This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3E6537AFA6111EFAEE1409B762E951A.roa
File:                     F3E6537AFA6111EFAEE1409B762E951A.roa (raw, json)
Hash identifier:          kDZ9UrFLAATm1rUeLL9ap6I2bzeh2rQVreylbZYFXTU=
Subject key identifier:   12:92:8A:08:D1:73:04:6C:BF:11:B2:2B:28:4D:56:F3:38:58:8F:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017290
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3E6537AFA6111EFAEE1409B762E951A.roa
Signing time:             Thu 06 Mar 2025 08:06:48 +0000
ROA not before:           Thu 06 Mar 2025 08:06:44 +0000
ROA not after:            Wed 26 Mar 2025 08:06:44 +0000
asID:                     18013
IP address blocks:        154.204.183.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94864 (0x17290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  6 08:06:44 2025 GMT
            Not After : Mar 26 08:06:44 2025 GMT
        Subject: CN=67c95798-eeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:14:17:a5:8f:70:62:f8:07:06:3e:51:33:
                    3d:5d:6e:2c:0d:6f:54:ae:b0:d4:15:2f:e9:2c:b2:
                    94:94:c6:11:23:fa:72:f4:d5:6a:f0:ad:e8:cc:3a:
                    87:f3:29:22:95:63:62:b6:ab:b4:22:d1:cf:14:57:
                    c7:b0:78:93:6a:0f:6c:f3:21:f8:d5:a8:ad:39:d0:
                    c0:79:ff:c2:69:b9:7a:9a:a0:e6:96:81:18:65:dc:
                    63:f0:d9:1b:70:27:20:b1:23:da:d3:08:8f:e5:8b:
                    4f:3a:a1:da:94:86:4c:1d:af:4b:6a:82:11:d6:5b:
                    31:27:b2:b0:a3:01:79:b0:21:a2:a5:c6:25:e9:23:
                    1c:a6:25:6a:fe:16:e3:a4:32:ff:48:53:86:d6:51:
                    ea:36:dc:fb:e9:63:a0:40:ed:7e:15:57:e9:b1:09:
                    ce:d8:09:c6:77:92:cb:0c:f5:1d:46:e0:2f:ea:a7:
                    7f:76:f4:63:14:7a:52:0a:b2:c0:7a:f1:4d:fc:40:
                    a1:e0:29:bd:08:d0:ce:3b:10:09:c4:ba:2a:32:51:
                    81:d5:9c:5f:4e:67:28:90:17:ad:52:0c:d5:fd:7e:
                    96:d8:04:02:72:e6:08:61:fe:9c:83:9f:da:65:77:
                    9d:da:c3:48:da:1b:d1:70:81:47:50:88:e9:ca:69:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:92:8A:08:D1:73:04:6C:BF:11:B2:2B:28:4D:56:F3:38:58:8F:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3E6537AFA6111EFAEE1409B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:4d:c1:5e:d5:4e:d6:07:af:1d:7d:50:e5:42:cf:b4:b2:bf:
         7b:84:cd:43:6a:b6:29:82:04:bf:ee:b3:c9:05:f7:f4:6b:71:
         94:37:8a:61:a7:3d:ab:a7:bc:54:45:06:7e:8b:2b:b0:f7:e8:
         72:67:24:d8:8c:98:0c:28:f0:87:13:bb:9c:64:86:cf:e2:34:
         76:7d:41:03:04:5c:d6:5e:04:1b:55:1f:84:43:97:b8:ef:85:
         09:3d:59:e3:fa:6b:a0:3b:83:1c:8e:5f:0c:f3:72:ed:08:e3:
         c0:10:2a:33:f1:7d:b7:08:9a:37:85:26:ab:a4:af:5a:bc:30:
         a6:c5:28:9c:5e:6f:27:6e:a8:9d:bd:71:c3:fa:92:9a:bc:17:
         0b:b0:df:03:51:7a:11:63:a8:07:aa:c3:d6:f4:cf:0d:b7:a2:
         52:0f:65:8a:4c:c3:d8:2c:36:a2:fc:4d:ae:ae:d7:ac:c5:b3:
         13:17:24:a8:9b:bb:b4:be:be:53:59:1d:6a:eb:83:f7:01:2b:
         29:ed:8f:c3:c0:b1:5f:fe:03:a8:4a:d2:3b:82:f6:11:6a:ee:
         12:be:13:cf:86:11:f1:a4:b6:06:5b:5b:3e:05:a6:89:2f:ff:
         07:1a:da:e9:92:fc:b0:c6:91:83:9b:e8:2d:d2:a8:8a:55:ca:
         1c:08:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----