B1:4E:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017502
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F4B47404B411F088AB8484762E951A.roa
Signing time: Wed 19 Mar 2025 11:25:38 +0000
ROA not before: Wed 19 Mar 2025 11:25:34 +0000
ROA not after: Thu 27 Mar 2025 11:25:34 +0000
asID: 135097
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95490 (0x17502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 11:25:34 2025 GMT
Not After : Mar 27 11:25:34 2025 GMT
Subject: CN=67daa9b2-c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:e8:dd:84:11:3e:d4:11:7b:1e:50:de:74:
be:d9:62:8d:f4:50:be:71:87:57:82:fd:03:aa:85:
5d:1a:8c:85:61:28:da:db:b6:3c:07:fa:c4:91:83:
d9:bd:9e:ba:63:06:10:c1:9d:d9:37:f9:20:bc:1e:
2b:91:21:dd:4c:89:4b:12:bb:b7:ca:ff:51:e7:34:
54:95:ec:ba:ef:dd:77:b8:cb:b0:a4:f3:a5:b7:29:
e9:4b:94:06:b8:ce:c4:3e:54:a8:42:7e:ac:be:67:
1f:fc:b5:61:80:0d:b8:08:5d:9d:22:49:b7:e0:fd:
18:95:4f:2c:fd:56:3d:8d:85:98:28:f0:9f:35:bc:
39:6f:a0:72:15:ce:c9:7f:8e:0e:56:7a:6a:80:9e:
9c:25:fb:6c:85:03:29:28:21:b8:03:14:d8:6a:b0:
80:a8:57:34:eb:13:d2:3f:51:ce:e3:dd:57:79:80:
2a:4d:e7:6a:c1:e7:1d:e0:2e:06:05:0d:b2:63:85:
81:a1:6c:db:23:94:84:13:b0:35:8e:7b:5c:4d:9a:
7a:21:6d:9f:6b:a1:a6:e7:49:c4:4d:d7:bb:bd:a0:
fb:06:b8:3d:bb:2c:b3:ff:71:fe:c1:54:a5:48:e4:
d4:da:07:ab:c3:48:0e:a1:fc:00:43:92:bb:0c:50:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:49:93:A0:14:94:78:89:6F:25:64:C8:F2:A7:8D:B5:A7:B1:4E:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F4B47404B411F088AB8484762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
d2:ce:7d:aa:24:f7:00:1c:c7:2d:b9:c7:32:10:be:c1:9c:37:
c8:bb:ec:ec:39:0b:01:c9:13:6b:6a:92:04:b4:9f:ce:e8:08:
8a:79:67:fb:c5:3a:f3:d1:f8:02:99:f7:f5:d8:66:c8:5a:b1:
33:e5:d6:95:aa:80:53:c9:60:ea:fd:16:8e:19:01:3e:75:6f:
e6:9f:0d:fa:7b:eb:44:31:e9:3b:3d:c5:5d:4c:04:dc:71:f3:
06:2d:ab:82:4b:45:eb:92:30:37:c9:31:01:0c:df:f1:46:70:
f1:f8:f1:ab:21:c3:2d:48:99:99:25:0f:42:da:8a:81:f8:5c:
20:74:7e:dc:5e:2e:7b:6e:97:e1:3a:11:f2:80:e4:70:6f:62:
b9:7a:eb:c9:d6:26:cd:df:2d:e9:51:25:a4:87:6f:0d:d4:8a:
2d:40:0c:e0:ef:1c:4c:62:3a:59:b1:f4:f6:ad:49:0b:25:f9:
48:1d:d5:27:5a:e2:cb:b7:01:43:6b:b5:29:ce:fb:b3:b7:18:
01:f3:5d:e1:e7:af:c6:b4:ff:be:81:ba:94:f0:a2:bc:93:d9:
d2:a5:71:52:24:76:3e:82:aa:9b:76:24:2f:8a:85:ce:5c:a9:
ae:a4:a6:ce:d4:e4:11:75:68:ce:8a:5f:f3:9a:a4:3e:68:f1:
a2:19:c1:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXUCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE5MTEyNTM0WhcNMjUwMzI3MTEyNTM0WjAYMRYw
FAYDVQQDEw02N2RhYTliMi1jMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp/Po3YQRPtQRex5Q3nS+2WKN9FC+cYdXgv0DqoVdGoyFYSja27Y8B/rE
kYPZvZ66YwYQwZ3ZN/kgvB4rkSHdTIlLEru3yv9R5zRUley67913uMuwpPOltynp
S5QGuM7EPlSoQn6svmcf/LVhgA24CF2dIkm34P0YlU8s/VY9jYWYKPCfNbw5b6By
Fc7Jf44OVnpqgJ6cJftshQMpKCG4AxTYarCAqFc06xPSP1HO491XeYAqTedqwecd
4C4GBQ2yY4WBoWzbI5SEE7A1jntcTZp6IW2fa6Gm50nETde7vaD7Brg9uyyz/3H+
wVSlSOTU2gerw0gOofwAQ5K7DFBPLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDVJ
k6AUlHiJbyVkyPKnjbWnsU4ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMUY0QjQ3NDA0QjQxMUYwODhBQjg0ODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmllAMA0GCSqGSIb3DQEB
CwUAA4IBAQDSzn2qJPcAHMctuccyEL7BnDfIu+zsOQsByRNrapIEtJ/O6AiKeWf7
xTrz0fgCmff12GbIWrEz5daVqoBTyWDq/RaOGQE+dW/mnw36e+tEMek7PcVdTATc
cfMGLauCS0XrkjA3yTEBDN/xRnDx+PGrIcMtSJmZJQ9C2oqB+FwgdH7cXi57bpfh
OhHygORwb2K5euvJ1ibN3y3pUSWkh28N1IotQAzg7xxMYjpZsfT2rUkLJflIHdUn
WuLLtwFDa7UpzvuztxgB813h56/GtP++gbqU8KK8k9nSpXFSJHY+gqqbdiQvioXO
XKmupKbO1OQRdWjOil/zmqQ+aPGiGcEN
-----END CERTIFICATE-----
Generated at Fri May 9 07:03:39 2025 by rpki-client