Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/644B7110558211F0BE7C707FDAE4EC9C.roa
File: 644B7110558211F0BE7C707FDAE4EC9C.roa (raw, json)
Hash identifier: WtJJpJzSrWN7bN8XcjbDvhanW1wHu1IjOGTtAAKCUvM=
Subject key identifier: ED:6F:BE:42:AA:96:C1:25:81:F7:FE:C5:37:C0:2D:5A:A5:BA:E3:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018977
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/644B7110558211F0BE7C707FDAE4EC9C.roa
Signing time: Mon 30 Jun 2025 07:18:17 +0000
ROA not before: Mon 30 Jun 2025 07:18:12 +0000
ROA not after: Fri 04 Jul 2025 07:18:12 +0000
asID: 7029
IP address blocks: 154.194.16.0/21 maxlen: 24
154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100727 (0x18977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 07:18:12 2025 GMT
Not After : Jul 4 07:18:12 2025 GMT
Subject: CN=68623a39-c7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:e4:ca:27:c7:8d:1b:f9:e1:fc:2e:c8:29:
43:9f:64:60:a0:c1:5c:39:5e:c2:16:56:39:43:3d:
9d:ae:7b:a8:f9:71:9e:96:c3:56:c2:45:1d:b8:98:
7e:5b:27:ac:83:81:90:e7:2f:cf:fa:3a:6c:46:33:
2f:d4:aa:f5:d3:0d:7b:e4:4c:22:96:20:93:9a:ca:
a3:53:07:c0:cd:06:e6:c8:1a:18:0b:57:9b:53:f9:
3f:09:ad:3f:60:bf:94:75:1f:60:63:45:a4:94:8e:
e5:91:c2:2e:dd:a1:b2:3c:dc:8e:13:24:8c:9c:e1:
14:db:77:a2:8b:1f:1d:8f:d9:9f:81:50:0b:5c:c6:
7f:7b:82:9f:db:d5:be:a7:f3:0c:5a:78:45:50:59:
e7:b6:cd:d2:1d:47:1c:b3:f5:ac:47:b2:bb:83:7a:
ef:d1:c9:3a:61:ad:d2:57:63:f4:ef:4c:7a:b4:da:
01:c0:24:ec:c0:7d:ad:dd:5c:dc:1c:e8:da:ad:b5:
92:5e:be:5f:cf:ed:76:d7:c4:28:e7:70:45:b9:1f:
52:25:12:73:0a:8f:fc:8b:dc:10:dd:d6:8c:a6:b7:
18:80:6f:cc:2d:a6:1d:e1:f4:95:5a:41:f3:36:38:
95:3f:f3:ba:1d:21:d2:63:75:c6:47:28:50:48:da:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:BE:42:AA:96:C1:25:81:F7:FE:C5:37:C0:2D:5A:A5:BA:E3:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/644B7110558211F0BE7C707FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0-154.194.27.255
Signature Algorithm: sha256WithRSAEncryption
3d:0a:d7:1e:92:0a:e8:3c:97:db:c7:dc:46:6c:4c:06:e3:5c:
cd:48:b4:99:75:85:8c:f3:f3:14:11:0a:b6:72:b2:d3:7b:53:
ec:ba:9c:90:34:60:47:0f:68:86:23:a0:08:ab:1e:98:7b:31:
ae:08:97:c3:da:0b:dc:4c:34:91:39:ba:d8:00:dd:03:f1:60:
9e:4d:56:0f:fc:40:6a:ba:13:1f:e2:b3:49:7e:a0:68:a3:91:
2f:15:81:cd:71:5c:8d:48:7d:5f:90:a8:54:f9:c1:d7:9e:ae:
50:8a:12:31:e2:ab:11:1a:e6:84:0a:f5:cb:a6:31:87:71:ec:
b7:e8:cc:ae:a5:ac:45:ae:ea:4c:ac:d1:ef:d6:c9:8a:ed:25:
25:67:ba:2f:8f:5f:dd:69:6d:26:70:90:b6:53:ca:26:05:31:
bc:fd:c7:37:fb:be:fe:5a:60:97:ca:51:bc:79:27:97:82:55:
6a:6f:2f:6c:50:a8:17:2d:6d:d0:e9:c9:8e:b3:01:6d:79:70:
72:4a:28:10:5f:fd:f3:43:d8:3b:2a:a2:8c:ec:66:47:82:00:
4d:39:64:cc:82:30:e8:ea:4c:cf:dc:d1:14:7b:f6:b7:42:9b:
66:c4:79:2a:3b:3e:5f:55:b3:3b:b5:96:07:08:dc:1c:49:3a:
72:49:d8:f3
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYl3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjMwMDcxODEyWhcNMjUwNzA0MDcxODEyWjAYMRYw
FAYDVQQDEw02ODYyM2EzOS1jN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzwjkyifHjRv54fwuyClDn2RgoMFcOV7CFlY5Qz2drnuo+XGelsNWwkUd
uJh+Wyesg4GQ5y/P+jpsRjMv1Kr10w175EwiliCTmsqjUwfAzQbmyBoYC1ebU/k/
Ca0/YL+UdR9gY0WklI7lkcIu3aGyPNyOEySMnOEU23eiix8dj9mfgVALXMZ/e4Kf
29W+p/MMWnhFUFnnts3SHUccs/WsR7K7g3rv0ck6Ya3SV2P070x6tNoBwCTswH2t
3VzcHOjarbWSXr5fz+1218Qo53BFuR9SJRJzCo/8i9wQ3daMprcYgG/MLaYd4fSV
WkHzNjiVP/O6HSHSY3XGRyhQSNoMgwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFO1v
vkKqlsElgff+xTfALVqluuN7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NDRCNzExMDU1ODIxMUYwQkU3QzcwN0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASawhADBAKawhgwDQYJ
KoZIhvcNAQELBQADggEBAD0K1x6SCug8l9vH3EZsTAbjXM1ItJl1hYzz8xQRCrZy
stN7U+y6nJA0YEcPaIYjoAirHph7Ma4Il8PaC9xMNJE5utgA3QPxYJ5NVg/8QGq6
Ex/is0l+oGijkS8Vgc1xXI1IfV+QqFT5wdeerlCKEjHiqxEa5oQK9cumMYdx7Lfo
zK6lrEWu6kys0e/WyYrtJSVnui+PX91pbSZwkLZTyiYFMbz9xzf7vv5aYJfKUbx5
J5eCVWpvL2xQqBctbdDpyY6zAW15cHJKKBBf/fND2DsqoozsZkeCAE05ZMyCMOjq
TM/c0RR79rdCm2bEeSo7Pl9Vszu1lgcI3BxJOnJJ2PM=
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:51:38 2025 by rpki-client