Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E472BF04F68411EF9D565B6A762E951A.roa
File: E472BF04F68411EF9D565B6A762E951A.roa (raw, json)
Hash identifier: dATFpdwmzyM6GbkKZbFNVRm5kIofb6AO8smz6fqQiMw=
Subject key identifier: C0:E2:1A:96:AD:C0:91:45:90:D8:67:82:53:D7:DF:1D:57:74:D1:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E472BF04F68411EF9D565B6A762E951A.roa
Signing time: Sat 01 Mar 2025 10:06:50 +0000
ROA not before: Sat 01 Mar 2025 10:06:46 +0000
ROA not after: Mon 31 Mar 2025 10:06:46 +0000
asID: 202656
IP address blocks: 154.222.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93629 (0x16dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 10:06:46 2025 GMT
Not After : Mar 31 10:06:46 2025 GMT
Subject: CN=67c2dc3a-97a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:24:cc:9e:eb:90:b1:11:bc:bc:84:77:4b:
82:ea:a4:eb:f7:26:c2:17:02:c9:a9:cb:ee:a1:d6:
df:46:3e:5f:4c:31:8b:83:1d:0e:98:5f:cf:4a:5d:
91:7b:ff:3f:8c:1a:ae:66:22:4a:75:47:f5:bb:2e:
a4:41:d9:c6:b0:e6:c2:1b:6f:16:00:55:32:f1:f8:
cd:dd:06:23:fb:0d:bf:bb:27:41:50:02:d3:29:45:
9f:af:79:a6:b7:85:12:88:79:ba:5d:79:83:7c:85:
74:69:20:29:36:88:a7:3f:81:b3:21:e1:f1:44:24:
3d:de:ce:0a:ca:19:13:1d:6f:82:27:e5:39:e6:93:
f6:b7:37:8f:58:c1:9b:e2:5d:fa:17:19:b7:fb:df:
ef:96:19:3e:47:cb:7a:6d:9d:db:1f:33:97:23:ca:
b7:5c:93:3d:2f:77:60:db:29:91:51:d9:d5:c3:d6:
c6:33:20:d4:7c:49:2b:e7:a6:6f:99:b1:6b:4f:a6:
60:1f:1e:c4:de:2d:c1:f9:e9:83:91:b8:e7:5e:4b:
e7:77:21:9a:b9:67:bd:1b:19:04:d7:50:5c:10:71:
bb:6c:0b:c8:2f:a1:62:bb:50:12:60:5b:5b:ae:97:
4a:c0:88:75:cb:c3:e5:e7:5e:37:6c:ad:10:b7:11:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:1A:96:AD:C0:91:45:90:D8:67:82:53:D7:DF:1D:57:74:D1:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E472BF04F68411EF9D565B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:73:a4:8c:c2:e5:aa:cd:d5:37:1a:2b:a2:36:e1:24:dc:ba:
d5:a8:f3:52:79:c5:ed:ea:f7:ee:6c:a9:4f:48:63:d0:88:d5:
97:52:d6:ce:49:80:b7:86:68:bf:f4:7e:21:8a:83:ef:4f:ae:
7c:bb:d4:0c:f7:7e:63:94:25:51:43:3e:21:43:28:46:4c:a7:
1c:9f:c2:a6:94:6a:07:dd:38:a4:c4:bd:66:82:89:44:8a:35:
5c:33:19:7a:46:11:e0:53:e3:e3:83:f9:bb:b2:0b:9b:f9:84:
dc:cf:62:bc:99:41:87:d5:3f:bb:b6:f1:b8:7d:c5:2c:e3:4c:
36:02:7f:3a:5c:0a:c5:d9:51:67:40:1b:9a:5d:04:75:d2:f4:
4c:67:e9:98:b5:27:74:6a:59:7d:7c:54:13:ed:2f:93:0d:fe:
92:16:09:77:d2:20:60:94:6c:c5:ee:bd:32:ed:a8:e8:c9:18:
74:ac:81:26:7e:19:90:16:54:18:3d:d2:f8:45:66:6a:dd:be:
62:64:1c:ae:f2:93:a8:c9:c3:40:ab:d4:96:59:14:4e:83:6c:
49:06:33:46:ff:af:04:41:70:4f:97:dc:4b:1f:19:35:1e:20:
91:8c:61:33:7b:4b:45:d4:03:6f:a1:33:ea:bf:6c:60:0d:07:
41:b9:c7:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW29MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTAwNjQ2WhcNMjUwMzMxMTAwNjQ2WjAYMRYw
FAYDVQQDEw02N2MyZGMzYS05N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoFUkzJ7rkLERvLyEd0uC6qTr9ybCFwLJqcvuodbfRj5fTDGLgx0OmF/P
Sl2Re/8/jBquZiJKdUf1uy6kQdnGsObCG28WAFUy8fjN3QYj+w2/uydBUALTKUWf
r3mmt4USiHm6XXmDfIV0aSApNoinP4GzIeHxRCQ93s4KyhkTHW+CJ+U55pP2tzeP
WMGb4l36Fxm3+9/vlhk+R8t6bZ3bHzOXI8q3XJM9L3dg2ymRUdnVw9bGMyDUfEkr
56ZvmbFrT6ZgHx7E3i3B+emDkbjnXkvndyGauWe9GxkE11BcEHG7bAvIL6Fiu1AS
YFtbrpdKwIh1y8Pl5143bK0QtxEMrwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMDi
GpatwJFFkNhnglPX3x1XdNFzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNDcyQkYwNEY2ODQxMUVGOUQ1NjVCNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7AMA0GCSqGSIb3DQEB
CwUAA4IBAQCxc6SMwuWqzdU3GiuiNuEk3LrVqPNSecXt6vfubKlPSGPQiNWXUtbO
SYC3hmi/9H4hioPvT658u9QM935jlCVRQz4hQyhGTKccn8KmlGoH3TikxL1mgolE
ijVcMxl6RhHgU+Pjg/m7sgub+YTcz2K8mUGH1T+7tvG4fcUs40w2An86XArF2VFn
QBuaXQR10vRMZ+mYtSd0all9fFQT7S+TDf6SFgl30iBglGzF7r0y7ajoyRh0rIEm
fhmQFlQYPdL4RWZq3b5iZByu8pOoycNAq9SWWRROg2xJBjNG/68EQXBPl9xLHxk1
HiCRjGEze0tF1ANvoTPqv2xgDQdBucer
-----END CERTIFICATE-----
Generated at Fri May 9 06:45:43 2025 by rpki-client