Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F992F4C4F68111EF92C13154762E951A.roa
File: F992F4C4F68111EF92C13154762E951A.roa (raw, json)
Hash identifier: 5nuLWDmxQMVqD2XY6Tc7TjeHtrbY3+4sxaTG4Hjnvdo=
Subject key identifier: 6E:3E:5B:17:8B:0D:25:B4:F6:B3:68:57:33:DE:BE:12:51:39:1F:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F992F4C4F68111EF92C13154762E951A.roa
Signing time: Sat 01 Mar 2025 09:45:57 +0000
ROA not before: Sat 01 Mar 2025 09:45:53 +0000
ROA not after: Fri 04 Apr 2025 09:45:53 +0000
asID: 200373
IP address blocks: 154.214.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93607 (0x16da7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 09:45:53 2025 GMT
Not After : Apr 4 09:45:53 2025 GMT
Subject: CN=67c2d755-6abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:81:6b:64:4e:22:a2:29:ae:3a:24:0e:98:
c6:50:ee:39:76:4e:db:c9:dd:ea:27:ba:3b:50:a1:
75:c6:29:a2:f7:d2:79:e8:f6:fc:2e:47:0d:83:4d:
8f:4e:83:1a:82:6b:4a:5b:b3:dc:2c:bc:ff:ef:d4:
d3:c3:0c:96:59:c8:52:75:17:28:7d:0c:19:62:27:
f8:4f:ae:2f:c8:d2:94:ca:f8:b8:e4:ff:7b:8a:ea:
9a:58:66:9b:85:ca:96:3d:10:88:33:36:0e:00:9b:
67:eb:fb:c5:ad:fc:ee:42:da:ac:48:f1:50:07:28:
49:8c:ff:74:f5:54:0e:6a:a9:4e:38:1d:da:1e:ce:
39:f9:60:3c:6e:8c:1a:10:2d:ba:f7:0c:d8:72:c2:
80:74:a4:31:5c:4f:cd:b7:6b:d2:6b:fd:da:e3:85:
08:4e:03:02:9b:bd:dd:2b:99:54:e9:9a:5d:85:1d:
f0:44:eb:19:d2:d8:a6:6c:6a:b4:d8:79:bb:d8:d2:
80:80:63:e7:30:34:6f:80:37:69:52:20:63:af:67:
f5:57:4c:b9:dd:a5:ca:a4:5a:62:14:1d:4f:d9:8c:
9d:33:7e:68:85:89:f4:37:b2:98:bd:87:87:fb:26:
30:b0:0d:c6:7a:2d:be:ec:d8:f1:ca:3b:55:71:36:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:5B:17:8B:0D:25:B4:F6:B3:68:57:33:DE:BE:12:51:39:1F:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F992F4C4F68111EF92C13154762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:75:8c:69:df:83:f5:c3:ce:a0:6f:96:55:be:33:09:c8:28:
79:e0:c9:16:03:68:b2:1a:a4:2a:9e:14:46:f5:c1:76:31:c2:
ed:f4:1f:78:4e:d0:6e:61:b4:90:58:c9:98:81:8c:95:b9:1d:
77:97:fb:d2:34:68:e8:2c:3a:1d:b5:16:4d:52:4f:e7:34:37:
c6:60:df:e7:81:61:16:88:cd:23:a7:98:0f:90:35:68:2c:c6:
2d:af:b2:4f:31:5a:6c:c6:3f:2b:d3:76:bd:1f:de:36:a8:5c:
00:54:a0:8d:4c:16:56:fa:69:f1:45:0b:eb:4b:37:92:d7:43:
88:35:6b:4b:08:e0:b5:30:cd:8e:1a:60:63:b4:b8:ad:db:26:
75:e8:c3:3e:48:e9:46:b4:80:d0:2f:f5:be:bc:f5:28:3b:31:
3b:0a:33:f1:6d:80:66:51:57:8b:ac:cf:8a:d7:f1:fc:84:84:
ec:74:fe:e8:76:a5:ff:91:49:13:f1:04:fe:1d:8d:bc:37:ee:
5b:d0:55:21:8c:d4:ea:a9:c1:2e:df:84:01:ad:ce:c6:15:e4:
05:63:6c:0a:f3:08:d2:2f:25:b3:6e:8b:8a:b8:b9:01:7b:d2:
c3:61:12:6d:c9:92:d8:fe:eb:e0:b7:ea:57:1e:13:8c:79:2f:
2d:15:c7:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW2nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDk0NTUzWhcNMjUwNDA0MDk0NTUzWjAYMRYw
FAYDVQQDEw02N2MyZDc1NS02YWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp7uBa2ROIqIprjokDpjGUO45dk7byd3qJ7o7UKF1ximi99J56Pb8LkcN
g02PToMagmtKW7PcLLz/79TTwwyWWchSdRcofQwZYif4T64vyNKUyvi45P97iuqa
WGabhcqWPRCIMzYOAJtn6/vFrfzuQtqsSPFQByhJjP909VQOaqlOOB3aHs45+WA8
bowaEC269wzYcsKAdKQxXE/Nt2vSa/3a44UITgMCm73dK5lU6ZpdhR3wROsZ0tim
bGq02Hm72NKAgGPnMDRvgDdpUiBjr2f1V0y53aXKpFpiFB1P2YydM35ohYn0N7KY
vYeH+yYwsA3Gei2+7NjxyjtVcTYxHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG4+
WxeLDSW09rNoVzPevhJROR/4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTkyRjRDNEY2ODExMUVGOTJDMTMxNTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtYBMA0GCSqGSIb3DQEB
CwUAA4IBAQA9dYxp34P1w86gb5ZVvjMJyCh54MkWA2iyGqQqnhRG9cF2McLt9B94
TtBuYbSQWMmYgYyVuR13l/vSNGjoLDodtRZNUk/nNDfGYN/ngWEWiM0jp5gPkDVo
LMYtr7JPMVpsxj8r03a9H942qFwAVKCNTBZW+mnxRQvrSzeS10OINWtLCOC1MM2O
GmBjtLit2yZ16MM+SOlGtIDQL/W+vPUoOzE7CjPxbYBmUVeLrM+K1/H8hITsdP7o
dqX/kUkT8QT+HY28N+5b0FUhjNTqqcEu34QBrc7GFeQFY2wK8wjSLyWzbouKuLkB
e9LDYRJtyZLY/uvgt+pXHhOMeS8tFcdF
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:39 2025 by rpki-client