Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDE4EB3C8A9411EE9D0EBF1B4AD9E6FC.roa
File: EDE4EB3C8A9411EE9D0EBF1B4AD9E6FC.roa (raw, json)
Hash identifier: Zu8epwqhVi+BDA98UOCXW3jhKy5k2Si4KSI04RwOTe8=
Subject key identifier: C6:2C:FB:47:9D:51:64:D0:7A:41:B2:C6:3C:0A:6B:35:0C:73:57:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDE4EB3C8A9411EE9D0EBF1B4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:44:35 +0000
ROA not before: Fri 24 Nov 2023 06:44:31 +0000
ROA not after: Tue 26 Dec 2023 06:44:31 +0000
asID: 62240
IP address blocks: 154.195.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21479 (0x53e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:44:31 2023 GMT
Not After : Dec 26 06:44:31 2023 GMT
Subject: CN=65604653-aa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a6:68:3c:91:2b:7c:66:61:10:46:09:3f:3c:
e2:dc:f2:50:cb:de:42:ec:0d:4b:bf:6e:e1:9c:9a:
d7:7c:f6:fe:ec:5f:86:75:90:0f:1f:72:b9:8e:a1:
58:0a:40:55:b8:7d:eb:01:0c:cb:86:2e:1c:a1:6a:
4a:9b:63:9b:23:3e:fd:2e:ec:97:32:e2:29:4e:92:
ad:c9:29:3f:68:ae:79:68:75:d8:ef:8a:32:12:ba:
c6:0b:0e:a7:5b:44:d1:7e:4f:a1:8c:54:8f:aa:70:
0e:67:43:d9:88:89:7a:9c:7d:97:8f:65:7d:86:7b:
56:55:7f:1f:db:3f:15:73:ab:e2:93:cd:2a:7b:b4:
4b:f3:6e:63:bf:9e:ac:df:04:ee:cc:d5:47:f1:a7:
de:77:0e:5c:e0:07:b9:be:b0:bf:83:df:9f:4c:82:
da:eb:5d:a4:98:32:41:69:b9:ca:22:68:51:4d:91:
24:13:24:ab:97:10:b4:3b:60:f9:5f:2c:6f:0e:82:
30:83:b7:e8:61:66:f1:1b:55:9d:52:5a:a5:26:df:
ee:7a:08:90:dd:7b:01:2c:47:ab:c7:16:85:c5:65:
cd:ba:fa:dd:6c:21:18:47:df:37:c6:70:c7:6e:f0:
44:9a:bb:51:39:2e:54:cd:06:6e:48:f3:13:98:c8:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:FB:47:9D:51:64:D0:7A:41:B2:C6:3C:0A:6B:35:0C:73:57:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDE4EB3C8A9411EE9D0EBF1B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:17:86:e1:41:3d:5f:a2:3a:97:f6:5b:36:de:1b:68:43:fc:
e6:0d:0a:30:1f:87:37:4f:50:0f:bf:8c:a1:ac:39:6e:4d:40:
b0:0b:1f:4d:40:a9:dd:ca:f5:a3:e5:d3:48:90:e7:1d:db:0c:
67:44:c9:93:df:a4:f8:f5:4d:b3:50:d9:61:06:2d:a6:d7:6b:
3d:c9:b9:de:f9:1c:3c:52:93:57:26:3a:3f:0d:cc:7d:f8:4c:
46:20:41:4c:e0:b3:e0:e2:5f:37:3e:ab:46:f3:5d:54:1f:65:
de:f2:98:b4:74:00:f5:99:8d:49:07:38:fe:be:29:7f:e1:f3:
c4:d1:17:20:ec:a8:72:73:7a:05:f0:e4:3c:b4:92:0a:1e:07:
95:6f:c3:87:86:61:ea:55:6e:53:1a:71:07:ae:26:a7:f0:12:
d1:51:10:bc:e5:c0:88:50:4e:b4:0d:0e:45:d9:28:40:48:05:
eb:d4:a5:2b:a8:87:21:14:ea:d4:11:e2:e2:b1:d4:86:d3:c9:
a8:3e:de:ae:13:2e:2c:2e:40:3a:02:9b:93:cd:f5:c8:41:9c:
5a:a7:23:7d:d0:7e:e5:a7:75:f2:e3:bf:98:4a:6e:6d:5e:28:
f3:f9:0c:12:29:34:a5:e2:24:40:e5:26:9c:c0:e4:40:33:79:
be:52:ec:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU+cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNjQ0MzFaFw0yMzEyMjYwNjQ0MzFaMBgxFjAU
BgNVBAMTDTY1NjA0NjUzLWFhODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1pmg8kSt8ZmEQRgk/POLc8lDL3kLsDUu/buGcmtd89v7sX4Z1kA8fcrmO
oVgKQFW4fesBDMuGLhyhakqbY5sjPv0u7Jcy4ilOkq3JKT9ornloddjvijISusYL
DqdbRNF+T6GMVI+qcA5nQ9mIiXqcfZePZX2Ge1ZVfx/bPxVzq+KTzSp7tEvzbmO/
nqzfBO7M1Ufxp953DlzgB7m+sL+D359MgtrrXaSYMkFpucoiaFFNkSQTJKuXELQ7
YPlfLG8OgjCDt+hhZvEbVZ1SWqUm3+56CJDdewEsR6vHFoXFZc26+t1sIRhH3zfG
cMdu8ESau1E5LlTNBm5I8xOYyN+TAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxiz7
R51RZNB6QbLGPAprNQxzVwQwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0VERTRFQjNDOEE5NDExRUU5RDBFQkYxQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw44wDQYJKoZIhvcNAQEL
BQADggEBALcXhuFBPV+iOpf2WzbeG2hD/OYNCjAfhzdPUA+/jKGsOW5NQLALH01A
qd3K9aPl00iQ5x3bDGdEyZPfpPj1TbNQ2WEGLabXaz3Jud75HDxSk1cmOj8NzH34
TEYgQUzgs+DiXzc+q0bzXVQfZd7ymLR0APWZjUkHOP6+KX/h88TRFyDsqHJzegXw
5Dy0kgoeB5Vvw4eGYepVblMacQeuJqfwEtFRELzlwIhQTrQNDkXZKEBIBevUpSuo
hyEU6tQR4uKx1IbTyag+3q4TLiwuQDoCm5PN9chBnFqnI33QfuWndfLjv5hKbm1e
KPP5DBIpNKXiJEDlJpzA5EAzeb5S7Pc=
-----END CERTIFICATE-----
Generated at Fri May 9 12:52:32 2025 by rpki-client