Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00BE9A82F8DF11EF9B4CBE64762E951A.roa
File: 00BE9A82F8DF11EF9B4CBE64762E951A.roa (raw, json)
Hash identifier: Stw8yX4EMmVKwjFBm2fvRAh+hEjvBTPJf1imfmohypk=
Subject key identifier: AA:3A:7C:44:24:F3:51:D3:B2:1E:08:DA:D0:48:59:A7:BA:07:19:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0171A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00BE9A82F8DF11EF9B4CBE64762E951A.roa
Signing time: Tue 04 Mar 2025 09:56:54 +0000
ROA not before: Tue 04 Mar 2025 09:56:50 +0000
ROA not after: Mon 31 Mar 2025 09:56:50 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94624 (0x171a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 4 09:56:50 2025 GMT
Not After : Mar 31 09:56:50 2025 GMT
Subject: CN=67c6ce66-3cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:c5:7e:37:03:ee:ec:d3:5a:be:71:7f:13:
21:7c:e0:ac:9f:b3:3f:9a:bd:4d:9a:28:ab:13:f7:
13:0d:19:ae:16:e0:6a:a8:ec:e2:69:a1:aa:25:de:
2e:ea:64:cb:1f:7f:5b:6a:6e:85:29:dc:cc:19:34:
b5:43:d7:5d:9a:b7:eb:b5:f6:1c:f5:5d:07:4c:0e:
1e:72:43:91:fb:dd:05:1d:22:30:87:24:3e:c5:44:
59:d0:d3:3f:92:d7:23:21:9a:92:e7:38:4f:1b:06:
f3:5c:97:40:eb:bb:45:46:cc:25:f3:50:a0:d9:a8:
74:24:ff:10:cf:06:c1:1f:61:6e:0d:ae:cb:f9:8d:
82:77:5b:0a:27:11:33:b3:6c:6b:f2:40:04:b6:35:
6c:d9:2f:79:fa:1e:cc:f0:e5:9b:0a:21:f7:c5:22:
f0:cc:68:b5:37:3b:bc:68:b4:d1:5b:84:3d:5d:30:
bd:2e:3a:68:29:4b:cd:c8:41:8e:7a:7e:31:76:0b:
a5:2e:0d:13:74:17:21:85:ef:c3:14:1a:99:29:94:
25:ff:a2:80:fc:20:bb:57:ce:07:1b:cb:8d:43:75:
85:63:e5:b0:b1:f0:3c:f1:4e:e3:e7:66:22:73:4f:
e3:ad:63:ef:3e:af:6c:ac:68:7f:b7:56:9d:6a:2c:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:7C:44:24:F3:51:D3:B2:1E:08:DA:D0:48:59:A7:BA:07:19:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00BE9A82F8DF11EF9B4CBE64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0/24
154.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:6e:19:2a:b0:53:2b:4c:24:b5:84:cd:87:82:44:0b:aa:98:
d7:9b:cb:81:b5:34:88:e9:28:a8:ff:0b:bd:30:f5:52:cf:7d:
67:58:10:de:78:23:e2:20:09:54:15:75:3d:c8:f2:f8:cd:69:
f9:d6:1e:5f:8e:0d:c3:2d:01:f7:21:29:fa:5a:d1:81:19:f9:
72:5a:df:1e:e1:2d:0e:7d:a0:73:43:78:54:69:d2:0f:19:a5:
9f:6e:2c:7d:1e:ce:d8:66:2b:19:92:75:09:37:3c:63:c0:35:
d1:fb:04:0e:2e:4c:23:fa:a0:df:38:b5:ec:c0:a6:d6:f8:85:
d1:a4:48:84:66:d8:f5:ec:82:90:da:e7:6f:84:eb:2d:e2:e5:
e3:69:72:7d:f3:1c:4d:ff:45:ec:9d:df:0e:24:4e:22:b4:c8:
c6:2d:dc:6c:20:b1:42:0f:9a:b1:26:b1:bc:91:4a:5f:9b:8a:
77:f5:b0:05:63:4a:0f:21:e5:26:87:fc:98:f3:16:4b:a6:d2:
65:e5:01:f5:b2:ff:82:9a:68:ea:f1:77:7b:2c:42:0b:ff:b1:
58:a1:40:39:8f:61:51:4b:a0:c5:95:d1:10:12:b1:c1:24:a9:
e9:34:66:10:45:95:b0:48:d2:11:2f:7b:e5:ff:1f:a8:63:3a:
1c:08:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:41:11 2025 by rpki-client