Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5A5A2B2F2C211EF9AB9DB94762E951A.roa
File: E5A5A2B2F2C211EF9AB9DB94762E951A.roa (raw, json)
Hash identifier: RerMfwFSMALGOrjzVcw8BaNpEb9YWn5CYIDmh05mJxc=
Subject key identifier: F2:D1:72:E9:50:C5:19:DF:43:3D:5D:FF:1E:25:3B:4B:B7:17:54:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5A5A2B2F2C211EF9AB9DB94762E951A.roa
Signing time: Mon 24 Feb 2025 15:20:36 +0000
ROA not before: Mon 24 Feb 2025 15:20:32 +0000
ROA not after: Sat 29 Mar 2025 15:20:32 +0000
asID: 203020
IP address blocks: 154.223.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89158 (0x15c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 15:20:32 2025 GMT
Not After : Mar 29 15:20:32 2025 GMT
Subject: CN=67bc8e44-0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:dd:c2:c8:92:5e:f6:cc:8b:06:b3:f5:6e:
f3:42:b6:97:22:f8:f2:33:75:d3:a7:ed:03:e8:59:
b2:fb:0c:26:d0:77:1d:be:8d:18:35:a6:e1:6e:e6:
51:96:cb:92:89:48:6d:8f:5e:70:b3:dd:4e:cb:c6:
9d:36:ba:93:72:5c:e0:6c:32:b0:f9:10:cb:76:3a:
7f:0a:5e:97:1b:40:de:8f:43:70:13:33:c9:70:fa:
05:d3:a0:58:7f:42:6c:3a:f2:f5:6b:bc:be:7b:80:
1a:7f:9e:2a:9d:86:79:44:a3:9a:6f:7e:fa:7b:f9:
99:4e:15:9f:8d:29:8e:40:06:eb:f1:9b:b5:e1:dd:
d0:1d:d7:a8:74:ef:d2:37:44:e9:3c:fd:87:a9:2f:
76:2f:bb:96:97:3f:c7:7a:b9:46:42:a0:39:1e:d3:
5b:07:df:04:f9:7e:ee:3f:5b:98:cc:89:ae:a7:a9:
96:98:d6:70:ee:eb:71:d7:7e:fe:a6:79:ac:e8:4e:
7c:33:80:3e:b2:ba:68:7f:ac:f9:c3:0d:cd:7c:b9:
5e:5e:4a:2d:cb:90:35:70:c6:ec:6c:27:54:f9:a8:
ae:78:ac:2b:9a:25:f8:3b:af:b9:86:b2:8c:42:f5:
cb:82:2b:68:ee:be:32:21:32:a1:f1:5d:a7:68:91:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:72:E9:50:C5:19:DF:43:3D:5D:FF:1E:25:3B:4B:B7:17:54:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5A5A2B2F2C211EF9AB9DB94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:17:36:de:a7:be:2d:7e:cd:9c:2d:e7:bf:a2:77:95:03:3c:
d3:3b:43:20:a5:b4:68:36:c0:a8:0d:3c:08:43:d0:b7:06:53:
11:59:54:8d:37:98:62:71:11:0a:4e:c4:d2:da:69:07:f7:0b:
af:4e:c5:c1:41:78:67:63:f8:e5:17:f4:71:ea:ba:58:8c:90:
d3:56:6f:84:cc:70:87:29:14:10:ed:84:0a:cf:33:07:7a:b2:
b1:1c:a9:a7:95:b6:21:04:7d:66:7a:b2:97:8e:57:3f:1e:ea:
af:2b:71:da:fd:1f:48:c4:71:8e:98:9a:97:59:65:04:e5:25:
7a:7c:e0:53:0d:65:06:40:bd:0a:72:9b:f8:8a:ad:e5:d9:b2:
12:62:da:42:6b:47:17:58:0c:21:9d:a9:bf:83:ea:07:68:3c:
30:24:cf:cf:47:31:c1:aa:cc:f3:d6:6f:a3:7f:c0:cb:83:e8:
73:be:12:eb:26:d1:84:82:ea:9e:4e:8f:b7:81:1c:64:71:b7:
48:29:17:6f:47:0f:4e:3d:e4:0b:4f:c7:fb:65:67:f8:01:7c:
4c:c4:16:22:f3:66:6b:88:03:e3:e8:59:63:15:8d:2c:33:5a:
57:bf:5f:f6:4d:48:51:90:37:46:a6:89:ab:83:c4:89:1d:3d:
83:96:21:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVxGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTUyMDMyWhcNMjUwMzI5MTUyMDMyWjAYMRYw
FAYDVQQDEw02N2JjOGU0NC0wYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoL3dwsiSXvbMiwaz9W7zQraXIvjyM3XTp+0D6Fmy+wwm0Hcdvo0YNabh
buZRlsuSiUhtj15ws91Oy8adNrqTclzgbDKw+RDLdjp/Cl6XG0Dej0NwEzPJcPoF
06BYf0JsOvL1a7y+e4Aaf54qnYZ5RKOab376e/mZThWfjSmOQAbr8Zu14d3QHdeo
dO/SN0TpPP2HqS92L7uWlz/HerlGQqA5HtNbB98E+X7uP1uYzImup6mWmNZw7utx
137+pnms6E58M4A+srpof6z5ww3NfLleXkoty5A1cMbsbCdU+aiueKwrmiX4O6+5
hrKMQvXLgito7r4yITKh8V2naJG3mQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPLR
culQxRnfQz1d/x4lO0u3F1QpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNUE1QTJCMkYyQzIxMUVGOUFCOURCOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+LMA0GCSqGSIb3DQEB
CwUAA4IBAQAcFzbep74tfs2cLee/oneVAzzTO0MgpbRoNsCoDTwIQ9C3BlMRWVSN
N5hicREKTsTS2mkH9wuvTsXBQXhnY/jlF/Rx6rpYjJDTVm+EzHCHKRQQ7YQKzzMH
erKxHKmnlbYhBH1merKXjlc/HuqvK3Ha/R9IxHGOmJqXWWUE5SV6fOBTDWUGQL0K
cpv4iq3l2bISYtpCa0cXWAwhnam/g+oHaDwwJM/PRzHBqszz1m+jf8DLg+hzvhLr
JtGEguqeTo+3gRxkcbdIKRdvRw9OPeQLT8f7ZWf4AXxMxBYi82ZriAPj6FljFY0s
M1pXv1/2TUhRkDdGpomrg8SJHT2DliE1
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:47 2025 by rpki-client