This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC364CD48CDA11EEAEACF75B4AD9E6FC.roa
File:                     EC364CD48CDA11EEAEACF75B4AD9E6FC.roa (raw, json)
Hash identifier:          lJtDTnLbi/c6BqrDYjBRmm34E5nz5bHZRBk8+u9sshQ=
Subject key identifier:   ED:C8:4F:2B:D8:22:75:25:8A:C6:BE:15:28:15:27:A9:CD:1B:54:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       54B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC364CD48CDA11EEAEACF75B4AD9E6FC.roa
Signing time:             Mon 27 Nov 2023 04:10:39 +0000
ROA not before:           Mon 27 Nov 2023 04:10:36 +0000
ROA not after:            Tue 26 Dec 2023 04:10:36 +0000
asID:                     62240
IP address blocks:        154.195.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21684 (0x54b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 04:10:36 2023 GMT
            Not After : Dec 26 04:10:36 2023 GMT
        Subject: CN=656416bf-8323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:4e:7a:33:18:87:aa:5f:a6:f0:ad:5b:da:
                    fe:f1:e3:f9:b9:e9:8b:32:4d:9c:0e:2b:c5:ef:fc:
                    f3:3b:90:6b:fe:3f:83:5b:f5:e5:1c:b0:50:c1:48:
                    43:67:fc:45:5c:b7:b8:c2:70:04:7f:e0:5e:c1:05:
                    fe:c6:9f:1e:0b:82:c3:44:46:a1:a9:09:b0:7d:11:
                    49:35:0e:88:7d:8b:a7:fe:6e:e2:4c:28:6e:f8:ce:
                    3e:d4:3a:f6:c1:c2:8b:13:e0:dd:fa:b1:a3:b8:bb:
                    c9:9a:40:48:8f:6a:f9:2c:b0:9c:16:0f:f5:84:d7:
                    63:63:49:e1:7f:fe:8e:c3:47:29:be:ca:d1:20:3b:
                    a5:17:04:35:4e:02:d1:97:53:b3:13:18:8c:e4:54:
                    f1:c0:ec:40:34:d7:ba:5e:83:44:43:54:2f:70:e1:
                    2d:19:c1:64:d0:01:d1:8f:80:a4:29:c6:62:d0:c1:
                    6c:20:67:12:d1:3c:1e:3f:03:ae:3d:50:24:7c:89:
                    6e:ab:13:9d:56:89:bd:2a:f3:ca:0c:82:08:a4:ab:
                    60:2c:7a:c9:03:07:40:8c:e0:21:f3:a7:fa:59:33:
                    b0:f2:67:c1:5c:3c:4e:aa:3f:7d:c8:bc:df:2e:d1:
                    23:b2:6c:f1:7e:5d:09:d6:2d:41:f3:c0:0c:9f:e6:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:4F:2B:D8:22:75:25:8A:C6:BE:15:28:15:27:A9:CD:1B:54:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC364CD48CDA11EEAEACF75B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:71:44:b7:5c:3f:8d:f5:7c:93:b6:a1:3b:37:f6:6f:cf:55:
         e9:98:b8:6c:5d:59:83:93:a6:15:2d:4e:96:b3:95:35:16:ec:
         99:3c:ec:87:fd:b3:dc:c9:2c:2c:e8:cd:47:02:42:41:3d:d5:
         71:28:3a:45:db:73:bb:7b:40:af:d6:b6:a9:15:92:8b:f8:4f:
         ab:94:43:51:3a:0b:6c:d1:0d:c3:fd:b4:22:50:ad:4b:83:ee:
         6b:a6:3d:5b:b4:24:db:d5:69:1a:8b:87:c7:2b:8e:18:6b:26:
         68:e9:a0:e3:48:03:0e:8e:14:0f:0e:2a:23:dd:6e:21:0c:e7:
         cd:a2:0c:95:29:e1:c2:7e:3b:c9:31:c7:0b:e0:b5:b4:af:c6:
         96:2c:4e:cd:bb:d9:aa:55:ca:da:21:ce:29:4b:71:b1:f7:07:
         e4:40:bc:7f:21:86:1c:bd:ea:6e:af:b7:99:45:60:ef:8f:1f:
         9e:35:9e:be:69:8b:61:87:d2:31:41:11:07:17:a9:c1:a5:66:
         2c:ab:6e:ec:08:2e:83:a2:52:d1:5d:23:14:71:e4:ea:79:44:
         da:f8:fa:9c:cd:98:f9:11:e6:b4:7e:18:e2:29:5c:a6:fb:2a:
         49:ca:b0:60:60:f0:33:34:0f:a4:8f:22:0b:db:bc:8f:ec:14:
         7c:c3:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----