This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/4DEB0C6A8D2211EF927EBC92762E951A.roa
File:                     4DEB0C6A8D2211EF927EBC92762E951A.roa (raw, json)
Hash identifier:          AmVl/7bl76iTzS3pLw5KViIEulUCBYN0hqEI6leTpfU=
Subject key identifier:   2A:96:1F:9B:DC:C2:88:1F:9F:E8:E0:8B:05:16:F2:14:29:9D:51:E9
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       034D
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/4DEB0C6A8D2211EF927EBC92762E951A.roa
Signing time:             Fri 18 Oct 2024 07:26:35 +0000
ROA not before:           Fri 18 Oct 2024 07:26:31 +0000
ROA not after:            Sat 18 Oct 2025 07:26:31 +0000
asID:                     328660
IP address blocks:        102.223.231.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845 (0x34d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF, serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Oct 18 07:26:31 2024 GMT
            Not After : Oct 18 07:26:31 2025 GMT
        Subject: CN=67120dab-0e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:97:97:f6:4b:47:e1:c4:56:9a:67:3d:a3:
                    1d:1c:b1:27:4c:5f:74:d4:32:54:f7:b5:3b:25:b5:
                    4f:0c:12:2e:13:2b:f4:58:c1:7d:78:bb:9f:e4:51:
                    20:10:98:d1:fd:ee:be:f1:85:de:d6:9d:45:8b:4f:
                    26:88:eb:63:e1:b4:3e:05:a9:11:8e:38:35:37:d0:
                    f8:f8:30:79:d1:87:fb:56:48:4e:28:ee:62:5b:b1:
                    0b:2d:5a:13:c6:9a:ae:98:10:e7:2f:69:a3:b8:f6:
                    0b:b7:09:53:78:e1:58:13:df:60:4a:09:fc:59:37:
                    cd:73:f7:63:71:bd:82:77:02:bc:23:23:e7:8d:86:
                    0a:dc:5b:31:33:07:53:5f:0d:ba:cd:f6:8e:89:e9:
                    23:8f:81:9a:9c:b2:4a:99:eb:9f:dd:86:06:3a:dd:
                    42:ce:9a:c2:e6:5a:ca:1e:22:df:de:d2:a1:e6:1c:
                    3d:8c:d1:e6:fb:11:53:83:41:31:ce:91:8a:c5:51:
                    09:cb:06:20:4e:73:03:91:5b:9c:87:94:b1:d3:ff:
                    b4:ef:ac:88:92:e3:2b:5e:54:32:d2:cc:34:05:f8:
                    bf:5c:80:54:45:e6:6f:58:9e:68:d4:c1:0a:bd:e9:
                    8d:88:d9:8b:13:92:4d:e5:2b:18:55:df:0f:be:dd:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:96:1F:9B:DC:C2:88:1F:9F:E8:E0:8B:05:16:F2:14:29:9D:51:E9
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/4DEB0C6A8D2211EF927EBC92762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:1b:6a:7c:b2:12:ee:ca:ff:8d:da:13:c9:bf:2f:be:f1:
         0f:bb:4b:0c:aa:35:32:5b:5f:05:04:7b:b0:d5:d4:fd:55:f6:
         3b:e7:ac:21:ca:37:33:ec:f8:fe:3c:4b:cf:1a:00:95:a3:97:
         ce:72:0e:b9:d8:46:a2:d5:38:dd:1f:c2:55:ca:30:3f:03:2f:
         0b:62:0b:d2:3d:d6:fb:3b:1f:08:a0:f3:37:4e:ca:16:27:d9:
         c2:9b:21:a4:eb:cb:5d:37:d2:27:c2:10:6d:1c:5c:fc:b2:ac:
         cd:59:44:ca:ad:b3:ff:f5:35:f5:72:9c:29:2f:ac:d5:3b:c6:
         7c:75:a0:d0:e7:48:24:0c:8a:9d:e0:de:4b:43:03:ef:d8:ff:
         ac:61:79:55:b5:79:93:a0:88:8f:5a:cc:ae:8a:d8:40:be:b0:
         fb:45:fc:af:21:c3:91:41:00:93:77:68:84:60:ff:5b:af:cc:
         7e:78:6e:ad:e0:73:98:c1:a2:00:74:42:34:49:33:60:66:81:
         37:33:6e:1b:14:37:a6:e6:02:6b:88:f2:a7:81:53:dc:85:fb:
         d2:a0:3c:68:30:aa:f5:4e:60:2b:79:04:9a:9d:fe:bd:5d:db:
         3d:f1:9c:77:70:2f:f5:fe:2a:c5:60:55:ce:e5:f4:ee:ee:08:
         25:72:d3:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA00wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQzOTdBRjExMC8GA1UEBRMoMDNFMjBFRUYxNTA1MDNBMEIxOTUxMThBRTg4NzY4
N0Y1QTQyNzlDMjAeFw0yNDEwMTgwNzI2MzFaFw0yNTEwMTgwNzI2MzFaMBgxFjAU
BgNVBAMTDTY3MTIwZGFiLTBlMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwrpeX9ktH4cRWmmc9ox0csSdMX3TUMlT3tTsltU8MEi4TK/RYwX14u5/k
USAQmNH97r7xhd7WnUWLTyaI62PhtD4FqRGOODU30Pj4MHnRh/tWSE4o7mJbsQst
WhPGmq6YEOcvaaO49gu3CVN44VgT32BKCfxZN81z92NxvYJ3ArwjI+eNhgrcWzEz
B1NfDbrN9o6J6SOPgZqcskqZ65/dhgY63ULOmsLmWsoeIt/e0qHmHD2M0eb7EVOD
QTHOkYrFUQnLBiBOcwORW5yHlLHT/7TvrIiS4yteVDLSzDQF+L9cgFRF5m9YnmjU
wQq96Y2I2YsTkk3lKxhV3w++3bmvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKpYf
m9zCiB+f6OCLBRbyFCmdUekwHwYDVR0jBBgwFoAUA+IO7xUFA6CxlRGK6Idof1pC
ecIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0YxMjIyNDY4L0EtSU83
eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0EtSU83eFVGQTZDeGxSR0s2SWRvZjFwQ2VjSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU0Mzk3LzhEN0IzMTgwMUY5NjExRUQ4MjMzRjI4Q0Yx
MjIyNDY4LzRERUIwQzZBOEQyMjExRUY5MjdFQkM5Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3+cwDQYJKoZIhvcNAQEL
BQADggEBAGvjG2p8shLuyv+N2hPJvy++8Q+7SwyqNTJbXwUEe7DV1P1V9jvnrCHK
NzPs+P48S88aAJWjl85yDrnYRqLVON0fwlXKMD8DLwtiC9I91vs7Hwig8zdOyhYn
2cKbIaTry1030ifCEG0cXPyyrM1ZRMqts//1NfVynCkvrNU7xnx1oNDnSCQMip3g
3ktDA+/Y/6xheVW1eZOgiI9azK6K2EC+sPtF/K8hw5FBAJN3aIRg/1uvzH54bq3g
c5jBogB0QjRJM2BmgTczbhsUN6bmAmuI8qeBU9yF+9KgPGgwqvVOYCt5BJqd/r1d
2z3xnHdwL/X+KsVgVc7l9O7uCCVy08I=
-----END CERTIFICATE-----