Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBACD2B2F51E11EF9055254F762E951A.roa
File: EBACD2B2F51E11EF9055254F762E951A.roa (raw, json)
Hash identifier: M7Sk63OU59PtvueyzugL6n8HpxvKJsEIl6CY4Z68BAI=
Subject key identifier: B7:35:54:A6:BC:CC:DA:1D:F0:BD:5E:4F:7C:5B:A9:0C:7B:DE:06:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016901
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBACD2B2F51E11EF9055254F762E951A.roa
Signing time: Thu 27 Feb 2025 15:24:22 +0000
ROA not before: Thu 27 Feb 2025 15:24:19 +0000
ROA not after: Wed 26 Mar 2025 15:24:19 +0000
asID: 62240
IP address blocks: 154.196.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92417 (0x16901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 15:24:19 2025 GMT
Not After : Mar 26 15:24:19 2025 GMT
Subject: CN=67c083a6-eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:b9:a5:22:38:55:76:53:75:f3:56:8b:ec:
be:f5:33:d1:a3:8a:e9:df:ca:c5:84:72:dd:a4:e0:
f6:82:bc:a8:e1:54:bf:bf:4f:d7:00:cf:35:3c:76:
51:ca:03:40:d2:3a:af:da:ce:14:16:c9:08:0b:8b:
45:96:50:d5:7f:39:ae:68:31:df:17:2b:63:d1:d3:
48:57:c8:bd:13:0f:be:3d:06:47:5b:ed:43:d2:0d:
88:b3:2f:7e:f0:9c:d4:61:ba:af:d4:8d:a7:90:af:
28:8d:ee:16:23:b2:87:bc:13:ac:9a:9c:12:b3:83:
3f:ee:53:e4:ec:e0:72:15:58:0e:fd:80:8a:1f:0d:
5e:72:01:e8:20:e1:e3:2e:bb:e9:60:35:3b:85:c7:
ec:84:13:4e:40:9d:68:ca:87:04:bc:10:df:3e:2c:
49:71:0b:ac:eb:1a:cd:13:d6:4a:4b:9e:fe:e2:51:
22:74:97:94:64:e6:65:a4:da:71:19:1c:7e:b5:49:
09:c7:f5:0c:4f:11:bd:8d:cd:1a:74:e5:49:52:61:
23:89:9f:ed:d4:fa:a3:3b:27:74:d4:f4:62:9f:20:
96:ed:49:fc:51:45:3c:3e:07:42:43:2e:f0:80:72:
ae:c9:bc:35:a0:e1:30:da:81:a0:0c:f6:01:d3:db:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:54:A6:BC:CC:DA:1D:F0:BD:5E:4F:7C:5B:A9:0C:7B:DE:06:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBACD2B2F51E11EF9055254F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.66.0/24
Signature Algorithm: sha256WithRSAEncryption
26:31:78:50:65:bf:f5:b8:70:3a:b7:d1:64:56:19:7f:88:df:
12:ec:4b:e9:98:69:c4:c4:02:d2:8c:e3:82:85:c8:00:d4:77:
81:cd:d2:5f:49:13:de:58:d7:e1:51:49:a2:2b:5e:46:44:c4:
62:ee:5b:b3:b6:92:8f:db:27:81:66:8e:0d:24:3b:1c:58:3d:
06:2f:c7:ca:4f:21:72:94:72:95:a1:4a:b3:ec:89:fe:39:e1:
82:4a:ff:1e:a9:d2:07:44:d3:d3:b2:71:ab:4d:a1:2b:99:61:
9a:60:5d:70:28:0d:76:af:41:b6:53:f4:e0:ab:e4:fb:46:cf:
ec:5f:8e:74:2b:96:ab:be:8e:83:12:43:43:42:6d:59:13:36:
c6:74:ae:54:91:d1:78:b3:e8:e4:8e:ce:61:0a:90:a0:f4:73:
b5:5e:4d:78:85:0f:ca:bd:9d:d4:3b:b0:c6:b7:f0:ba:f5:ee:
81:3b:67:da:f4:54:cc:d0:4d:7e:3a:01:ee:53:15:39:65:72:
ef:59:cf:e4:f9:95:68:d8:3a:a6:4e:c2:d8:4e:a0:fd:ea:ff:
6d:30:1f:a0:67:af:f0:5b:4a:97:23:a2:66:6a:d1:46:3c:f5:
ff:53:70:af:51:a3:01:3c:07:7e:28:70:f4:bf:dd:42:b8:cc:
ac:bb:cd:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWkBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTUyNDE5WhcNMjUwMzI2MTUyNDE5WjAYMRYw
FAYDVQQDEw02N2MwODNhNi1lY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2/W5pSI4VXZTdfNWi+y+9TPRo4rp38rFhHLdpOD2gryo4VS/v0/XAM81
PHZRygNA0jqv2s4UFskIC4tFllDVfzmuaDHfFytj0dNIV8i9Ew++PQZHW+1D0g2I
sy9+8JzUYbqv1I2nkK8oje4WI7KHvBOsmpwSs4M/7lPk7OByFVgO/YCKHw1ecgHo
IOHjLrvpYDU7hcfshBNOQJ1oyocEvBDfPixJcQus6xrNE9ZKS57+4lEidJeUZOZl
pNpxGRx+tUkJx/UMTxG9jc0adOVJUmEjiZ/t1PqjOyd01PRinyCW7Un8UUU8PgdC
Qy7wgHKuybw1oOEw2oGgDPYB09sRLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLc1
VKa8zNod8L1eT3xbqQx73gZUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQkFDRDJCMkY1MUUxMUVGOTA1NTI1NEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRCMA0GCSqGSIb3DQEB
CwUAA4IBAQAmMXhQZb/1uHA6t9FkVhl/iN8S7EvpmGnExALSjOOChcgA1HeBzdJf
SRPeWNfhUUmiK15GRMRi7luztpKP2yeBZo4NJDscWD0GL8fKTyFylHKVoUqz7In+
OeGCSv8eqdIHRNPTsnGrTaErmWGaYF1wKA12r0G2U/Tgq+T7Rs/sX450K5arvo6D
EkNDQm1ZEzbGdK5UkdF4s+jkjs5hCpCg9HO1Xk14hQ/KvZ3UO7DGt/C69e6BO2fa
9FTM0E1+OgHuUxU5ZXLvWc/k+ZVo2DqmTsLYTqD96v9tMB+gZ6/wW0qXI6JmatFG
PPX/U3CvUaMBPAd+KHD0v91CuMysu81d
-----END CERTIFICATE-----
Generated at Fri May 9 11:52:33 2025 by rpki-client