Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFF30614DAF811EF956D0651762E951A.roa
File: FFF30614DAF811EF956D0651762E951A.roa (raw, json)
Hash identifier: heGhs0y8eWJHTvo98/5a4hfT1iaf2vuJPWAwjAeCFGE=
Subject key identifier: 6E:C0:E9:48:2B:F2:34:71:A4:6D:6D:91:55:5E:69:87:E9:90:9A:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014907
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFF30614DAF811EF956D0651762E951A.roa
Signing time: Sat 25 Jan 2025 08:47:25 +0000
ROA not before: Sat 25 Jan 2025 08:47:21 +0000
ROA not after: Sun 30 Mar 2025 08:47:21 +0000
asID: 63139
IP address blocks: 154.94.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84231 (0x14907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:47:21 2025 GMT
Not After : Mar 30 08:47:21 2025 GMT
Subject: CN=6794a51d-4994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:73:46:6a:9e:61:44:ce:5f:b1:df:83:06:
c3:b2:31:81:ac:23:c8:0c:75:b7:ae:58:77:66:7d:
dd:0e:88:1c:65:8b:89:80:d8:bd:e7:4f:53:c0:45:
d3:c2:3f:cb:03:65:06:24:ee:da:11:09:cd:f6:05:
96:a9:66:8a:2a:4f:18:37:e2:b8:d1:51:61:8c:b1:
08:8c:58:ae:24:2a:c3:4e:8f:d1:74:26:c3:cd:76:
6b:d9:a4:1f:ae:68:74:6c:00:ac:8e:21:dc:9a:e6:
60:df:3b:9c:9e:91:8c:78:e3:8d:dc:e8:7b:04:63:
e4:70:07:6d:96:a8:16:0c:50:ab:e9:a6:e7:83:5e:
c4:2c:7d:60:46:1b:4c:84:a5:b5:d3:84:d4:46:26:
ec:bf:11:26:de:f3:f4:8b:d0:9c:2c:80:50:50:c2:
ca:6a:96:fa:60:17:2d:3c:e5:8f:58:08:65:2e:f5:
89:65:a0:01:b8:0a:99:33:e8:c4:7e:cb:24:e5:d4:
c5:69:c8:31:3e:d9:bd:e8:30:63:7c:a6:fe:08:ca:
73:7d:b3:3d:fa:72:4a:7a:89:97:94:96:33:07:29:
0e:f6:8d:50:c8:c4:27:b7:68:18:ab:8a:26:54:37:
d9:43:06:d2:1b:e6:dc:c5:76:a3:20:17:b7:8e:33:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C0:E9:48:2B:F2:34:71:A4:6D:6D:91:55:5E:69:87:E9:90:9A:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFF30614DAF811EF956D0651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.110.0/24
Signature Algorithm: sha256WithRSAEncryption
80:54:60:8f:c4:2c:e4:7d:b4:07:c4:c5:2d:2f:89:42:22:82:
e3:77:b0:f3:3b:5a:59:c0:d6:bf:6a:0a:06:42:21:e9:5a:4b:
81:35:41:70:27:92:9a:bd:d7:c9:b0:31:ad:da:e3:b2:b8:ed:
2f:6e:8f:79:20:2c:2d:e5:5a:50:cd:08:69:8b:58:18:45:39:
9b:86:bb:90:31:31:96:57:9e:a8:8e:e1:2c:2e:3a:ce:be:ea:
44:8c:0e:55:e9:81:58:66:54:41:67:06:9f:dd:6b:f3:db:35:
5e:2f:11:ff:1a:5a:34:7c:7b:fd:ec:6e:4d:aa:82:91:0e:a6:
14:2c:ea:fe:ce:5d:3b:9a:38:26:ca:bd:dd:ee:45:ed:a1:3e:
f6:79:c3:a3:f2:54:50:92:89:d6:15:5c:2f:44:cb:77:f7:e0:
12:c3:a9:3d:a4:4b:4d:c2:15:58:96:b4:01:aa:37:4b:a9:8f:
60:c7:27:3b:97:0e:6c:78:69:7b:ed:79:3a:40:23:15:cb:14:
3f:cb:f6:08:51:8e:81:ba:78:00:ea:35:85:cc:54:5d:92:89:
ff:64:52:ed:1e:60:4a:6a:b6:68:66:3d:4c:a8:3d:fa:56:a0:
03:b2:ca:14:e9:59:78:34:7e:e7:f3:82:2f:2d:ae:b9:a1:69:
7c:86:21:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUkHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MDg0NzIxWhcNMjUwMzMwMDg0NzIxWjAYMRYw
FAYDVQQDEw02Nzk0YTUxZC00OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxQRzRmqeYUTOX7HfgwbDsjGBrCPIDHW3rlh3Zn3dDogcZYuJgNi9509T
wEXTwj/LA2UGJO7aEQnN9gWWqWaKKk8YN+K40VFhjLEIjFiuJCrDTo/RdCbDzXZr
2aQfrmh0bACsjiHcmuZg3zucnpGMeOON3Oh7BGPkcAdtlqgWDFCr6abng17ELH1g
RhtMhKW104TURibsvxEm3vP0i9CcLIBQUMLKapb6YBctPOWPWAhlLvWJZaABuAqZ
M+jEfssk5dTFacgxPtm96DBjfKb+CMpzfbM9+nJKeomXlJYzBykO9o1QyMQnt2gY
q4omVDfZQwbSG+bcxXajIBe3jjMUZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG7A
6Ugr8jRxpG1tkVVeaYfpkJobMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkYzMDYxNERBRjgxMUVGOTU2RDA2NTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5uMA0GCSqGSIb3DQEB
CwUAA4IBAQCAVGCPxCzkfbQHxMUtL4lCIoLjd7DzO1pZwNa/agoGQiHpWkuBNUFw
J5KavdfJsDGt2uOyuO0vbo95ICwt5VpQzQhpi1gYRTmbhruQMTGWV56ojuEsLjrO
vupEjA5V6YFYZlRBZwaf3Wvz2zVeLxH/Glo0fHv97G5NqoKRDqYULOr+zl07mjgm
yr3d7kXtoT72ecOj8lRQkonWFVwvRMt39+ASw6k9pEtNwhVYlrQBqjdLqY9gxyc7
lw5seGl77Xk6QCMVyxQ/y/YIUY6BungA6jWFzFRdkon/ZFLtHmBKarZoZj1MqD36
VqADssoU6Vl4NH7n84IvLa65oWl8hiE8
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:44 2025 by rpki-client