Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D8E23AF69911EFB628C577762E951A.roa
File: E2D8E23AF69911EFB628C577762E951A.roa (raw, json)
Hash identifier: bNybDi0o7oyby2lTNeMf5XLIw2/oSR19T2P3oePEIGA=
Subject key identifier: CA:FE:0F:67:62:D7:8D:66:47:5E:92:78:25:8F:5E:EC:10:A7:B1:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D8E23AF69911EFB628C577762E951A.roa
Signing time: Sat 01 Mar 2025 12:37:07 +0000
ROA not before: Sat 01 Mar 2025 12:37:03 +0000
ROA not after: Mon 31 Mar 2025 12:37:03 +0000
asID: 202656
IP address blocks: 154.219.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93768 (0x16e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:37:03 2025 GMT
Not After : Mar 31 12:37:03 2025 GMT
Subject: CN=67c2ff73-29e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:2e:80:d7:e4:42:b1:01:61:dd:02:95:1c:
aa:27:66:cd:73:e6:0e:01:c7:e6:8b:0e:ea:2a:3a:
00:f1:cb:e4:7c:d1:31:10:26:e4:d6:b7:23:e9:3f:
c1:b7:33:8d:da:5d:56:06:1a:02:0e:ad:17:c6:db:
c2:7c:5d:f3:aa:0d:97:19:b3:e7:95:37:24:40:46:
78:f3:cf:b7:b9:bc:c3:a2:2c:68:51:08:91:82:d8:
ec:85:e3:0f:e1:fb:91:d5:06:9e:3f:45:13:6e:90:
1e:91:64:18:64:0e:84:08:78:26:0c:14:e5:d4:4f:
2e:a6:0f:9d:e2:4d:28:89:9e:9c:e7:3c:0e:4a:08:
1b:b4:1b:9a:f2:bb:93:32:36:4b:0c:85:3c:c8:1d:
af:d2:f1:a1:d6:7d:a0:4c:ab:53:99:ae:f8:c2:1c:
99:42:1b:3c:30:62:0d:25:df:03:88:b1:51:8a:0b:
4e:73:5a:35:92:11:d6:ce:ff:76:d0:24:fe:da:05:
3b:93:9a:32:2c:dc:9f:d6:18:5a:1a:27:8f:df:2b:
f0:b6:01:55:d4:14:11:84:ca:21:12:4b:fb:db:1c:
48:2a:ff:d6:73:1e:9b:09:11:da:cc:9f:fb:8d:76:
89:29:9c:df:a3:03:40:46:e2:96:19:ea:b9:89:9d:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FE:0F:67:62:D7:8D:66:47:5E:92:78:25:8F:5E:EC:10:A7:B1:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D8E23AF69911EFB628C577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:bd:34:60:39:21:0d:13:a1:9c:56:a1:69:21:65:66:66:35:
00:81:e5:dc:c0:5b:32:c7:a0:26:29:29:2c:c2:75:a2:89:fb:
05:94:e5:3c:28:00:38:a2:f1:4a:98:cb:51:a5:17:32:b3:a6:
d0:1a:30:22:d8:5c:13:24:a8:47:87:65:aa:2a:52:98:b4:97:
29:0c:0f:b5:74:46:db:95:ed:38:b0:5a:c4:22:36:29:22:8b:
e9:61:50:10:f4:85:98:d8:8f:6a:dd:08:1c:b1:4f:35:a0:32:
c6:e4:14:22:5a:c7:81:de:46:bd:6e:55:91:d7:9a:34:c3:f5:
67:8f:e7:f4:45:8c:1e:10:fb:c7:07:b2:07:72:0d:ef:3a:c9:
ff:34:c6:26:13:49:00:22:26:ff:af:b7:e6:a9:d8:6b:9b:0d:
50:3d:91:bb:bf:de:98:f4:90:b6:94:1b:64:db:f5:52:85:a1:
8f:7e:3d:aa:01:2f:fa:f8:9e:28:1b:8f:18:4a:30:ed:75:a7:
b6:5b:df:f1:27:b6:79:78:b9:29:4b:72:cd:8a:62:df:f9:98:
b2:3d:13:49:8d:f1:14:10:08:1d:d0:02:1e:bc:36:f4:d3:ce:
f1:42:f4:8a:25:79:53:9f:94:f8:5a:5c:08:b8:15:90:f6:e5:
de:35:7e:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW5IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTIzNzAzWhcNMjUwMzMxMTIzNzAzWjAYMRYw
FAYDVQQDEw02N2MyZmY3My0yOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2zMugNfkQrEBYd0ClRyqJ2bNc+YOAcfmiw7qKjoA8cvkfNExECbk1rcj
6T/BtzON2l1WBhoCDq0XxtvCfF3zqg2XGbPnlTckQEZ488+3ubzDoixoUQiRgtjs
heMP4fuR1QaeP0UTbpAekWQYZA6ECHgmDBTl1E8upg+d4k0oiZ6c5zwOSggbtBua
8ruTMjZLDIU8yB2v0vGh1n2gTKtTma74whyZQhs8MGINJd8DiLFRigtOc1o1khHW
zv920CT+2gU7k5oyLNyf1hhaGieP3yvwtgFV1BQRhMohEkv72xxIKv/Wcx6bCRHa
zJ/7jXaJKZzfowNARuKWGeq5iZ1jowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMr+
D2di141mR16SeCWPXuwQp7GQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMkQ4RTIzQUY2OTkxMUVGQjYyOEM1Nzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvGMA0GCSqGSIb3DQEB
CwUAA4IBAQDDvTRgOSENE6GcVqFpIWVmZjUAgeXcwFsyx6AmKSkswnWiifsFlOU8
KAA4ovFKmMtRpRcys6bQGjAi2FwTJKhHh2WqKlKYtJcpDA+1dEbble04sFrEIjYp
IovpYVAQ9IWY2I9q3QgcsU81oDLG5BQiWseB3ka9blWR15o0w/Vnj+f0RYweEPvH
B7IHcg3vOsn/NMYmE0kAIib/r7fmqdhrmw1QPZG7v96Y9JC2lBtk2/VShaGPfj2q
AS/6+J4oG48YSjDtdae2W9/xJ7Z5eLkpS3LNimLf+ZiyPRNJjfEUEAgd0AIevDb0
087xQvSKJXlTn5T4WlwIuBWQ9uXeNX72
-----END CERTIFICATE-----
Generated at Fri May 9 06:31:59 2025 by rpki-client