This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FC0A3A8A9711EEA69A54254AD9E6FC.roa
File:                     E3FC0A3A8A9711EEA69A54254AD9E6FC.roa (raw, json)
Hash identifier:          DdyBXlsYEACPpqyUDjxNtz/mpHet1l8Z647zn13SCN8=
Subject key identifier:   4E:58:0A:AF:07:B8:DD:2E:C4:43:D2:90:23:63:19:24:77:99:4B:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5428
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FC0A3A8A9711EEA69A54254AD9E6FC.roa
Signing time:             Fri 24 Nov 2023 07:05:46 +0000
ROA not before:           Fri 24 Nov 2023 07:05:43 +0000
ROA not after:            Tue 26 Dec 2023 07:05:43 +0000
asID:                     62240
IP address blocks:        154.195.137.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21544 (0x5428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 07:05:43 2023 GMT
            Not After : Dec 26 07:05:43 2023 GMT
        Subject: CN=65604b4a-81f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:97:22:f1:7b:df:3e:61:70:05:64:21:ca:
                    02:19:b2:33:57:78:b7:69:1a:c8:61:a1:9c:90:c8:
                    97:4c:c6:a9:4e:98:9e:f0:c6:53:5c:32:c4:0a:c1:
                    7f:bd:f0:fa:80:18:44:a3:0d:50:d3:d1:95:2b:ed:
                    73:6c:55:6e:be:88:dc:b3:43:40:cf:be:ce:71:31:
                    d5:f4:d9:97:8a:7c:3d:c3:51:53:84:5a:78:e8:f7:
                    40:9b:75:a0:81:f3:37:0a:dc:a5:40:cd:d7:01:41:
                    65:1f:68:76:ed:a9:93:bf:31:ee:0d:b9:c8:04:fa:
                    db:ec:07:af:41:3c:78:c1:29:8d:53:53:f2:a2:71:
                    01:02:61:ad:72:f4:bb:90:b3:19:7a:73:f9:23:69:
                    15:09:f8:e1:50:c2:95:bb:ef:2b:48:31:a4:b6:ca:
                    4e:75:b1:0a:ca:4c:ac:60:e7:df:19:0d:f9:03:01:
                    4f:35:9c:f6:d4:db:0c:5d:b6:98:92:6b:dc:09:8c:
                    96:2d:38:20:3d:f5:70:e8:e3:7f:85:bb:0e:6d:d4:
                    60:56:80:99:a7:50:cf:bb:0b:fd:46:d5:22:d6:fc:
                    27:ab:56:40:39:9a:3e:ea:ab:22:a7:a7:07:9e:e1:
                    ae:23:77:e4:30:25:46:03:b5:85:d6:3f:08:3f:44:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:58:0A:AF:07:B8:DD:2E:C4:43:D2:90:23:63:19:24:77:99:4B:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FC0A3A8A9711EEA69A54254AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:96:0f:d4:80:04:57:3c:cf:51:82:8a:7d:36:cb:59:cf:
         f7:a0:50:aa:7e:e2:f7:7d:0b:c0:94:4a:13:1a:93:cc:f0:79:
         66:3a:0b:c9:a5:eb:ef:6f:f1:8a:fe:41:47:b3:ab:3e:52:e1:
         e6:c6:ae:bc:32:84:9a:ee:db:ee:3f:09:37:b8:13:00:04:0c:
         05:75:c9:61:fd:f2:af:72:e5:b8:bc:20:23:7a:24:41:cc:f7:
         83:d4:90:ef:88:ca:35:40:0c:47:03:bf:ca:e7:3b:47:2f:23:
         79:c4:64:73:e5:b2:79:d4:b6:5b:cf:9f:88:f8:a7:17:8d:b8:
         0b:22:c2:c0:68:c7:41:01:76:01:94:43:86:b3:a4:cf:64:60:
         71:88:02:7e:e5:34:05:44:28:83:95:53:4f:29:a7:7d:48:f1:
         3c:f7:b6:a6:e3:22:da:5d:86:bb:7b:d6:1f:7e:87:e6:b5:f6:
         92:67:a6:4a:cf:be:2e:75:95:cd:50:95:40:e2:71:6d:e6:39:
         3a:b8:8c:77:c8:b0:18:55:51:de:96:24:bc:ee:f7:dc:d6:b4:
         fe:a6:be:c8:e5:de:96:b4:21:d7:fa:0b:19:11:fc:f6:51:dc:
         4f:fb:76:6a:db:db:fc:cd:67:02:c4:a1:cb:bc:06:7c:53:2b:
         9d:ee:f5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----