Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1C767181A8D11F090ED5DCB6DB8BCC6.roa
File: A1C767181A8D11F090ED5DCB6DB8BCC6.roa (raw, json)
Hash identifier: bKUH85TGmYpv5pUKX8mN8eDsrLHHPk0XFOaO+YwW778=
Subject key identifier: 4F:88:5E:61:F7:FF:64:92:42:53:FA:A1:10:DF:31:4E:ED:A9:EC:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017958
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1C767181A8D11F090ED5DCB6DB8BCC6.roa
Signing time: Wed 16 Apr 2025 06:40:06 +0000
ROA not before: Wed 16 Apr 2025 06:40:00 +0000
ROA not after: Fri 25 Apr 2025 06:40:00 +0000
asID: 22724
IP address blocks: 154.89.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96600 (0x17958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 06:40:00 2025 GMT
Not After : Apr 25 06:40:00 2025 GMT
Subject: CN=67ff50c6-57a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:bb:aa:74:a6:63:86:2b:0b:9b:21:05:a9:
75:03:d5:00:10:c4:f4:08:ab:7e:9d:bb:5a:85:cd:
6f:75:51:2b:4d:c3:6d:d1:a5:2a:34:0c:2e:32:e6:
4c:87:08:c1:bb:b3:b7:ac:94:e8:ae:f0:3c:e7:1f:
bc:92:14:94:c0:55:b6:56:6c:59:83:22:49:78:ac:
97:bc:99:ea:21:bf:96:5b:fe:8e:fd:14:80:fd:82:
53:b6:e8:63:d6:36:16:71:52:23:43:7a:2f:bc:2a:
35:a9:72:d7:5e:d1:a4:e4:3a:0e:4f:e1:7c:8c:fc:
7c:3b:d5:2f:66:97:e9:0b:95:67:c8:1d:82:73:c5:
ef:b4:23:61:cb:ba:fd:da:04:43:0d:a6:31:2a:6d:
f8:eb:8b:ba:67:54:17:ec:d6:c1:13:ee:67:86:4b:
41:2f:41:9f:c0:2d:e2:28:67:fe:02:a0:c5:cd:87:
69:3a:b9:5c:56:28:fc:d4:ce:65:6a:21:8c:49:6f:
a8:cc:79:67:43:c7:b8:e1:67:de:da:fa:e8:fe:2d:
f9:ce:2e:8a:0f:7c:bb:dc:b9:e2:96:a0:84:d1:09:
6a:69:73:8b:3f:b0:dd:53:9b:e1:55:cd:25:1e:8e:
b9:ed:4d:4b:f5:33:ed:31:6d:52:0e:be:1f:05:05:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:5E:61:F7:FF:64:92:42:53:FA:A1:10:DF:31:4E:ED:A9:EC:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1C767181A8D11F090ED5DCB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
76:e1:cf:0c:d3:dc:b1:24:8e:69:3d:ce:01:6a:29:ee:02:af:
6e:56:91:ca:77:b8:2d:ac:01:3f:b4:fa:cf:c8:34:5d:eb:45:
36:4c:69:04:3e:b3:a2:32:f7:e0:38:57:76:48:90:af:b4:ae:
39:fb:f5:f8:43:07:4a:f1:89:ee:66:71:5d:4f:f2:b0:98:e1:
e7:ef:bd:12:b1:7d:77:41:ed:0d:95:c1:95:6d:4f:ae:6a:1e:
1e:73:70:d6:23:ce:13:aa:d2:e3:a4:fc:ac:8a:66:91:69:d6:
95:0c:bf:a0:6c:92:0f:29:df:09:8f:27:61:3a:33:72:56:67:
bb:4f:36:84:aa:29:81:26:c6:de:db:da:a5:e8:dd:7e:9a:73:
63:16:42:cf:64:96:1b:14:d4:91:73:80:37:1d:1f:f7:23:83:
4d:75:1b:f5:1f:63:9b:8f:3a:78:8c:88:eb:b9:fc:64:24:c9:
70:71:95:e8:39:4c:f3:33:5b:5e:b4:90:c4:74:ec:e3:6d:a5:
b0:86:9d:3b:d9:79:fd:25:34:2f:f3:69:26:79:5f:42:17:db:
d6:23:f6:01:a3:6f:3d:29:5f:00:a3:0b:08:a0:c3:94:6d:e8:
93:2c:d8:bb:50:b2:5c:94:20:0f:54:bb:5f:ce:a0:cc:d8:ce:
7e:07:d7:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXlYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE2MDY0MDAwWhcNMjUwNDI1MDY0MDAwWjAYMRYw
FAYDVQQDEw02N2ZmNTBjNi01N2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz4S7qnSmY4YrC5shBal1A9UAEMT0CKt+nbtahc1vdVErTcNt0aUqNAwu
MuZMhwjBu7O3rJTorvA85x+8khSUwFW2VmxZgyJJeKyXvJnqIb+WW/6O/RSA/YJT
tuhj1jYWcVIjQ3ovvCo1qXLXXtGk5DoOT+F8jPx8O9UvZpfpC5VnyB2Cc8XvtCNh
y7r92gRDDaYxKm3464u6Z1QX7NbBE+5nhktBL0GfwC3iKGf+AqDFzYdpOrlcVij8
1M5laiGMSW+ozHlnQ8e44Wfe2vro/i35zi6KD3y73LnilqCE0QlqaXOLP7DdU5vh
Vc0lHo657U1L9TPtMW1SDr4fBQUCaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE+I
XmH3/2SSQlP6oRDfMU7tqezgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMUM3NjcxODFBOEQxMUYwOTBFRDVEQ0I2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlkQMA0GCSqGSIb3DQEB
CwUAA4IBAQB24c8M09yxJI5pPc4BainuAq9uVpHKd7gtrAE/tPrPyDRd60U2TGkE
PrOiMvfgOFd2SJCvtK45+/X4QwdK8YnuZnFdT/KwmOHn770SsX13Qe0NlcGVbU+u
ah4ec3DWI84TqtLjpPysimaRadaVDL+gbJIPKd8JjydhOjNyVme7TzaEqimBJsbe
29ql6N1+mnNjFkLPZJYbFNSRc4A3HR/3I4NNdRv1H2Objzp4jIjrufxkJMlwcZXo
OUzzM1tetJDEdOzjbaWwhp072Xn9JTQv82kmeV9CF9vWI/YBo289KV8AowsIoMOU
beiTLNi7ULJclCAPVLtfzqDM2M5+B9c+
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:50 2025 by rpki-client on console.sobornost.net