Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02246774F83211EF8ECB3148762E951A.roa
File: 02246774F83211EF8ECB3148762E951A.roa (raw, json)
Hash identifier: b04gRN5/yYAvjx3O7F073clHqVK3iG5BVwzFs9Wjnu4=
Subject key identifier: E7:2B:07:63:D6:AC:B9:A9:78:79:B8:CE:54:F9:61:8C:79:FD:EE:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02246774F83211EF8ECB3148762E951A.roa
Signing time: Mon 03 Mar 2025 13:18:34 +0000
ROA not before: Mon 03 Mar 2025 13:18:29 +0000
ROA not after: Thu 27 Mar 2025 13:18:29 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.38.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
154.203.224.0/24 maxlen: 24
154.203.225.0/24 maxlen: 24
154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94411 (0x170cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 13:18:29 2025 GMT
Not After : Mar 27 13:18:29 2025 GMT
Subject: CN=67c5ac2a-0171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:78:85:2d:2b:7d:37:83:eb:54:b2:65:a2:
d9:ee:31:da:07:7f:61:20:36:49:d0:6d:b8:01:77:
2c:ee:35:e6:c8:77:8a:79:b9:a4:f6:dd:cd:d3:56:
64:dd:2e:01:cd:9a:54:1f:e8:ff:6d:28:77:eb:72:
1d:97:e0:8b:7e:98:f4:41:09:55:f9:b4:18:76:38:
57:f1:e3:53:6e:6a:e4:b7:82:6c:d9:aa:66:63:3d:
9f:9a:09:12:ab:68:bc:f8:bf:0a:63:6a:73:a7:6d:
53:5f:20:f2:d2:33:d8:9f:22:9c:f2:86:fa:26:b1:
b7:33:d5:97:62:ef:86:b2:65:2f:a4:16:41:de:46:
94:49:3a:15:ff:70:0a:a5:ef:6c:fb:56:c0:a5:b6:
3e:64:69:dc:95:f2:05:95:1c:f4:c9:5f:af:7d:17:
59:ae:00:48:70:06:06:da:b1:55:a6:e6:9f:e5:65:
6e:be:62:6e:3f:59:52:c9:01:6e:b4:d5:f2:ce:5b:
1d:65:f2:e1:b7:ba:e9:be:a8:5e:dc:3c:97:7a:00:
e1:b3:b7:44:af:08:16:cd:e6:7c:b1:11:79:1f:2f:
64:80:1e:ad:f4:8b:e0:5e:49:01:f4:b2:d4:09:fe:
4f:f3:fe:6e:e0:a3:67:be:28:cb:7b:5b:ec:cd:b7:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2B:07:63:D6:AC:B9:A9:78:79:B8:CE:54:F9:61:8C:79:FD:EE:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02246774F83211EF8ECB3148762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0-154.198.39.255
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
154.203.224.0/21
154.203.250.0/24
154.205.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:fd:28:49:b2:4b:b5:58:00:1d:66:fc:d7:f4:27:c0:a1:cd:
7a:d6:1d:bd:2a:36:18:69:e8:69:14:8a:6b:a7:1f:be:fb:1a:
97:a4:e7:33:5e:fa:9a:b1:c1:d1:fc:bc:9d:51:da:2b:dd:27:
81:31:15:59:92:19:9f:31:4c:7f:91:c3:9d:de:59:05:d5:20:
e5:45:92:63:c2:f5:0a:fd:2f:25:e0:b7:e3:6e:08:b8:9e:d1:
86:d1:8c:ae:07:ca:ae:c6:34:27:8b:1c:4a:82:9a:fa:9e:71:
6f:76:07:ef:98:3f:be:de:f3:ed:f9:e3:77:53:25:a5:a1:08:
d3:a3:60:e0:35:97:18:95:61:d6:4c:fb:40:2b:08:15:ea:7b:
34:49:03:bd:d7:7f:23:67:63:ac:ae:d4:38:0b:84:47:27:32:
31:ad:31:f8:fe:5b:50:2d:ac:9a:62:40:ef:fa:82:e3:ed:7a:
bb:53:35:ce:88:c4:09:0a:ff:af:81:44:a2:b7:27:ad:a9:5d:
54:d5:06:8e:69:1b:1c:1f:1f:1e:66:86:49:13:1e:aa:f5:70:
a9:55:a5:6e:da:81:65:0c:df:c6:90:84:63:03:f6:2e:66:f4:
0e:5d:a4:f4:a9:fb:47:7f:bc:07:6d:be:f4:8e:f0:ef:20:4d:
ea:ab:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:05:19 2025 by rpki-client