Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AAB892A2CEE11F08961088EDAE4EC9C.roa
File: 2AAB892A2CEE11F08961088EDAE4EC9C.roa (raw, json)
Hash identifier: +rW9h2Pc/pn8iw9Cz5rwZds6RotU3lrrgHmif9UjnzQ=
Subject key identifier: C2:44:61:5C:A0:DB:98:A9:F3:3A:D1:87:C4:4C:7F:E3:E7:D6:2B:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AAB892A2CEE11F08961088EDAE4EC9C.roa
Signing time: Fri 09 May 2025 15:56:28 +0000
ROA not before: Fri 09 May 2025 15:56:23 +0000
ROA not after: Thu 15 May 2025 15:56:23 +0000
asID: 54801
IP address blocks: 154.91.224.0/19 maxlen: 24
154.214.32.0/19 maxlen: 24
154.216.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98247 (0x17fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 15:56:23 2025 GMT
Not After : May 15 15:56:23 2025 GMT
Subject: CN=681e25ac-a32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:8b:5d:8f:e1:cb:8e:27:98:77:2e:22:ae:
bf:05:a8:63:dc:cd:19:cd:8a:c7:51:b4:93:41:cc:
cb:8d:d5:98:59:62:fb:c6:27:5d:ae:ce:87:2f:ee:
79:c3:fd:0f:72:3d:ea:51:38:67:63:a6:8c:24:1f:
b4:10:32:d2:cf:03:92:0f:5b:de:9a:1e:79:4a:8f:
b7:71:07:36:b5:c5:f5:af:89:b6:c8:8f:fe:e8:4c:
a5:63:f3:fd:c8:ea:a6:7c:e1:1c:39:24:8e:6d:7a:
ac:c1:ee:d9:05:41:72:85:2f:c0:64:42:d0:0d:29:
08:ec:63:0d:78:55:07:18:f1:13:88:50:3a:3f:7c:
25:86:86:c0:31:f4:bf:ef:fa:f5:3f:14:11:16:eb:
2e:95:26:ab:0a:a2:eb:7e:d9:ab:92:91:b8:25:a0:
72:c5:d8:a9:91:6a:cd:d6:a2:92:10:93:d8:06:8b:
2c:b1:bb:2a:7d:1b:ed:62:69:c4:54:8d:32:ef:1d:
0b:c9:a4:db:08:e9:8e:15:27:cc:58:fb:a5:ec:86:
5e:67:bf:2f:87:71:38:54:3f:ef:b6:d0:de:9a:65:
e5:94:0f:38:ca:3e:d8:ac:20:25:cd:40:08:7c:52:
d0:ea:87:ed:ac:4d:57:60:69:b1:ce:e9:39:27:5e:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:61:5C:A0:DB:98:A9:F3:3A:D1:87:C4:4C:7F:E3:E7:D6:2B:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AAB892A2CEE11F08961088EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
154.214.32.0/19
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
69:41:75:9e:a7:32:d6:9e:6e:e4:76:c3:21:04:4c:53:63:52:
47:b8:87:26:23:1e:04:27:c3:9b:7c:eb:88:f2:7d:7b:8e:af:
db:4d:9a:79:27:26:9e:f5:14:40:d3:b2:b3:7d:67:cb:65:7b:
74:17:9a:09:26:55:7c:9f:86:b2:44:23:a7:27:a0:19:c8:ed:
c9:dd:3e:ae:29:f0:a6:60:72:b2:d5:0d:5a:64:6b:b8:f5:82:
37:97:c7:3a:b7:c7:cb:33:51:63:b6:85:41:60:b8:3a:f4:97:
74:dd:bb:6c:76:51:47:b1:e8:9d:91:c2:7f:93:6a:28:6b:70:
18:45:d5:d0:20:cc:72:eb:20:63:94:f8:d3:f0:7e:ea:3e:a7:
eb:a9:a3:e0:28:87:95:fb:c2:a1:2d:ab:e5:d5:9e:16:92:b0:
86:cb:2d:41:0f:4c:a2:b1:a8:e0:a4:c3:44:15:92:4d:c7:eb:
58:31:38:74:34:94:0c:f1:67:72:bc:6c:e6:f5:b8:8a:5f:55:
88:92:d9:5a:42:c9:69:f7:7d:05:c1:24:e9:fa:cc:65:bd:30:
d8:fa:13:2f:0c:74:80:d0:43:8f:5a:3e:00:7c:83:cd:a7:72:
58:35:14:3e:d4:93:a4:db:20:ba:cc:8e:1f:b2:56:d5:1c:68:
bb:0a:b0:19
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAX/HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA5MTU1NjIzWhcNMjUwNTE1MTU1NjIzWjAYMRYw
FAYDVQQDEw02ODFlMjVhYy1hMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsXKLXY/hy44nmHcuIq6/Bahj3M0ZzYrHUbSTQczLjdWYWWL7xiddrs6H
L+55w/0Pcj3qUThnY6aMJB+0EDLSzwOSD1vemh55So+3cQc2tcX1r4m2yI/+6Eyl
Y/P9yOqmfOEcOSSObXqswe7ZBUFyhS/AZELQDSkI7GMNeFUHGPETiFA6P3wlhobA
MfS/7/r1PxQRFusulSarCqLrftmrkpG4JaByxdipkWrN1qKSEJPYBosssbsqfRvt
YmnEVI0y7x0LyaTbCOmOFSfMWPul7IZeZ78vh3E4VD/vttDemmXllA84yj7YrCAl
zUAIfFLQ6oftrE1XYGmxzuk5J14V3wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMJE
YVyg25ip8zrRh8RMf+Pn1isEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQUFCODkyQTJDRUUxMUYwODk2MTA4OEVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFmlvgAwQFmtYgAwQGmtiA
MA0GCSqGSIb3DQEBCwUAA4IBAQBpQXWepzLWnm7kdsMhBExTY1JHuIcmIx4EJ8Ob
fOuI8n17jq/bTZp5Jyae9RRA07KzfWfLZXt0F5oJJlV8n4ayRCOnJ6AZyO3J3T6u
KfCmYHKy1Q1aZGu49YI3l8c6t8fLM1FjtoVBYLg69Jd03btsdlFHseidkcJ/k2oo
a3AYRdXQIMxy6yBjlPjT8H7qPqfrqaPgKIeV+8KhLavl1Z4WkrCGyy1BD0yisajg
pMNEFZJNx+tYMTh0NJQM8WdyvGzm9biKX1WIktlaQslp930FwSTp+sxlvTDY+hMv
DHSA0EOPWj4AfIPNp3JYNRQ+1JOk2yC6zI4fslbVHGi7CrAZ
-----END CERTIFICATE-----
Generated at Thu May 15 23:49:09 2025 by rpki-client