Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E29ACEA6893411EE86B5F12C4AD9E6FC.roa
File: E29ACEA6893411EE86B5F12C4AD9E6FC.roa (raw, json)
Hash identifier: qym7SDfMpScwo5f1UyDo7TxuWe7p1fI4NpvVc3Hy4vs=
Subject key identifier: C5:09:20:D5:6A:C6:D4:C8:45:72:54:03:09:E2:01:0F:C2:27:47:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5217
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E29ACEA6893411EE86B5F12C4AD9E6FC.roa
Signing time: Wed 22 Nov 2023 12:44:33 +0000
ROA not before: Wed 22 Nov 2023 12:44:29 +0000
ROA not after: Sun 24 Dec 2023 12:44:29 +0000
asID: 399045
IP address blocks: 154.197.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21015 (0x5217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:44:29 2023 GMT
Not After : Dec 24 12:44:29 2023 GMT
Subject: CN=655df7b1-69df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:28:c4:eb:a6:04:8f:4d:c7:11:19:04:da:
da:ba:b0:bd:a7:25:ef:81:e6:ea:25:40:ce:fe:0b:
4e:bb:49:39:63:3a:3d:da:80:87:cc:a4:02:61:f6:
85:d1:42:6e:89:23:66:05:49:4e:9c:8d:3e:62:4e:
32:e5:a5:06:77:a5:8f:38:26:ce:ca:42:03:97:68:
d3:c1:00:5e:fe:32:a5:2c:ba:52:77:54:be:29:58:
01:b3:b9:ec:a9:5f:45:8b:ed:43:5b:df:1d:16:f9:
90:cb:cc:27:0f:3c:ab:5b:0a:2f:ae:dd:47:8e:c9:
9e:8f:58:32:6b:68:dd:7c:d6:e7:e5:ef:86:d8:61:
9c:87:0f:17:1d:9a:3e:ba:1c:9c:06:3e:2a:5e:ef:
b1:fb:e7:24:9a:ea:25:fd:50:20:e7:65:15:f4:bb:
91:d0:51:be:02:a9:15:18:c6:b2:59:be:3e:10:6e:
1c:f5:18:8a:0a:7a:09:db:18:b5:88:2e:fa:0d:13:
cc:1f:f1:ce:85:58:78:3f:e4:12:7f:f2:18:d8:d1:
2c:31:d8:a2:e4:4c:1f:c6:a2:bf:38:73:25:cc:c1:
25:57:4b:73:f2:ca:de:7a:dd:de:35:55:50:9a:f8:
00:c6:c6:ff:ef:a3:57:de:1f:96:11:10:2e:25:7a:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:09:20:D5:6A:C6:D4:C8:45:72:54:03:09:E2:01:0F:C2:27:47:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E29ACEA6893411EE86B5F12C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.70.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3a:4d:b5:f2:86:c6:c6:88:67:f1:89:6f:55:24:ea:5b:d9:
34:03:55:14:85:e0:63:5f:60:08:11:a3:b0:aa:47:43:6a:1f:
34:3c:cf:99:20:56:38:94:ce:8c:11:73:64:96:50:63:34:60:
83:f3:3a:4a:9d:cd:17:83:97:72:74:60:c3:93:2a:68:b5:9a:
ee:3b:b0:87:c9:3c:55:49:30:04:32:da:01:0a:da:16:8a:e4:
eb:24:a1:6f:04:69:f0:9e:b0:df:3b:c8:ca:85:bb:28:44:87:
eb:a6:b3:af:d4:41:e7:0d:95:17:da:fd:16:77:bf:6a:b4:08:
e3:b4:65:fb:6a:3b:4a:10:84:1d:7b:31:3c:a5:6d:c6:56:15:
31:c0:60:36:23:27:fc:12:98:44:5c:a2:d1:80:ef:27:58:e7:
cb:a4:b7:f0:d4:98:12:74:66:71:c3:cf:ce:c7:a1:92:06:28:
5e:39:1e:84:cb:79:b4:b4:4f:8a:38:7f:1d:63:de:79:a3:e5:
f5:df:c2:d9:06:63:0e:c6:ab:52:c2:94:5e:c3:0f:3a:34:bb:
f5:a1:07:48:e6:d2:6e:0f:1c:6d:0a:a4:ac:96:47:8c:47:08:
e5:27:08:d7:4f:cb:a6:b1:5c:b5:f8:ac:ca:75:c8:ac:44:77:
59:02:ee:31
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUhcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjIxMjQ0MjlaFw0yMzEyMjQxMjQ0MjlaMBgxFjAU
BgNVBAMTDTY1NWRmN2IxLTY5ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDktSjE66YEj03HERkE2tq6sL2nJe+B5uolQM7+C067STljOj3agIfMpAJh
9oXRQm6JI2YFSU6cjT5iTjLlpQZ3pY84Js7KQgOXaNPBAF7+MqUsulJ3VL4pWAGz
ueypX0WL7UNb3x0W+ZDLzCcPPKtbCi+u3UeOyZ6PWDJraN181ufl74bYYZyHDxcd
mj66HJwGPipe77H75ySa6iX9UCDnZRX0u5HQUb4CqRUYxrJZvj4Qbhz1GIoKegnb
GLWILvoNE8wf8c6FWHg/5BJ/8hjY0Swx2KLkTB/Gor84cyXMwSVXS3Pyyt563d41
VVCa+ADGxv/vo1feH5YREC4lejZBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxQkg
1WrG1MhFclQDCeIBD8InR7kwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0UyOUFDRUE2ODkzNDExRUU4NkI1RjEyQzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxUYwDQYJKoZIhvcNAQEL
BQADggEBAIg6TbXyhsbGiGfxiW9VJOpb2TQDVRSF4GNfYAgRo7CqR0NqHzQ8z5kg
VjiUzowRc2SWUGM0YIPzOkqdzReDl3J0YMOTKmi1mu47sIfJPFVJMAQy2gEK2haK
5OskoW8EafCesN87yMqFuyhEh+ums6/UQecNlRfa/RZ3v2q0COO0ZftqO0oQhB17
MTylbcZWFTHAYDYjJ/wSmERcotGA7ydY58ukt/DUmBJ0ZnHDz87HoZIGKF45HoTL
ebS0T4o4fx1j3nmj5fXfwtkGYw7Gq1LClF7DDzo0u/WhB0jm0m4PHG0KpKyWR4xH
COUnCNdPy6axXLX4rMp1yKxEd1kC7jE=
-----END CERTIFICATE-----
Generated at Sun May 11 17:52:44 2025 by rpki-client