Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257B433A1A8F11F0AF9397D46DB8BCC6.roa
File: 257B433A1A8F11F0AF9397D46DB8BCC6.roa (raw, json)
Hash identifier: IPXK2UydIXCn9wHkz2RRk1Tl0yKgEDliRX4oDCBP9ok=
Subject key identifier: 88:49:A0:E6:A5:71:A3:01:1B:09:9A:4D:B8:73:D9:07:CE:5C:6B:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01795A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257B433A1A8F11F0AF9397D46DB8BCC6.roa
Signing time: Wed 16 Apr 2025 06:50:56 +0000
ROA not before: Wed 16 Apr 2025 06:50:51 +0000
ROA not after: Thu 24 Apr 2025 06:50:51 +0000
asID: 7018
IP address blocks: 154.83.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96602 (0x1795a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 06:50:51 2025 GMT
Not After : Apr 24 06:50:51 2025 GMT
Subject: CN=67ff5350-496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:4f:ca:b2:ad:b8:78:3e:b6:6c:bc:00:d4:
52:b6:8d:dd:d1:2b:67:6b:35:64:56:a9:c7:76:cf:
4d:77:57:01:16:42:5f:0c:03:20:a5:de:11:e5:90:
fc:2d:7f:d0:a6:f0:cc:49:68:44:10:a3:96:55:e7:
99:31:46:1a:65:f0:59:f8:7e:bd:df:d2:ad:c8:17:
07:07:e0:dd:5c:20:2c:ad:4f:5e:b9:a7:da:58:02:
ab:81:c4:a2:db:70:4c:4e:f9:00:d0:cc:5f:29:3a:
60:c4:20:69:2c:8c:c9:ef:ec:a2:ce:27:28:be:8a:
d5:3a:db:3d:5b:bb:c6:dc:61:db:c0:8a:6d:13:5b:
40:54:65:7d:84:1a:6e:0d:7f:51:74:00:a6:85:e2:
08:8e:a3:8a:f1:46:34:ac:87:3b:9c:70:97:77:88:
b0:0f:e5:90:9a:30:01:13:cb:07:61:2c:66:5f:ec:
32:10:0d:89:ab:b8:9b:cc:0e:d5:b7:52:dd:99:dd:
20:d2:c6:ca:d5:1a:88:07:89:c6:02:10:2c:35:f3:
c5:41:78:73:fb:f8:04:62:46:ea:e6:55:df:ce:6c:
45:9b:3a:58:ac:0d:61:8c:19:66:cf:7e:16:b2:5c:
37:87:c2:2f:cb:ed:58:12:29:c3:8f:30:4d:eb:58:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:A0:E6:A5:71:A3:01:1B:09:9A:4D:B8:73:D9:07:CE:5C:6B:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257B433A1A8F11F0AF9397D46DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.214.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:19:08:29:2f:2a:19:2e:ef:f2:0d:f8:26:7c:5b:b6:10:5f:
7d:f4:87:ef:f0:10:d2:24:a8:ef:b1:a1:23:7c:aa:78:95:29:
63:6d:ba:b0:37:b3:96:be:65:09:df:13:41:c5:aa:73:8e:99:
99:98:90:81:56:82:6f:5f:91:74:7c:f2:2f:e9:41:a2:7d:a5:
d6:43:99:4f:7e:74:91:a5:4d:0c:55:78:c8:a4:21:04:c0:92:
39:4a:23:08:59:2b:7a:48:7f:23:02:ea:57:ce:75:c1:01:f4:
15:d8:5b:62:e1:35:64:5b:10:7a:00:a1:07:ba:3f:f0:e5:c5:
a6:22:91:a1:8a:9f:37:6b:2b:2a:2d:09:65:8b:8a:5e:42:0e:
fe:36:72:5c:b8:2d:46:1e:65:4c:76:46:01:2f:4a:88:01:b7:
28:ec:61:2f:11:96:d2:dc:9b:88:82:72:f1:6f:04:6c:e6:f5:
ee:8c:a5:f3:7c:1a:41:98:32:da:69:af:13:10:e9:9f:75:ba:
9e:9a:53:dc:61:56:84:90:99:fc:cd:39:66:9c:41:65:86:23:
e0:3a:0a:6b:c2:66:d9:0e:f0:50:e2:ec:7d:34:01:e5:84:50:
cb:20:6c:39:cd:30:5f:fa:49:50:e8:d0:8e:1b:2d:fc:a8:10:
37:d5:04:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXlaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE2MDY1MDUxWhcNMjUwNDI0MDY1MDUxWjAYMRYw
FAYDVQQDEw02N2ZmNTM1MC00OTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxv1PyrKtuHg+tmy8ANRSto3d0StnazVkVqnHds9Nd1cBFkJfDAMgpd4R
5ZD8LX/QpvDMSWhEEKOWVeeZMUYaZfBZ+H6939KtyBcHB+DdXCAsrU9euafaWAKr
gcSi23BMTvkA0MxfKTpgxCBpLIzJ7+yizicovorVOts9W7vG3GHbwIptE1tAVGV9
hBpuDX9RdACmheIIjqOK8UY0rIc7nHCXd4iwD+WQmjABE8sHYSxmX+wyEA2Jq7ib
zA7Vt1Ldmd0g0sbK1RqIB4nGAhAsNfPFQXhz+/gEYkbq5lXfzmxFmzpYrA1hjBlm
z34Wslw3h8Ivy+1YEinDjzBN61g5hQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIhJ
oOalcaMBGwmaTbhz2QfOXGuqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTdCNDMzQTFBOEYxMUYwQUY5Mzk3RDQ2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlPWMA0GCSqGSIb3DQEB
CwUAA4IBAQCbGQgpLyoZLu/yDfgmfFu2EF999Ifv8BDSJKjvsaEjfKp4lSljbbqw
N7OWvmUJ3xNBxapzjpmZmJCBVoJvX5F0fPIv6UGifaXWQ5lPfnSRpU0MVXjIpCEE
wJI5SiMIWSt6SH8jAupXznXBAfQV2Fti4TVkWxB6AKEHuj/w5cWmIpGhip83aysq
LQlli4peQg7+NnJcuC1GHmVMdkYBL0qIAbco7GEvEZbS3JuIgnLxbwRs5vXujKXz
fBpBmDLaaa8TEOmfdbqemlPcYVaEkJn8zTlmnEFlhiPgOgprwmbZDvBQ4ux9NAHl
hFDLIGw5zTBf+klQ6NCOGy38qBA31QTr
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:11:48 2025 by rpki-client on console.sobornost.net