Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBD53203BDE11F090B2A19ADAE4EC9C.roa
File: 0EBD53203BDE11F090B2A19ADAE4EC9C.roa (raw, json)
Hash identifier: ztop3S7FSI3sFtaQaxhjrO6LnKaXGczSTqpjuf1CFSE=
Subject key identifier: BB:67:4D:90:12:20:7E:46:12:F9:77:53:CC:D0:E1:7C:08:D2:F3:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018398
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBD53203BDE11F090B2A19ADAE4EC9C.roa
Signing time: Wed 28 May 2025 16:08:57 +0000
ROA not before: Wed 28 May 2025 16:08:52 +0000
ROA not after: Sun 08 Jun 2025 16:08:52 +0000
asID: 399077
IP address blocks: 154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99224 (0x18398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 16:08:52 2025 GMT
Not After : Jun 8 16:08:52 2025 GMT
Subject: CN=68373519-ea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:8b:0a:7b:61:ab:6d:47:f5:a9:f2:b6:d7:
12:da:77:a4:5b:f3:4d:25:99:d2:6a:3d:65:32:37:
5b:fc:68:a7:88:95:cd:d7:e4:a7:f0:25:00:be:98:
74:7e:6d:40:60:f4:83:c5:78:56:5f:f8:b2:66:43:
89:5b:68:f3:43:db:aa:1e:8b:8e:22:36:98:6d:f9:
24:6f:9d:b9:88:c8:05:1b:7f:79:b6:26:14:45:53:
8f:ae:69:26:55:52:17:8a:f0:ad:9a:1b:a1:83:4d:
fb:60:72:7c:d0:cd:fe:25:0c:6a:11:98:24:92:75:
af:d6:2d:fa:f7:9d:99:b7:8a:3d:a2:57:49:d1:0a:
cf:cc:4f:83:c9:d9:e7:61:69:45:14:a5:aa:49:08:
df:71:4a:bc:17:53:d9:c2:b4:73:3c:da:97:4b:64:
b5:11:d5:1a:f6:04:76:15:ed:29:81:39:6a:c5:54:
fa:72:76:d2:a6:63:d6:95:12:86:e2:43:32:db:d6:
72:b1:97:16:03:f5:a0:91:c2:70:f5:0c:47:70:51:
26:fb:cf:5f:c1:1b:01:87:0a:ba:55:e0:da:b1:de:
40:1a:25:b7:2e:c8:fe:4d:a0:11:0b:ce:f7:95:6e:
87:f9:4b:b9:86:7d:c7:11:10:15:db:ee:a8:ac:94:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:67:4D:90:12:20:7E:46:12:F9:77:53:CC:D0:E1:7C:08:D2:F3:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBD53203BDE11F090B2A19ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.67.0-154.91.76.255
Signature Algorithm: sha256WithRSAEncryption
a7:89:b3:6f:b6:80:91:53:7e:2a:86:0f:ed:37:a6:63:95:3c:
4b:57:16:1c:b8:75:c2:3a:2b:88:f8:b7:29:fb:43:aa:13:c8:
ea:0d:eb:05:59:0a:d4:aa:ab:53:cf:19:22:ce:92:95:af:66:
32:65:95:ab:45:84:ac:5a:89:e6:17:79:49:05:e4:4c:f2:e3:
c4:c5:f7:fc:de:9b:96:61:b7:42:f3:b8:dd:35:cd:8f:f5:8f:
de:28:12:d3:06:99:83:7e:c9:fc:6d:24:17:3e:0d:0b:a3:e7:
2a:92:ac:99:55:b8:b1:08:f4:5b:c0:06:56:cd:9d:88:c1:98:
c4:fa:5b:26:af:55:65:fc:ad:96:7e:73:0d:c1:b9:de:02:c8:
d4:16:69:f3:63:10:1d:1d:a4:49:12:f3:c7:86:f1:fb:af:1d:
82:51:10:72:62:7b:9b:af:71:8f:b2:80:a0:bc:77:c0:21:ce:
18:57:0f:b7:4d:85:2d:58:75:8b:81:d7:94:99:dc:3a:e8:e0:
c9:ff:74:ad:b5:78:ba:6c:5b:20:3d:f0:81:b1:82:42:a9:02:
fd:82:8b:ed:31:a4:39:a1:54:b7:2a:a2:37:85:d5:bf:6b:f3:
08:78:47:25:39:c5:eb:26:8e:d8:bc:7a:75:21:02:8f:2d:9e:
98:bd:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:57 2025 by rpki-client