Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40EF2164F83311EF882F1852762E951A.roa
File: 40EF2164F83311EF882F1852762E951A.roa (raw, json)
Hash identifier: WvNaY5gT2j59zR7B3Dd/oQYZAC1lyy4JtaEYYLlZbSY=
Subject key identifier: C9:D1:33:FA:2F:BA:AC:1D:86:BE:9D:5D:71:24:26:37:73:66:EC:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40EF2164F83311EF882F1852762E951A.roa
Signing time: Mon 03 Mar 2025 13:27:29 +0000
ROA not before: Mon 03 Mar 2025 13:27:25 +0000
ROA not after: Thu 27 Mar 2025 13:27:25 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94417 (0x170d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 13:27:25 2025 GMT
Not After : Mar 27 13:27:25 2025 GMT
Subject: CN=67c5ae41-ad94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:b9:98:77:0e:9d:35:40:1b:96:3b:cd:e1:
25:ac:e4:55:dd:6f:6a:25:41:3a:c9:12:01:9b:9a:
67:9a:c0:97:c5:0e:b6:a5:c5:a4:31:0c:46:06:12:
2d:04:ba:35:d7:f3:66:77:63:f8:34:ee:f9:8d:51:
ad:f7:7e:24:8f:5d:8a:06:e5:4d:52:e9:89:4e:8a:
c5:f5:e4:6c:52:3c:70:bf:04:85:f9:04:8d:87:8c:
91:2f:16:4a:6e:86:15:ad:6d:46:0c:39:c6:17:e8:
cf:3f:13:4c:c6:e9:1b:bd:e4:37:50:79:67:50:b5:
5f:6e:10:62:42:11:b3:d9:de:fc:08:45:ab:fb:ac:
7b:37:bf:e0:61:f7:da:c4:84:92:00:b4:89:66:3f:
72:e1:13:86:e7:83:f7:19:a7:e5:c0:3e:7c:aa:93:
9f:21:10:f8:c7:54:83:c8:56:fd:c9:4c:a6:4c:a1:
96:68:31:7e:cd:5b:5c:f3:bb:c9:29:ba:61:6c:ef:
cd:82:57:83:26:02:29:48:bd:23:ad:1b:c0:5c:e6:
7f:bd:37:56:c1:93:63:62:da:31:db:cf:dc:1e:09:
89:39:fa:bb:04:52:10:7b:32:28:da:1f:e3:dc:b5:
73:16:39:69:03:55:b6:4d:a3:c0:b3:f2:0a:a8:4c:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D1:33:FA:2F:BA:AC:1D:86:BE:9D:5D:71:24:26:37:73:66:EC:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40EF2164F83311EF882F1852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.237.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
70:c6:c0:57:08:5f:b1:ed:6c:e0:04:42:c1:72:75:9d:f2:d9:
14:3a:b0:68:96:82:23:c6:5f:00:97:86:9b:a7:e9:99:47:21:
37:52:e3:07:f0:ea:7b:58:ef:58:7b:e8:ab:55:a5:7f:04:80:
7a:91:b7:f8:50:62:de:3b:ae:6e:4d:bd:f7:35:ad:5a:cf:31:
1b:20:eb:0c:6c:61:73:31:74:a4:5e:31:c9:b6:cc:5d:89:37:
42:15:a4:8e:e3:99:53:46:70:77:04:68:87:c2:67:d8:27:64:
dc:ce:2d:9f:6c:81:5c:ae:c6:3d:a9:72:49:43:73:95:c6:60:
1f:1d:f9:ac:aa:99:35:5e:11:68:0c:a5:00:1a:f2:3c:59:04:
58:a0:99:de:36:d0:c7:7b:e8:d8:d0:ba:26:6b:6e:3b:ac:41:
28:2a:fd:2a:16:45:62:ab:9c:88:4c:07:54:8c:17:6e:93:fc:
d1:ad:e6:e1:4d:11:c1:94:cf:92:02:ed:57:9a:11:47:1c:d0:
9e:b9:f3:83:a7:34:a0:11:11:2b:a8:33:44:08:a4:e1:a8:26:
c9:79:10:f8:b3:9d:bc:1f:32:0f:2f:c5:ee:df:5c:44:b3:cb:
49:1d:be:7d:28:67:e4:7d:fd:1e:7b:da:73:dd:6f:6e:09:2e:
07:12:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:23:00 2025 by rpki-client