Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFE8A5EAF33311EFB4E3C19E762E951A.roa
File: FFE8A5EAF33311EFB4E3C19E762E951A.roa (raw, json)
Hash identifier: yfocQf3ahm/pWKhz2588jq7cG1Nm4SJuHqwKZfx1iu4=
Subject key identifier: D7:4D:95:16:74:67:79:1E:1E:CC:8E:F5:A3:EA:4D:F0:08:5C:4D:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFE8A5EAF33311EFB4E3C19E762E951A.roa
Signing time: Tue 25 Feb 2025 04:50:13 +0000
ROA not before: Tue 25 Feb 2025 04:50:10 +0000
ROA not after: Wed 26 Mar 2025 04:50:10 +0000
asID: 5065
IP address blocks: 154.94.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89409 (0x15d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 04:50:10 2025 GMT
Not After : Mar 26 04:50:10 2025 GMT
Subject: CN=67bd4c05-71f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:89:62:d9:e7:c5:d5:d0:dc:d7:25:e8:90:
04:f5:df:0b:dd:ab:cb:55:ce:a3:e5:6a:08:34:ea:
8e:c7:16:a4:a3:ba:6f:3f:ed:59:6c:02:ab:bb:bc:
b8:cb:c3:da:d3:b1:7f:00:c1:b9:49:81:6f:8b:62:
3c:4c:da:91:9f:d9:af:65:17:4d:31:a6:1a:b3:cf:
4b:22:b5:d3:9a:bc:b3:9e:ee:e6:15:05:67:f3:17:
d7:8a:ef:88:83:e4:4a:4f:5a:3a:05:78:69:67:7f:
0a:5e:31:01:b7:c3:df:d9:16:fc:23:73:cf:c6:9e:
c4:22:db:c5:39:6e:6c:f1:8d:cf:3e:4c:9f:9f:81:
fb:32:9b:3f:20:13:e9:2f:45:c3:57:fe:c1:f4:49:
da:b3:51:61:5c:ce:02:c4:57:6c:0d:59:24:66:95:
0b:fe:0c:cd:8e:72:06:29:9a:48:9c:15:5d:eb:46:
32:65:79:f8:76:fc:c0:fa:a7:49:1a:79:05:d5:6c:
5c:91:2a:06:93:6b:7c:27:ec:54:4f:cd:c9:ca:5c:
37:42:2b:43:ac:2d:a6:5b:e4:f3:13:48:e2:3f:21:
0b:10:fb:56:33:16:6a:21:13:46:70:3a:33:e2:cb:
ff:1f:ee:15:34:81:6d:e3:3d:15:f2:98:f8:64:20:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:95:16:74:67:79:1E:1E:CC:8E:F5:A3:EA:4D:F0:08:5C:4D:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFE8A5EAF33311EFB4E3C19E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d1:2c:de:d3:5a:24:6b:19:b9:d9:89:bb:40:c6:e4:01:7e:
34:be:dc:7d:0d:51:ff:b3:75:82:d8:b1:a2:d1:f2:2d:82:7f:
0f:ee:ab:00:f4:51:ef:cf:fd:cb:e7:42:cf:e2:8a:47:77:46:
79:79:2b:13:27:04:fc:92:bf:ea:fc:9b:c9:4f:4f:8f:a2:56:
ad:18:2d:5a:8a:84:a3:65:87:e5:b7:b2:dc:09:9e:cb:2b:90:
f9:cc:80:cf:56:4b:f2:ee:65:4a:77:27:39:cc:46:a7:7f:19:
42:c6:fa:47:41:b1:1c:10:e4:ab:47:45:af:2a:a1:00:c2:55:
7d:fb:9a:cf:68:a3:b4:a7:49:78:be:5c:ba:07:f8:74:ca:8c:
99:0d:94:f0:93:2f:86:d5:45:68:38:7e:58:39:59:25:22:20:
69:6d:de:15:59:c9:df:97:ba:7f:ed:05:c4:b8:4a:8a:b6:62:
2f:2e:22:74:14:7c:a4:5d:1f:73:be:15:b1:e3:37:47:fa:ed:
8b:09:3f:42:1d:b0:65:e9:16:fd:2d:7c:2a:71:c5:28:22:65:
a2:9e:e1:2a:ae:97:8f:6d:7b:cb:14:f6:d2:e2:5a:77:f6:0d:
88:cb:5a:2a:5b:79:0c:a7:1d:4d:02:12:d4:15:7d:5c:c1:58:
d1:01:b8:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV1BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MDQ1MDEwWhcNMjUwMzI2MDQ1MDEwWjAYMRYw
FAYDVQQDEw02N2JkNGMwNS03MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArv6JYtnnxdXQ3Ncl6JAE9d8L3avLVc6j5WoINOqOxxako7pvP+1ZbAKr
u7y4y8Pa07F/AMG5SYFvi2I8TNqRn9mvZRdNMaYas89LIrXTmryznu7mFQVn8xfX
iu+Ig+RKT1o6BXhpZ38KXjEBt8Pf2Rb8I3PPxp7EItvFOW5s8Y3PPkyfn4H7Mps/
IBPpL0XDV/7B9Enas1FhXM4CxFdsDVkkZpUL/gzNjnIGKZpInBVd60YyZXn4dvzA
+qdJGnkF1WxckSoGk2t8J+xUT83Jylw3QitDrC2mW+TzE0jiPyELEPtWMxZqIRNG
cDoz4sv/H+4VNIFt4z0V8pj4ZCAkAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNdN
lRZ0Z3keHsyO9aPqTfAIXE2lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkU4QTVFQUYzMzMxMUVGQjRFM0MxOUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4gMA0GCSqGSIb3DQEB
CwUAA4IBAQBM0Sze01okaxm52Ym7QMbkAX40vtx9DVH/s3WC2LGi0fItgn8P7qsA
9FHvz/3L50LP4opHd0Z5eSsTJwT8kr/q/JvJT0+PolatGC1aioSjZYflt7LcCZ7L
K5D5zIDPVkvy7mVKdyc5zEanfxlCxvpHQbEcEOSrR0WvKqEAwlV9+5rPaKO0p0l4
vly6B/h0yoyZDZTwky+G1UVoOH5YOVklIiBpbd4VWcnfl7p/7QXEuEqKtmIvLiJ0
FHykXR9zvhWx4zdH+u2LCT9CHbBl6Rb9LXwqccUoImWinuEqrpePbXvLFPbS4lp3
9g2Iy1oqW3kMpx1NAhLUFX1cwVjRAbjf
-----END CERTIFICATE-----
Generated at Fri May 9 11:42:12 2025 by rpki-client