Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ED80F1F236ED11F09AEE097CDAE4EC9C.roa
File: ED80F1F236ED11F09AEE097CDAE4EC9C.roa (raw, json)
Hash identifier: +QWDTglsSOupKtZY0iYqH5P46qyhTQ3ZvyAWfEYvlDA=
Subject key identifier: 0A:95:15:78:92:96:E3:90:04:2E:E4:DA:FF:83:6E:56:CC:14:86:EC
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 06E5
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ED80F1F236ED11F09AEE097CDAE4EC9C.roa
Signing time: Thu 22 May 2025 09:19:57 +0000
ROA not before: Thu 22 May 2025 09:19:53 +0000
ROA not after: Mon 02 Jun 2025 09:19:53 +0000
asID: 23470
IP address blocks: 102.177.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 22 09:19:53 2025 GMT
Not After : Jun 2 09:19:53 2025 GMT
Subject: CN=682eec3d-505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ca:54:d2:31:c2:59:c0:a2:6c:f6:6c:18:01:
a7:85:36:f1:00:a9:7f:67:b5:4a:07:67:ff:95:28:
e5:6b:2b:ff:57:c2:2d:08:d7:88:5b:10:3b:ca:9d:
b3:5f:62:51:d8:bd:e3:2b:9a:0c:b2:12:c3:b8:9e:
1e:73:71:56:f2:ac:05:94:5e:b7:e2:c9:b4:d9:3c:
36:a1:f9:87:dd:f6:a1:cd:9f:7f:00:42:29:25:49:
63:db:70:7e:4d:f6:99:06:9c:85:4c:5c:59:0a:fb:
65:5e:d4:e6:8c:a2:94:6f:fd:d0:32:05:6f:59:f4:
15:72:c5:c8:01:69:05:f4:78:ba:d7:01:ec:63:59:
a2:eb:d8:3e:3e:c0:4e:16:f2:38:e3:f8:b9:e3:c9:
04:1c:56:1e:e2:c6:91:1f:09:86:ab:7d:aa:5d:f1:
ef:ef:3b:33:ec:f8:a0:ba:c7:7f:8d:e1:4d:4a:16:
64:c6:4a:80:da:d8:62:c6:2c:f7:64:41:72:3f:0f:
15:9b:56:6d:26:f3:e8:d7:58:84:72:97:f7:1b:4f:
d3:1e:12:20:56:71:4d:00:26:b0:34:d7:31:50:48:
c8:72:f1:63:68:87:dd:b5:52:65:07:84:b7:b2:db:
3a:05:79:71:f6:78:b9:bb:3f:a4:10:d5:b1:86:4d:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:15:78:92:96:E3:90:04:2E:E4:DA:FF:83:6E:56:CC:14:86:EC
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ED80F1F236ED11F09AEE097CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1a:c6:26:8d:98:2f:5f:9d:14:99:26:a5:1f:7a:a1:26:8b:
0e:81:67:f1:e1:4a:24:7e:56:6a:cb:23:05:d8:99:33:26:ed:
3b:ec:09:51:91:9d:68:1d:2b:bf:2a:d9:e7:97:bf:76:2b:b0:
ad:27:1e:f4:fb:62:83:a8:63:2d:23:d6:82:2a:07:7a:c5:0f:
ae:43:d2:b6:0b:6a:81:41:a8:28:cd:53:16:69:2c:eb:a6:f1:
57:2e:17:b6:e4:a7:f7:0c:92:e2:3a:b8:39:66:cb:b1:0e:8c:
35:03:1a:2c:e6:f1:bf:3e:a0:38:f3:08:b6:6d:ba:b9:1e:a1:
e5:fe:fd:38:9b:f3:10:83:05:6a:e3:37:60:4c:16:8e:ee:01:
66:92:57:58:06:c4:fa:99:17:ed:22:d5:df:78:18:1d:3f:88:
f1:00:74:5f:ca:4c:12:b6:42:85:3f:1e:45:30:8a:d8:2d:e4:
ed:bf:10:18:ce:f3:35:46:27:cf:27:2f:83:d1:86:5f:66:59:
59:dd:84:cd:b5:ec:e6:d9:47:b6:38:c0:47:db:f1:75:cb:b2:
cc:01:ee:69:9c:12:d9:8a:88:5d:34:99:b0:5a:89:36:38:ff:
49:bc:94:1d:ba:8b:1c:2d:79:69:c4:76:3f:5e:51:24:6c:75:
6b:ca:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:05:37 2025 by rpki-client