Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1DD790F62A11EFAC427476762E951A.roa
File: FE1DD790F62A11EFAC427476762E951A.roa (raw, json)
Hash identifier: VNnNgjCbDLn6zyzHsUic/7uTYcnuCHOtOgIaI18TfLk=
Subject key identifier: F3:1B:3F:B5:5C:0C:22:CC:4B:A7:22:5D:10:3E:60:2A:CF:58:2F:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1DD790F62A11EFAC427476762E951A.roa
Signing time: Fri 28 Feb 2025 23:23:18 +0000
ROA not before: Fri 28 Feb 2025 23:23:15 +0000
ROA not after: Wed 26 Mar 2025 23:23:15 +0000
asID: 62240
IP address blocks: 154.194.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93385 (0x16cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:23:15 2025 GMT
Not After : Mar 26 23:23:15 2025 GMT
Subject: CN=67c24566-c263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:e1:88:83:e5:0b:66:4d:07:67:6c:61:ea:
88:b4:2f:4b:f8:08:65:c6:ba:cf:be:51:b6:39:06:
ba:01:4c:4d:b3:62:79:0e:76:18:69:5e:d0:68:da:
14:53:9a:ca:44:e2:84:06:d9:72:25:db:fa:42:ba:
6f:04:73:26:86:94:c7:86:3e:e5:d8:2d:bd:ec:af:
18:b0:8b:f9:ef:15:73:b9:8c:b2:3a:f5:71:41:26:
10:49:85:26:7b:eb:db:e8:81:d6:4d:12:ea:de:ea:
ea:13:11:24:ee:c3:c0:5c:25:7b:de:1e:ff:00:4f:
66:8b:39:66:3f:40:03:36:4d:3e:cc:50:58:f6:84:
4f:69:86:3f:e7:d8:e6:79:76:e6:a7:11:94:f2:e6:
1d:e5:dc:6f:6b:a5:c0:07:6b:4a:f2:2c:3c:1e:7c:
ab:10:ad:71:7e:f4:cb:a1:62:7f:65:37:2d:d6:66:
bb:c9:04:92:40:e7:24:bf:e9:79:aa:12:59:08:3b:
0d:48:7a:69:74:1e:a4:a8:ff:7f:2a:6e:f3:72:10:
7b:98:c1:ac:27:f1:79:c8:1e:d9:a8:3e:bd:2f:64:
fe:b9:4a:78:8d:08:63:a3:0e:84:97:57:2e:b8:26:
3b:7e:9e:33:06:6a:cd:cc:2d:cb:b4:a0:c5:d4:dc:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1B:3F:B5:5C:0C:22:CC:4B:A7:22:5D:10:3E:60:2A:CF:58:2F:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE1DD790F62A11EFAC427476762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.127.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:97:c4:49:47:a4:cf:be:03:77:06:69:cd:0c:7e:90:7c:e6:
00:25:22:ed:94:0f:90:d8:da:c4:74:6a:c4:19:bb:4f:10:be:
62:d5:bb:d6:bf:0f:33:d8:fc:65:9d:10:8b:20:8d:dd:3b:70:
90:d2:18:e6:57:d6:d0:53:dc:fe:ca:62:ae:39:21:58:d0:38:
a1:d9:21:65:72:4d:2a:df:70:f5:9e:15:bc:e8:06:0d:7a:5d:
80:e3:20:35:ef:64:60:7a:1a:c5:ca:07:2f:13:ef:45:a7:17:
04:93:41:60:45:f3:25:3a:94:75:2b:ed:e1:32:75:17:41:58:
a2:4a:db:20:d3:dc:11:dd:cc:62:17:55:f3:79:e6:b5:0b:53:
89:10:c6:65:bf:19:30:bf:9d:00:89:b5:79:fe:5b:44:dc:75:
1e:71:3f:45:b9:c3:63:97:b5:b2:b6:27:2c:89:42:ae:14:4e:
b4:f0:25:4a:99:ac:45:b3:21:94:c4:00:15:0c:b2:f6:18:87:
f3:e2:73:bb:23:7f:b8:80:a0:27:e5:fe:09:04:7b:c3:09:40:
82:1f:59:ba:1f:57:b6:83:de:8a:8a:4c:6e:b2:50:60:d4:fa:
ab:10:28:ff:b3:7e:a3:9c:9a:a2:bb:3d:1a:e7:79:40:e6:fa:
9d:d4:4b:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWzJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjMyMzE1WhcNMjUwMzI2MjMyMzE1WjAYMRYw
FAYDVQQDEw02N2MyNDU2Ni1jMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAunzhiIPlC2ZNB2dsYeqItC9L+AhlxrrPvlG2OQa6AUxNs2J5DnYYaV7Q
aNoUU5rKROKEBtlyJdv6QrpvBHMmhpTHhj7l2C297K8YsIv57xVzuYyyOvVxQSYQ
SYUme+vb6IHWTRLq3urqExEk7sPAXCV73h7/AE9mizlmP0ADNk0+zFBY9oRPaYY/
59jmeXbmpxGU8uYd5dxva6XAB2tK8iw8HnyrEK1xfvTLoWJ/ZTct1ma7yQSSQOck
v+l5qhJZCDsNSHppdB6kqP9/Km7zchB7mMGsJ/F5yB7ZqD69L2T+uUp4jQhjow6E
l1cuuCY7fp4zBmrNzC3LtKDF1Nx0MQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPMb
P7VcDCLMS6ciXRA+YCrPWC9YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRTFERDc5MEY2MkExMUVGQUM0Mjc0NzY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJ/MA0GCSqGSIb3DQEB
CwUAA4IBAQDEl8RJR6TPvgN3BmnNDH6QfOYAJSLtlA+Q2NrEdGrEGbtPEL5i1bvW
vw8z2PxlnRCLII3dO3CQ0hjmV9bQU9z+ymKuOSFY0Dih2SFlck0q33D1nhW86AYN
el2A4yA172RgehrFygcvE+9FpxcEk0FgRfMlOpR1K+3hMnUXQViiStsg09wR3cxi
F1Xzeea1C1OJEMZlvxkwv50AibV5/ltE3HUecT9FucNjl7WyticsiUKuFE608CVK
maxFsyGUxAAVDLL2GIfz4nO7I3+4gKAn5f4JBHvDCUCCH1m6H1e2g96KikxuslBg
1PqrECj/s36jnJqiuz0a53lA5vqd1Evc
-----END CERTIFICATE-----
Generated at Fri May 9 21:56:24 2025 by rpki-client