Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F04CFCF83111EF8759D142762E951A.roa
File: 14F04CFCF83111EF8759D142762E951A.roa (raw, json)
Hash identifier: HNb9cSrEEbES2L8cpzN272lwutmQ7j8a06f0SqwzAVE=
Subject key identifier: CD:9F:65:80:9F:CC:6D:1C:1F:4B:81:86:8E:A0:72:50:A3:DC:FE:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F04CFCF83111EF8759D142762E951A.roa
Signing time: Mon 03 Mar 2025 13:11:56 +0000
ROA not before: Mon 03 Mar 2025 13:11:52 +0000
ROA not after: Thu 27 Mar 2025 13:11:52 +0000
asID: 44559
IP address blocks: 154.205.28.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
154.209.19.0/24 maxlen: 24
154.209.95.0/24 maxlen: 24
154.209.132.0/24 maxlen: 24
154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94409 (0x170c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 13:11:52 2025 GMT
Not After : Mar 27 13:11:52 2025 GMT
Subject: CN=67c5aa9c-a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:55:d7:f0:34:4f:c9:2c:8a:a1:d9:ab:44:
7c:63:38:7c:7e:f7:8e:9c:74:fb:85:85:ec:5c:0d:
7c:13:44:16:70:75:52:b7:78:6e:7b:b2:3f:26:3d:
b8:7f:d5:e8:17:6d:27:36:00:7e:88:3f:97:fd:0b:
74:e0:40:3a:41:83:2b:e6:9a:e5:95:5d:77:26:d0:
e1:26:31:3a:20:00:28:39:a1:7a:be:9c:9b:82:f0:
e4:74:17:f8:6a:af:11:d2:8d:51:1e:6b:23:77:a3:
a0:77:bf:26:9f:33:a3:c9:1f:3e:a9:db:26:52:b1:
40:ed:49:92:81:17:eb:ed:85:6e:06:7f:d9:36:2c:
f2:1e:3d:64:eb:cb:94:5d:23:e3:26:08:f3:5a:ed:
69:a0:4b:aa:65:d0:56:6f:94:74:9d:5d:1c:ea:74:
97:7f:f7:d5:bc:cb:39:ca:cf:79:4f:11:9a:98:17:
12:fb:0b:ad:c4:0a:0f:f4:bc:44:65:3b:9b:2f:26:
a3:84:6d:f0:49:31:82:d9:18:6b:a4:8b:de:1d:de:
dd:2f:17:9d:fb:0d:99:73:c9:05:9a:ce:93:80:3a:
21:ca:93:03:28:44:9e:36:04:0d:39:85:62:28:10:
1e:6f:81:08:b7:90:6d:23:df:ad:37:4b:6d:15:1c:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9F:65:80:9F:CC:6D:1C:1F:4B:81:86:8E:A0:72:50:A3:DC:FE:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F04CFCF83111EF8759D142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.28.0/24
154.205.241.0-154.205.243.255
154.209.19.0/24
154.209.95.0/24
154.209.132.0/23
154.209.135.0-154.209.145.255
154.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2f:44:e1:a9:d6:3a:24:ac:9d:e2:c6:6c:48:e6:f8:0d:9a:
dd:33:ea:39:55:59:b4:86:db:1c:f6:ae:2d:09:c4:6e:a3:c4:
ad:f1:54:8e:a1:d8:86:39:31:c7:5b:f2:3a:5f:f0:e4:46:04:
72:52:19:b8:26:f8:05:f0:7a:4e:fc:05:fb:c6:27:fc:ec:81:
be:fc:b3:1c:3d:61:7e:84:4a:f4:c6:5f:68:23:03:3e:c7:92:
30:8d:04:a8:49:c8:82:fb:09:41:23:39:8c:a4:56:71:36:cb:
20:08:8e:05:1b:7f:46:7d:30:16:4b:ac:43:23:78:76:09:63:
27:03:ce:3b:0a:64:07:cf:9e:50:f0:fe:30:58:4a:47:08:42:
aa:08:f0:15:a0:59:47:84:22:e9:6f:1c:a8:5b:3e:58:07:29:
22:83:4b:b8:21:64:2a:b2:25:3b:06:65:97:90:85:5c:21:9d:
3c:6b:d8:f3:ab:8e:98:27:c2:06:e0:fd:65:3c:39:a1:93:94:
1a:8c:cf:cf:c5:8f:9f:79:6f:e9:75:01:5b:43:aa:2c:a8:c3:
66:bf:74:a4:57:8b:6f:c0:52:bb:f1:d6:43:52:6a:0c:c5:29:
cd:f8:2f:3a:60:9a:a8:7d:b8:c1:29:2b:b6:99:47:10:7f:6f:
89:53:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:16:20 2025 by rpki-client