Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E55CFE81CF711F09868ADC1DAE4EC9C.roa
File: 1E55CFE81CF711F09868ADC1DAE4EC9C.roa (raw, json)
Hash identifier: WjBDhVgLzxI13YPzw5o2CVhUSpv4CI5rGRfTXfWDXM8=
Subject key identifier: 27:E6:77:47:3E:DA:FC:4A:7C:AC:61:79:39:2D:E5:73:98:9B:1F:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E55CFE81CF711F09868ADC1DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:20:14 +0000
ROA not before: Sat 19 Apr 2025 08:20:09 +0000
ROA not after: Mon 28 Apr 2025 08:20:09 +0000
asID: 133180
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96773 (0x17a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:20:09 2025 GMT
Not After : Apr 28 08:20:09 2025 GMT
Subject: CN=68035cbe-ed71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:c3:6c:d7:ca:4a:24:5b:5c:c9:eb:fb:d8:
3f:ad:d4:23:e0:d8:48:dd:c6:de:d6:69:d9:4b:58:
27:19:69:d0:2e:e9:bc:68:51:a8:a3:53:ac:e7:6d:
a4:77:f2:b8:75:c8:ec:2b:22:64:b2:05:50:bf:b7:
a5:e6:ed:b5:15:46:fc:05:6d:e8:51:28:43:fc:0f:
1c:c5:88:ed:97:07:46:4a:3e:06:f0:12:f1:2d:ab:
83:c2:a9:ce:5b:b7:f2:b7:a5:1a:70:f4:31:5f:4e:
c6:32:68:b5:34:49:46:cf:83:cf:d0:41:eb:1b:ca:
37:cc:c2:4d:95:a3:99:31:b5:04:7a:8b:c4:54:8b:
d5:c6:55:a8:76:44:2a:cf:ec:00:93:a4:3d:88:c1:
31:60:8f:bb:cf:ed:fe:6e:d5:f8:3c:b6:c2:2b:b8:
15:f6:5b:c5:32:5d:d0:95:90:c7:63:45:a8:96:7a:
61:d7:e1:99:fa:4e:ba:55:0c:48:8e:c8:9d:4b:06:
c0:8a:68:16:f8:a0:43:b7:d2:04:c4:ca:3e:43:5e:
df:2d:ca:b8:8a:38:78:61:cb:56:f1:62:85:57:fc:
9d:d2:42:c4:c0:4e:fa:87:fa:66:e5:cd:9d:70:d7:
6e:ed:cb:de:01:ca:3a:1e:db:f1:ca:9e:46:2c:1c:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:77:47:3E:DA:FC:4A:7C:AC:61:79:39:2D:E5:73:98:9B:1F:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E55CFE81CF711F09868ADC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:c4:ff:95:cd:24:15:a1:74:6e:e2:ca:f5:8d:7c:ac:9b:3b:
db:d9:48:d8:26:62:76:45:1d:a8:64:52:77:d2:03:f3:f6:8c:
35:57:42:89:d0:dc:4a:cc:6c:cf:58:46:05:6b:66:5e:76:6a:
36:4b:70:b8:0a:73:27:39:13:4f:8d:7d:29:e2:97:2a:54:02:
43:c6:4b:48:24:12:27:81:f4:0f:14:a7:b5:b2:b2:a1:31:a1:
9c:10:c9:e0:35:8d:5d:1d:d2:ab:44:ca:26:bb:b8:72:ba:e7:
99:b8:7c:54:ce:d9:55:13:22:9b:c9:8a:a3:19:e7:5f:3c:3d:
7e:35:24:27:ee:cf:9d:22:1a:70:8c:f8:d4:07:95:7a:73:87:
0a:05:07:dd:8a:f2:95:f7:df:3c:df:0c:4d:b9:df:52:de:a9:
87:f4:2b:ea:7a:8b:89:6c:86:b5:93:f6:7c:d9:11:b8:08:d3:
39:ca:8a:41:0e:a9:5f:28:f1:62:f3:52:0a:76:09:30:5c:a8:
51:50:44:6a:c4:56:ad:4a:8a:d3:2f:66:d0:93:35:5f:59:17:
b4:48:08:53:2d:45:8a:a1:54:a0:c6:e1:fc:51:3e:cb:cf:9c:
51:66:27:52:79:64:74:0e:38:ab:c4:80:d7:2a:6c:29:2e:c1:
56:ee:66:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXoFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE5MDgyMDA5WhcNMjUwNDI4MDgyMDA5WjAYMRYw
FAYDVQQDEw02ODAzNWNiZS1lZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4H3DbNfKSiRbXMnr+9g/rdQj4NhI3cbe1mnZS1gnGWnQLum8aFGoo1Os
522kd/K4dcjsKyJksgVQv7el5u21FUb8BW3oUShD/A8cxYjtlwdGSj4G8BLxLauD
wqnOW7fyt6UacPQxX07GMmi1NElGz4PP0EHrG8o3zMJNlaOZMbUEeovEVIvVxlWo
dkQqz+wAk6Q9iMExYI+7z+3+btX4PLbCK7gV9lvFMl3QlZDHY0Wolnph1+GZ+k66
VQxIjsidSwbAimgW+KBDt9IExMo+Q17fLcq4ijh4YctW8WKFV/yd0kLEwE76h/pm
5c2dcNdu7cveAco6Htvxyp5GLBzakwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCfm
d0c+2vxKfKxheTkt5XOYmx93MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTU1Q0ZFODFDRjcxMUYwOTg2OEFEQzFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQByxP+VzSQVoXRu4sr1jXysmzvb2UjYJmJ2RR2oZFJ30gPz9ow1V0KJ
0NxKzGzPWEYFa2Zedmo2S3C4CnMnORNPjX0p4pcqVAJDxktIJBIngfQPFKe1srKh
MaGcEMngNY1dHdKrRMomu7hyuueZuHxUztlVEyKbyYqjGedfPD1+NSQn7s+dIhpw
jPjUB5V6c4cKBQfdivKV99883wxNud9S3qmH9CvqeouJbIa1k/Z82RG4CNM5yopB
DqlfKPFi81IKdgkwXKhRUERqxFatSorTL2bQkzVfWRe0SAhTLUWKoVSgxuH8UT7L
z5xRZidSeWR0DjirxIDXKmwpLsFW7mZH
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:25 2025 by rpki-client