Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D334A286107711F0BF123EBE762E951A.roa
File: D334A286107711F0BF123EBE762E951A.roa (raw, json)
Hash identifier: aLaiYBa+q7knrIvAmpaT0/xCigxPxPe8mwsAbVBJfao=
Subject key identifier: 5A:5B:3B:5C:D2:96:2F:47:F4:13:77:D7:6B:4A:68:E7:37:09:EF:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01776B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D334A286107711F0BF123EBE762E951A.roa
Signing time: Thu 03 Apr 2025 10:38:48 +0000
ROA not before: Thu 03 Apr 2025 10:38:44 +0000
ROA not after: Mon 14 Apr 2025 10:38:44 +0000
asID: 5065
IP address blocks: 154.82.10.0/24 maxlen: 24
154.83.200.0/24 maxlen: 24
154.83.201.0/24 maxlen: 24
154.83.202.0/24 maxlen: 24
154.83.204.0/24 maxlen: 24
154.83.205.0/24 maxlen: 24
154.83.206.0/24 maxlen: 24
154.85.110.0/24 maxlen: 24
154.85.120.0/22 maxlen: 24
154.93.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96107 (0x1776b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 10:38:44 2025 GMT
Not After : Apr 14 10:38:44 2025 GMT
Subject: CN=67ee6538-82ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:34:48:80:ae:53:47:99:63:64:f7:b5:fe:
88:51:d8:7d:f8:96:03:72:11:d2:d9:df:b0:f2:c8:
9f:7e:c9:f8:c0:c6:24:0b:c5:4e:83:51:f9:67:82:
cc:1d:4d:c8:c0:11:28:2e:10:e7:33:6c:42:14:0b:
e2:f3:b3:4e:a7:3d:bc:65:27:12:97:0e:20:69:25:
c8:83:d2:79:03:c4:5e:99:fc:b9:63:1b:e1:45:6d:
1e:37:96:65:dd:93:4a:a6:6a:56:fe:55:29:01:3b:
35:ba:4e:c2:94:b2:eb:f7:90:de:93:ec:41:d5:00:
86:7b:2e:d4:12:06:d9:54:3b:62:d1:48:c5:df:0c:
49:70:2c:c9:9b:52:e3:c7:c5:a2:3d:4b:8a:0f:ab:
7a:43:2b:25:b5:ff:af:5e:79:bb:a3:4b:57:ec:c9:
34:c0:5a:6a:15:52:1c:ab:2c:fa:c3:29:8c:f6:64:
fb:67:84:cc:f1:26:92:a4:a0:e2:4c:dc:a1:3f:f4:
12:ac:85:10:90:ab:19:47:d6:e1:d9:dc:9d:97:ec:
1d:9b:ce:f2:96:5c:7e:fe:c3:b2:80:e5:8b:ae:75:
65:e1:06:f4:ee:9e:1b:2b:da:4f:14:c0:11:eb:5b:
cf:52:8d:94:13:62:ea:43:6e:4c:80:06:b6:58:5e:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:3B:5C:D2:96:2F:47:F4:13:77:D7:6B:4A:68:E7:37:09:EF:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D334A286107711F0BF123EBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.10.0/24
154.83.200.0-154.83.202.255
154.83.204.0-154.83.206.255
154.85.110.0/24
154.85.120.0/22
154.93.16.0/22
Signature Algorithm: sha256WithRSAEncryption
25:d2:0e:3f:b7:ca:93:d6:0b:90:67:30:53:60:91:05:57:cc:
6d:b9:c2:d7:26:69:53:c5:33:72:95:0e:03:f4:4f:b1:a2:b3:
79:82:13:a3:32:9e:e3:c4:d9:6c:61:cf:10:fa:45:03:74:ab:
6c:21:d0:68:81:3b:b9:80:da:a5:8d:b6:40:81:81:41:ef:64:
7b:30:aa:42:52:24:14:18:58:45:64:28:51:42:a9:29:74:63:
69:9d:2a:0d:82:5d:ac:fa:79:b8:dd:ec:90:0a:6c:41:9b:37:
46:d7:a5:7c:5e:7f:89:31:bb:4a:7b:e4:09:2b:1d:e3:84:10:
90:a7:76:4d:1d:0d:a7:ae:4c:6f:8a:38:18:de:d1:35:c2:f3:
de:74:68:ed:6b:83:c1:35:af:35:51:de:52:f3:40:6b:41:79:
62:dd:a1:37:fb:87:67:de:d9:64:b1:93:ee:2b:03:3d:20:40:
85:fa:f7:a4:a3:27:59:a7:a8:2b:94:ee:33:cb:a0:4b:32:f9:
48:86:8d:cc:60:5a:c7:63:42:6c:3b:28:23:d1:3c:9d:90:b3:
ba:64:e5:fa:e6:27:2f:f4:ed:b4:c0:18:32:fb:89:89:89:fa:
eb:b7:ba:c4:4b:67:28:66:9f:43:de:4f:ab:68:0a:3b:4d:69:
74:00:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:04:47 2025 by rpki-client