Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC991F88CDC11EEA86B61624AD9E6FC.roa
File: EDC991F88CDC11EEA86B61624AD9E6FC.roa (raw, json)
Hash identifier: PhzFWYVpx83caW7AhNa/Cqm4qiEsYKxmZe/II+HnD/s=
Subject key identifier: 5C:EE:5E:98:72:6A:39:C9:C2:DA:87:29:A6:4E:D5:DF:4D:18:36:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 54E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC991F88CDC11EEA86B61624AD9E6FC.roa
Signing time: Mon 27 Nov 2023 04:25:00 +0000
ROA not before: Mon 27 Nov 2023 04:24:57 +0000
ROA not after: Tue 26 Dec 2023 04:24:57 +0000
asID: 62240
IP address blocks: 154.196.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21735 (0x54e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 04:24:57 2023 GMT
Not After : Dec 26 04:24:57 2023 GMT
Subject: CN=65641a1c-bd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:45:ef:b2:dd:7d:5b:b7:b3:9e:08:b7:b4:
4d:b6:21:09:a6:5b:a2:b3:73:8d:0d:fd:7a:bd:c5:
9a:f7:2d:14:c7:94:44:57:25:c6:02:2f:c1:78:2b:
1b:a9:5c:7c:d0:fd:f3:f5:2b:31:77:f2:ef:5c:27:
be:06:1e:ae:10:b3:d4:9f:f2:47:06:22:90:32:84:
3f:19:90:c5:9c:22:0f:39:9b:6a:14:d9:de:04:ec:
42:e2:62:0e:bb:c9:a2:6e:43:24:44:a3:b3:69:5e:
a3:31:e1:eb:67:b7:56:d6:d1:72:3e:17:81:7e:4f:
45:65:4e:eb:fb:87:dc:22:60:2b:96:8b:96:53:9a:
e4:63:d7:cd:d9:df:54:97:89:06:cc:67:7c:ad:9f:
99:a3:c6:6b:95:89:5f:ef:99:c7:e7:fc:9f:f1:05:
c6:2d:40:e1:71:9c:1f:4f:8e:68:66:ae:cb:69:8d:
38:54:46:1d:4a:06:8e:c8:5a:01:4e:a6:8e:db:a1:
3d:7e:cc:89:8e:94:f0:7b:0f:64:45:99:c4:4c:b4:
77:49:0a:fa:cd:31:da:20:aa:3c:96:ae:cc:c6:46:
25:c4:4a:d1:bb:51:9f:5a:4c:7b:4c:04:45:e7:68:
2f:00:45:39:d7:fa:c0:16:82:aa:cc:ea:5d:02:e0:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:5E:98:72:6A:39:C9:C2:DA:87:29:A6:4E:D5:DF:4D:18:36:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDC991F88CDC11EEA86B61624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2f:60:bd:77:e6:9f:1b:56:e8:20:d0:aa:09:8b:1a:3f:17:
25:24:e8:6e:45:c3:80:d1:db:35:15:74:db:27:22:3a:b2:d5:
37:65:22:c3:a8:e5:14:fb:28:92:5f:24:8b:16:78:79:7b:88:
b1:9c:b0:0c:16:55:25:46:9b:4f:b5:a6:00:a9:56:8d:45:be:
5f:c3:94:15:ea:e8:96:29:48:91:21:0e:75:11:51:4f:40:0f:
35:bf:21:a8:9d:67:cf:46:23:db:89:47:38:8c:14:bf:1f:5e:
99:ba:41:d1:05:7d:d2:11:a7:c1:93:db:60:48:19:ee:bc:dc:
26:b3:89:7e:61:c5:fa:48:ac:b8:a6:da:51:00:f4:c8:29:26:
b6:c6:50:5d:38:e1:04:a0:ae:4c:85:ab:52:0b:6b:5f:be:f3:
f2:fb:41:a6:de:de:58:74:56:61:35:37:31:77:9e:b4:f6:b7:
a2:16:b0:68:01:e4:12:43:ad:84:cf:26:a0:61:5c:8f:ae:82:
8d:27:5a:61:9b:78:e0:fc:59:0f:4b:45:56:87:8b:63:f4:9d:
4c:c0:1d:41:2a:65:5a:ac:08:90:0d:6a:58:ef:9c:cd:ec:f6:
d3:aa:2f:e0:53:57:5e:62:fa:3f:ce:fd:11:aa:6e:77:53:a2:
fe:a8:1a:bd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVOcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNDI0NTdaFw0yMzEyMjYwNDI0NTdaMBgxFjAU
BgNVBAMTDTY1NjQxYTFjLWJkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLOUXvst19W7ezngi3tE22IQmmW6Kzc40N/Xq9xZr3LRTHlERXJcYCL8F4
KxupXHzQ/fP1KzF38u9cJ74GHq4Qs9Sf8kcGIpAyhD8ZkMWcIg85m2oU2d4E7ELi
Yg67yaJuQyREo7NpXqMx4etnt1bW0XI+F4F+T0VlTuv7h9wiYCuWi5ZTmuRj183Z
31SXiQbMZ3ytn5mjxmuViV/vmcfn/J/xBcYtQOFxnB9PjmhmrstpjThURh1KBo7I
WgFOpo7boT1+zImOlPB7D2RFmcRMtHdJCvrNMdogqjyWrszGRiXEStG7UZ9aTHtM
BEXnaC8ARTnX+sAWgqrM6l0C4OYbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXO5e
mHJqOcnC2ocppk7V300YNpUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0VEQzk5MUY4OENEQzExRUVBODZCNjE2MjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxFswDQYJKoZIhvcNAQEL
BQADggEBAKMvYL135p8bVugg0KoJixo/FyUk6G5Fw4DR2zUVdNsnIjqy1TdlIsOo
5RT7KJJfJIsWeHl7iLGcsAwWVSVGm0+1pgCpVo1Fvl/DlBXq6JYpSJEhDnURUU9A
DzW/IaidZ89GI9uJRziMFL8fXpm6QdEFfdIRp8GT22BIGe683CaziX5hxfpIrLim
2lEA9MgpJrbGUF044QSgrkyFq1ILa1++8/L7Qabe3lh0VmE1NzF3nrT2t6IWsGgB
5BJDrYTPJqBhXI+ugo0nWmGbeOD8WQ9LRVaHi2P0nUzAHUEqZVqsCJANaljvnM3s
9tOqL+BTV15i+j/O/RGqbndTov6oGr0=
-----END CERTIFICATE-----
Generated at Fri May 9 10:47:17 2025 by rpki-client