Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8440E26F67A11EFB443C6A2762E951A.roa
File: E8440E26F67A11EFB443C6A2762E951A.roa (raw, json)
Hash identifier: 7FGYuOTf93Gf0PfBOvkzxFUu+ceWKVAZT95l24QpQrA=
Subject key identifier: D4:46:BF:14:C5:76:E4:C0:1A:50:03:B5:29:DA:76:80:12:FA:B9:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8440E26F67A11EFB443C6A2762E951A.roa
Signing time: Sat 01 Mar 2025 08:55:22 +0000
ROA not before: Sat 01 Mar 2025 08:55:18 +0000
ROA not after: Mon 31 Mar 2025 08:55:18 +0000
asID: 49505
IP address blocks: 154.211.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93557 (0x16d75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 08:55:18 2025 GMT
Not After : Mar 31 08:55:18 2025 GMT
Subject: CN=67c2cb79-d77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:fb:4b:e1:0c:75:50:34:ee:bb:5e:48:6e:
cf:63:76:fc:41:a0:37:4b:2a:35:aa:1a:ec:16:fb:
c8:37:85:4d:1a:aa:75:ac:95:a2:a3:59:95:39:30:
39:7d:15:ca:56:9e:8e:a5:7c:2d:3b:05:6b:1b:31:
90:84:17:8a:d5:88:43:86:43:47:2f:50:36:ad:db:
e5:68:1f:93:10:50:cb:6b:48:f6:90:0b:f1:8b:5b:
42:7c:30:be:27:ab:16:80:14:86:9f:9a:87:a3:fd:
66:12:2c:4c:c5:25:b4:15:43:0c:a9:5e:8e:3c:0f:
1a:fc:60:63:f0:31:0b:bb:28:21:0a:1c:81:2f:6d:
f4:1d:1b:75:ad:55:c5:6b:e7:24:43:88:aa:03:64:
55:c2:10:4c:22:bc:31:f9:8d:7d:d8:22:09:99:7e:
5c:1b:ba:66:b7:92:e7:19:7f:d4:75:0f:94:ea:d5:
84:46:b2:12:ce:cb:0c:96:d7:f4:5c:be:be:59:bd:
22:3c:eb:08:65:2c:38:9e:61:01:4b:08:7a:a9:cd:
45:86:b3:6f:6c:0a:5c:92:94:fa:26:99:eb:80:cf:
1c:c5:46:e6:65:38:c1:86:1b:a3:4d:cb:12:e1:57:
57:bf:2e:8c:50:d6:70:e0:ed:d3:bc:a9:18:88:4a:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:BF:14:C5:76:E4:C0:1A:50:03:B5:29:DA:76:80:12:FA:B9:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8440E26F67A11EFB443C6A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:03:d5:00:4e:3d:61:c2:50:2e:a5:fd:ee:68:86:e8:fe:f0:
c5:7d:19:34:cc:93:96:41:6e:3e:3a:0f:32:12:0d:b8:4e:79:
b4:31:9a:83:37:bb:f9:90:4e:d1:f9:a6:dc:d2:55:40:51:3a:
99:bd:75:2d:c4:ef:48:31:b8:3b:3e:7a:53:33:72:8b:46:19:
64:63:d4:9d:e6:ca:1d:69:fc:66:d9:5a:4b:00:3b:9f:1c:7b:
42:dd:28:e8:ab:d9:89:17:37:22:c3:9e:35:2b:bd:28:91:57:
61:4a:41:1d:91:0f:7a:4e:9b:5c:b3:d3:a6:0e:2b:2e:e8:a8:
02:b6:0a:c8:13:69:cf:23:8d:6b:99:4c:e5:33:8e:a6:ad:63:
94:d7:64:9c:1f:84:44:e2:7e:cc:02:a8:cc:d5:09:00:8f:74:
61:6f:f4:40:16:7e:55:3f:d8:3f:78:72:6c:f0:3e:44:65:df:
60:92:6b:f7:e2:24:7d:e4:99:b9:9a:a0:02:c5:42:a9:56:eb:
90:4b:00:fd:d1:04:7e:7b:db:fd:06:7c:73:83:2a:d8:b0:94:
d9:55:72:69:c2:ca:72:8d:e9:43:0f:65:a1:74:4a:d2:6d:12:
f9:ed:a9:50:ad:a1:e7:3b:b4:3e:2b:35:b3:4d:3a:17:a0:35:
6f:15:cc:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW11MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDg1NTE4WhcNMjUwMzMxMDg1NTE4WjAYMRYw
FAYDVQQDEw02N2MyY2I3OS1kNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAod37S+EMdVA07rteSG7PY3b8QaA3Syo1qhrsFvvIN4VNGqp1rJWio1mV
OTA5fRXKVp6OpXwtOwVrGzGQhBeK1YhDhkNHL1A2rdvlaB+TEFDLa0j2kAvxi1tC
fDC+J6sWgBSGn5qHo/1mEixMxSW0FUMMqV6OPA8a/GBj8DELuyghChyBL230HRt1
rVXFa+ckQ4iqA2RVwhBMIrwx+Y192CIJmX5cG7pmt5LnGX/UdQ+U6tWERrISzssM
ltf0XL6+Wb0iPOsIZSw4nmEBSwh6qc1FhrNvbApckpT6JpnrgM8cxUbmZTjBhhuj
TcsS4VdXvy6MUNZw4O3TvKkYiEpRrwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNRG
vxTFduTAGlADtSnadoAS+rmxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODQ0MEUyNkY2N0ExMUVGQjQ0M0M2QTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMKMA0GCSqGSIb3DQEB
CwUAA4IBAQA+A9UATj1hwlAupf3uaIbo/vDFfRk0zJOWQW4+Og8yEg24Tnm0MZqD
N7v5kE7R+abc0lVAUTqZvXUtxO9IMbg7PnpTM3KLRhlkY9Sd5sodafxm2VpLADuf
HHtC3Sjoq9mJFzciw541K70okVdhSkEdkQ96Tptcs9OmDisu6KgCtgrIE2nPI41r
mUzlM46mrWOU12ScH4RE4n7MAqjM1QkAj3Rhb/RAFn5VP9g/eHJs8D5EZd9gkmv3
4iR95Jm5mqACxUKpVuuQSwD90QR+e9v9BnxzgyrYsJTZVXJpwspyjelDD2WhdErS
bRL57alQraHnO7Q+KzWzTToXoDVvFcwe
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:41:57 2025 by rpki-client