Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60F0C64F86D11EF887F735A762E951A.roa
File: F60F0C64F86D11EF887F735A762E951A.roa (raw, json)
Hash identifier: IPcZ8MnYDI8uOcrqo6dwb7vm5QR2chl7bJABR3kZ/mY=
Subject key identifier: 5B:59:E6:47:4E:60:C5:85:92:C3:E8:2D:28:EE:E0:E5:9B:54:DC:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017135
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60F0C64F86D11EF887F735A762E951A.roa
Signing time: Mon 03 Mar 2025 20:27:44 +0000
ROA not before: Mon 03 Mar 2025 20:27:39 +0000
ROA not after: Thu 27 Mar 2025 20:27:39 +0000
asID: 44559
IP address blocks: 154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94517 (0x17135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 20:27:39 2025 GMT
Not After : Mar 27 20:27:39 2025 GMT
Subject: CN=67c610bf-7f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:0b:44:6e:b8:c5:d5:b5:d9:7c:bb:75:cc:
e3:a1:48:dc:ff:ce:0b:94:e8:e8:d1:8e:3c:cd:15:
60:cb:b2:5e:0d:f6:19:e3:c7:34:a8:f1:69:6c:c0:
97:d1:4c:ac:6a:c0:00:a3:6a:67:71:cc:37:5a:23:
e0:26:e7:4f:3c:54:4e:34:d5:e3:51:86:1b:5b:1d:
c9:d8:f6:82:c5:43:a7:01:9e:61:dd:8a:41:d8:a4:
a1:13:8c:d1:be:64:53:06:5f:7b:04:d0:94:aa:5b:
3f:6f:f3:78:76:74:df:4a:c4:ae:8e:b2:48:d7:67:
30:a3:25:75:32:82:bb:5d:34:25:40:c8:cd:e2:fa:
8a:01:3f:8e:f5:68:11:08:fe:b8:d1:34:4e:48:87:
ac:87:92:90:dc:71:f9:4e:db:f4:6d:9f:cf:83:1b:
8e:fe:bb:38:63:29:c0:af:ee:6b:c8:54:8c:93:a7:
72:90:3f:b5:63:d8:a5:b9:bc:4c:6f:ac:d3:91:b2:
d8:c8:c4:29:32:61:3c:69:a0:7f:e1:ab:7f:7c:2d:
e5:88:85:8e:b5:8c:5d:2a:31:17:fe:66:4e:1c:bf:
4a:af:37:72:02:4c:5c:5e:bf:f6:5b:4f:53:f8:74:
0b:10:e5:b9:63:97:9f:fa:07:80:47:d3:16:cb:2e:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:E6:47:4E:60:C5:85:92:C3:E8:2D:28:EE:E0:E5:9B:54:DC:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60F0C64F86D11EF887F735A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.227.0-154.205.236.255
Signature Algorithm: sha256WithRSAEncryption
b8:e9:5c:9f:08:22:bc:b8:2a:6b:de:cf:9f:32:f1:aa:4c:54:
32:69:08:98:dc:ea:a2:99:38:38:39:ef:bc:a6:b3:4d:b0:79:
38:cc:05:05:db:62:e0:84:00:3a:74:77:df:4c:02:5c:dd:a2:
4a:ac:03:c2:c8:6f:dc:c9:29:43:00:14:53:dd:c6:e4:e8:71:
eb:36:c0:c9:a7:72:a0:3e:2d:4e:67:92:d5:49:99:af:68:37:
0d:0b:21:82:d8:8d:a3:81:fe:69:17:5e:b8:5f:ab:53:92:a0:
df:af:56:53:34:42:6c:df:f0:09:76:fd:18:db:58:2a:bf:fa:
a5:26:60:f2:99:78:41:e0:ea:45:66:91:26:d5:4e:cb:e5:ba:
9b:a0:6e:9d:90:34:d5:dc:d6:53:70:e9:6c:7e:ff:e9:d0:2c:
36:b2:ac:dc:63:3e:66:8f:8f:27:46:60:c7:88:11:79:af:7d:
14:59:e4:b3:82:cc:d2:b4:2c:24:5a:57:95:ff:51:ee:26:1c:
d6:bf:da:2e:1c:e0:ad:31:3d:28:8c:82:11:5c:0f:06:ce:41:
cd:4b:9f:57:0a:54:5e:e1:ba:c2:07:88:9a:c3:ad:ca:52:3a:
f9:a3:e5:da:92:97:ed:c3:85:d5:c7:80:00:3f:64:84:a5:08:
7e:25:42:9c
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXE1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMjAyNzM5WhcNMjUwMzI3MjAyNzM5WjAYMRYw
FAYDVQQDEw02N2M2MTBiZi03ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwMULRG64xdW12Xy7dczjoUjc/84LlOjo0Y48zRVgy7JeDfYZ48c0qPFp
bMCX0UysasAAo2pnccw3WiPgJudPPFRONNXjUYYbWx3J2PaCxUOnAZ5h3YpB2KSh
E4zRvmRTBl97BNCUqls/b/N4dnTfSsSujrJI12cwoyV1MoK7XTQlQMjN4vqKAT+O
9WgRCP640TROSIesh5KQ3HH5Ttv0bZ/PgxuO/rs4YynAr+5ryFSMk6dykD+1Y9il
ubxMb6zTkbLYyMQpMmE8aaB/4at/fC3liIWOtYxdKjEX/mZOHL9KrzdyAkxcXr/2
W09T+HQLEOW5Y5ef+geAR9MWyy59iQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFtZ
5kdOYMWFksPoLSju4OWbVNzMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNjBGMEM2NEY4NkQxMUVGODg3RjczNUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACazeMDBACazewwDQYJ
KoZIhvcNAQELBQADggEBALjpXJ8IIry4Kmvez58y8apMVDJpCJjc6qKZODg577ym
s02weTjMBQXbYuCEADp0d99MAlzdokqsA8LIb9zJKUMAFFPdxuToces2wMmncqA+
LU5nktVJma9oNw0LIYLYjaOB/mkXXrhfq1OSoN+vVlM0Qmzf8Al2/RjbWCq/+qUm
YPKZeEHg6kVmkSbVTsvlupugbp2QNNXc1lNw6Wx+/+nQLDayrNxjPmaPjydGYMeI
EXmvfRRZ5LOCzNK0LCRaV5X/Ue4mHNa/2i4c4K0xPSiMghFcDwbOQc1Ln1cKVF7h
usIHiJrDrcpSOvmj5dqSl+3DhdXHgAA/ZISlCH4lQpw=
-----END CERTIFICATE-----
Generated at Fri May 9 11:45:20 2025 by rpki-client