Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D75C35AF82D11EF826326A6762E951A.roa
File: 2D75C35AF82D11EF826326A6762E951A.roa (raw, json)
Hash identifier: wGlM/Oh7jOdPK16xXdE+++gEaF25TWglLsJlE+lWEZE=
Subject key identifier: D3:81:6E:94:E5:E7:03:E1:BC:EA:AE:43:62:D0:96:A4:11:6C:D6:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D75C35AF82D11EF826326A6762E951A.roa
Signing time: Mon 03 Mar 2025 12:43:59 +0000
ROA not before: Mon 03 Mar 2025 12:43:55 +0000
ROA not after: Thu 27 Mar 2025 12:43:55 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.205.247.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94373 (0x170a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 12:43:55 2025 GMT
Not After : Mar 27 12:43:55 2025 GMT
Subject: CN=67c5a40f-1ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:9e:c7:5d:e6:66:85:5b:b5:fc:f9:33:03:
a3:3e:e3:79:10:60:1c:ca:80:28:04:fa:71:2f:0d:
6a:b0:6d:c7:83:0b:b6:55:32:a0:e2:71:80:0a:c6:
c7:ca:d3:ab:dd:9a:27:85:19:a1:9d:75:72:85:74:
30:4f:ec:4f:bb:e2:78:53:34:f5:c6:25:61:a7:dd:
6d:85:b6:ac:cf:2e:a0:80:c7:aa:03:67:b2:5b:c9:
71:4f:bb:d2:52:c7:a3:8b:29:a4:f6:47:21:bc:a3:
f1:68:bb:46:22:43:b3:13:19:2b:7a:7c:cc:9e:0f:
cc:3e:95:10:bc:ad:7e:6c:3f:68:89:74:f8:17:99:
c8:1e:fa:fe:cd:48:2b:bc:a1:46:19:56:0c:6c:bb:
d6:3a:d6:49:dd:82:e3:07:de:41:2a:66:58:8c:96:
97:29:b8:7b:1a:11:fc:1f:b6:76:54:71:d3:36:40:
6a:74:e3:14:00:09:21:f0:0e:ac:a1:a6:e1:54:d4:
b8:c5:62:09:ff:b7:9e:b1:cb:d2:aa:af:3f:00:50:
12:8b:59:c8:4e:71:44:31:c5:e3:2f:27:fe:16:e2:
45:ad:c1:cb:e2:76:1d:9d:2f:bb:6a:a0:bd:7e:3a:
22:66:77:55:44:fe:07:19:7c:67:a6:48:fc:1b:15:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:6E:94:E5:E7:03:E1:BC:EA:AE:43:62:D0:96:A4:11:6C:D6:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D75C35AF82D11EF826326A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/22
154.209.221.0-154.209.223.255
154.223.198.0-154.223.207.255
Signature Algorithm: sha256WithRSAEncryption
00:1e:f0:14:d5:9f:aa:06:56:f9:d5:9a:9f:5c:fc:3c:08:ad:
04:b4:aa:85:c5:29:e0:21:da:04:ce:ba:1f:2c:d7:b3:56:ae:
59:6f:bc:c6:50:0a:ac:3b:08:f4:2c:e7:9a:28:47:f3:2b:4c:
a4:22:3a:30:aa:09:13:b5:ed:5d:9a:c6:0f:e8:b4:04:1d:73:
c1:07:a9:a1:1b:dc:e8:28:cd:75:14:b4:27:a4:37:fd:81:ab:
c8:83:57:f5:73:15:22:8d:de:04:c2:fc:73:65:fe:33:49:23:
80:a8:df:47:81:b0:87:df:e1:14:64:f2:92:10:c7:a4:59:79:
ec:53:c0:97:44:2a:72:ad:34:e4:31:30:93:81:48:e6:90:b3:
0f:84:a2:82:f9:b2:e9:21:4c:e1:d3:36:1e:3b:30:9a:1a:17:
b4:e3:3c:59:f6:1b:9c:0c:8e:6f:c5:de:5a:5a:79:f2:4a:1e:
d4:08:95:1c:62:50:b7:25:d2:cb:63:16:f6:2f:2f:05:75:5c:
46:81:1e:1e:c3:96:2b:e9:eb:9f:1e:f5:e2:d6:37:75:75:f5:
71:2a:be:63:bd:f9:19:b0:94:83:a8:36:a9:4c:21:82:dd:7b:
f6:f1:de:12:94:b5:a4:21:4c:66:3e:03:96:f2:42:bf:22:a5:
fb:7a:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:28:23 2025 by rpki-client