Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7519C0F4EE11EF9B33E086762E951A.roa
File: FE7519C0F4EE11EF9B33E086762E951A.roa (raw, json)
Hash identifier: yRoRV9gu2QjifeqxybQ8lxLy2d20STQ6BA85bCxQt+Q=
Subject key identifier: E8:64:AB:0E:4A:A2:46:FF:E2:96:55:BC:DF:BA:3E:F7:E7:DD:04:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016751
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7519C0F4EE11EF9B33E086762E951A.roa
Signing time: Thu 27 Feb 2025 09:41:18 +0000
ROA not before: Thu 27 Feb 2025 09:41:14 +0000
ROA not after: Wed 26 Mar 2025 09:41:14 +0000
asID: 62240
IP address blocks: 154.195.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91985 (0x16751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 09:41:14 2025 GMT
Not After : Mar 26 09:41:14 2025 GMT
Subject: CN=67c0333e-79c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:55:b3:27:92:03:fc:c3:d3:79:d2:4e:0d:
e3:33:eb:38:6f:18:60:a0:73:69:9a:54:28:5a:a6:
a8:7e:8a:eb:fe:65:b9:87:91:ad:12:c2:c2:ac:7c:
4d:b7:16:19:b7:b6:0d:89:df:8d:cb:50:e6:0e:3d:
44:1d:e1:42:43:3a:27:88:00:2d:26:0c:de:5a:c6:
70:b3:cc:9a:3f:1c:0b:b9:09:b3:f3:16:6b:3b:de:
d2:97:31:80:ba:b3:71:41:7b:a7:30:92:19:8b:29:
98:c0:48:12:d6:93:26:86:64:f0:f9:43:05:1f:51:
dc:b7:35:2e:de:55:7f:3f:81:a7:1d:08:4b:53:ea:
4e:c2:8a:ed:88:7d:03:5c:93:73:05:71:bb:63:b6:
e0:e7:e1:74:d1:d9:d5:38:4f:93:75:5e:b3:a4:4d:
32:e1:d3:3b:60:61:fe:02:3b:ea:b1:42:27:d7:f9:
5f:af:24:d0:de:2a:2e:d6:a9:6a:9a:6d:5d:6d:d9:
18:24:52:77:a0:6c:61:f0:d6:1a:75:0a:55:75:37:
8d:8b:07:99:b8:24:d8:cd:ad:05:77:fa:ec:73:a2:
7f:05:0f:6a:f2:a7:2e:05:7c:6b:a8:66:27:5d:6a:
fc:2c:2a:43:c6:46:f4:c8:f1:c5:63:60:b2:84:46:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:AB:0E:4A:A2:46:FF:E2:96:55:BC:DF:BA:3E:F7:E7:DD:04:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7519C0F4EE11EF9B33E086762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:04:41:f3:f8:b7:10:19:ec:38:9e:c2:7d:c0:e5:6a:bc:91:
8e:c5:96:d1:d7:a3:4c:69:1d:e8:e6:bd:ba:74:ca:82:93:1d:
a9:4f:c5:ac:47:29:92:67:d9:bd:39:22:78:31:8c:24:b6:84:
e0:35:9a:19:82:0c:07:e7:a4:89:62:08:46:5e:19:62:6b:17:
89:6d:17:ca:68:fb:34:9a:2f:86:41:3c:48:ac:53:bc:36:75:
d7:bf:94:a4:f2:23:ab:61:c7:ad:37:c0:45:81:bb:7a:e4:7a:
a3:df:34:b2:ea:19:cf:b6:ba:8e:ef:10:6f:63:42:40:55:20:
a0:6b:66:19:27:7e:da:67:2d:c8:ab:5e:e5:51:a1:e6:c1:17:
88:90:05:d2:e5:83:34:35:14:88:6a:7b:c2:5c:d1:be:71:09:
1f:17:34:22:6b:7f:c9:c6:8a:5b:94:56:21:7d:bb:a7:ed:0d:
b8:06:cb:83:42:50:58:ec:c6:ce:eb:77:4d:e7:e4:c2:6e:4b:
b1:78:c4:e5:55:e6:8c:26:33:1e:08:91:27:2e:c9:f0:61:09:
e9:b3:8e:5b:bf:bf:9d:24:00:b4:8f:fe:ff:23:b2:af:6e:b2:
34:b1:b9:b0:4c:58:d0:87:fd:97:8d:a8:de:ff:ed:ba:28:ae:
5c:10:73:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWdRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDk0MTE0WhcNMjUwMzI2MDk0MTE0WjAYMRYw
FAYDVQQDEw02N2MwMzMzZS03OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuqhVsyeSA/zD03nSTg3jM+s4bxhgoHNpmlQoWqaoforr/mW5h5GtEsLC
rHxNtxYZt7YNid+Ny1DmDj1EHeFCQzoniAAtJgzeWsZws8yaPxwLuQmz8xZrO97S
lzGAurNxQXunMJIZiymYwEgS1pMmhmTw+UMFH1HctzUu3lV/P4GnHQhLU+pOwort
iH0DXJNzBXG7Y7bg5+F00dnVOE+TdV6zpE0y4dM7YGH+AjvqsUIn1/lfryTQ3iou
1qlqmm1dbdkYJFJ3oGxh8NYadQpVdTeNiweZuCTYza0Fd/rsc6J/BQ9q8qcuBXxr
qGYnXWr8LCpDxkb0yPHFY2CyhEbVhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOhk
qw5Kokb/4pZVvN+6Pvfn3QTmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRTc1MTlDMEY0RUUxMUVGOUIzM0UwODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNiMA0GCSqGSIb3DQEB
CwUAA4IBAQCyBEHz+LcQGew4nsJ9wOVqvJGOxZbR16NMaR3o5r26dMqCkx2pT8Ws
RymSZ9m9OSJ4MYwktoTgNZoZggwH56SJYghGXhliaxeJbRfKaPs0mi+GQTxIrFO8
NnXXv5Sk8iOrYcetN8BFgbt65Hqj3zSy6hnPtrqO7xBvY0JAVSCga2YZJ37aZy3I
q17lUaHmwReIkAXS5YM0NRSIanvCXNG+cQkfFzQia3/JxopblFYhfbun7Q24BsuD
QlBY7MbO63dN5+TCbkuxeMTlVeaMJjMeCJEnLsnwYQnps45bv7+dJAC0j/7/I7Kv
brI0sbmwTFjQh/2Xjaje/+26KK5cEHMQ
-----END CERTIFICATE-----
Generated at Fri May 9 07:12:00 2025 by rpki-client