Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FACBFCC862C111EEA9366D264AD9E6FC.roa
File: FACBFCC862C111EEA9366D264AD9E6FC.roa (raw, json)
Hash identifier: Nfbr5BbEgpklCg/Pjo650VC9oHkjD2Wxfzgz1i9wcGw=
Subject key identifier: 63:97:A0:4E:59:68:F0:C5:C4:9F:A7:B7:06:D9:AE:9C:5C:75:71:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 447A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FACBFCC862C111EEA9366D264AD9E6FC.roa
Signing time: Wed 04 Oct 2023 14:26:17 +0000
ROA not before: Wed 04 Oct 2023 14:26:14 +0000
ROA not after: Sat 14 Oct 2023 14:26:14 +0000
asID: 9009
IP address blocks: 154.194.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17530 (0x447a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 4 14:26:14 2023 GMT
Not After : Oct 14 14:26:14 2023 GMT
Subject: CN=651d7609-4d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:2a:e5:2f:7d:54:d9:7a:f3:8f:a6:60:62:
b1:e8:1f:d2:3b:12:5e:4c:9f:71:f7:b3:ff:53:db:
6c:01:ea:e9:34:e6:ea:0c:8a:24:6b:f6:e2:a6:94:
4e:ad:37:ad:85:32:86:ce:1e:ea:55:a6:ae:68:af:
ef:68:1f:e3:14:29:0a:11:1f:bd:48:76:92:91:1e:
39:e7:08:ad:c8:38:2e:14:5d:78:c1:9a:ff:69:76:
3b:09:bf:07:8a:df:9b:f0:e9:ee:6f:a9:02:93:2b:
0b:38:00:96:99:91:a0:af:de:f3:97:64:70:07:d0:
94:5b:a9:e1:a5:45:f0:b7:d6:02:4a:5e:f8:ad:a4:
9a:c3:35:ab:d7:be:e9:06:2e:c1:9d:95:e7:f3:39:
6f:a9:39:64:26:b3:ea:28:41:bf:f3:0e:17:98:01:
a6:29:88:ae:90:d3:a1:c7:e4:32:bf:17:d7:d3:f7:
b5:d0:9c:2d:ee:b4:ab:59:09:40:14:c9:c0:d4:6c:
43:46:cd:bd:15:a3:ab:74:48:9d:15:09:cb:e0:9a:
c6:14:d4:f5:59:67:63:49:22:6e:7a:7f:e4:cb:52:
c3:c8:fb:c4:bd:31:f5:a1:81:45:94:17:1f:c9:b3:
f2:51:a0:a8:b3:e3:7a:6f:83:b4:c1:c5:e3:e5:ac:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:97:A0:4E:59:68:F0:C5:C4:9F:A7:B7:06:D9:AE:9C:5C:75:71:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FACBFCC862C111EEA9366D264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f3:0b:9e:28:0b:6f:e0:93:12:8e:8a:d0:37:4e:50:80:61:
c1:de:1d:88:d3:bc:57:27:3c:32:71:67:b7:4b:2e:d9:ff:c7:
04:0b:06:72:2d:e1:11:ca:2c:a8:63:09:85:55:62:f0:7e:54:
05:77:00:91:e9:ea:5d:19:5b:04:63:ae:42:f5:4b:11:ae:45:
b7:f6:f0:b6:ea:ce:34:9c:65:4a:01:fc:be:25:86:81:a7:4f:
02:e5:e7:81:7b:1c:57:2d:48:13:94:0c:1d:ae:35:93:aa:05:
a3:44:ce:94:ac:07:59:ed:cb:56:49:14:20:10:05:90:69:08:
75:c1:76:37:66:12:fb:9f:06:e1:18:39:56:d6:6f:7d:96:e4:
3c:38:85:e1:9f:8e:fe:01:a5:5f:bf:3d:20:eb:24:9c:9f:ba:
45:61:e5:f8:fa:f2:0c:2c:20:ee:a0:ad:a1:49:3c:2d:27:f2:
fa:36:3e:7f:ac:00:47:98:2f:c8:78:cc:8e:d5:7e:f7:84:c4:
4a:d8:b0:d4:2f:1c:39:1a:24:df:cd:8f:5a:71:f6:c0:d7:4c:
fb:7d:3d:19:ac:4e:f6:19:25:41:40:c6:8b:80:1b:15:87:0b:
fb:40:e8:f2:0b:b3:81:c7:ce:36:7b:39:a3:4d:cc:b6:d4:d2:
a2:0e:d8:65
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICRHowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEwMDQxNDI2MTRaFw0yMzEwMTQxNDI2MTRaMBgxFjAU
BgNVBAMTDTY1MWQ3NjA5LTRkNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwgyrlL31U2Xrzj6ZgYrHoH9I7El5Mn3H3s/9T22wB6uk05uoMiiRr9uKm
lE6tN62FMobOHupVpq5or+9oH+MUKQoRH71IdpKRHjnnCK3IOC4UXXjBmv9pdjsJ
vweK35vw6e5vqQKTKws4AJaZkaCv3vOXZHAH0JRbqeGlRfC31gJKXvitpJrDNavX
vukGLsGdlefzOW+pOWQms+ooQb/zDheYAaYpiK6Q06HH5DK/F9fT97XQnC3utKtZ
CUAUycDUbENGzb0Vo6t0SJ0VCcvgmsYU1PVZZ2NJIm56f+TLUsPI+8S9MfWhgUWU
Fx/Js/JRoKiz43pvg7TBxePlrLCrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUY5eg
Tllo8MXEn6e3BtmunFx1cW8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0ZBQ0JGQ0M4NjJDMTExRUVBOTM2NkQyNjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawgowDQYJKoZIhvcNAQEL
BQADggEBAK/zC54oC2/gkxKOitA3TlCAYcHeHYjTvFcnPDJxZ7dLLtn/xwQLBnIt
4RHKLKhjCYVVYvB+VAV3AJHp6l0ZWwRjrkL1SxGuRbf28LbqzjScZUoB/L4lhoGn
TwLl54F7HFctSBOUDB2uNZOqBaNEzpSsB1nty1ZJFCAQBZBpCHXBdjdmEvufBuEY
OVbWb32W5Dw4heGfjv4BpV+/PSDrJJyfukVh5fj68gwsIO6graFJPC0n8vo2Pn+s
AEeYL8h4zI7VfveExErYsNQvHDkaJN/Nj1px9sDXTPt9PRmsTvYZJUFAxouAGxWH
C/tA6PILs4HHzjZ7OaNNzLbU0qIO2GU=
-----END CERTIFICATE-----
Generated at Fri May 9 17:18:23 2025 by rpki-client