Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638FF402FF2511EFB912FB74762E951A.roa
File: 638FF402FF2511EFB912FB74762E951A.roa (raw, json)
Hash identifier: eJMyP1aWG5aUL/ptR+KPJ+m5evP53RpI7ELR2xMNTxk=
Subject key identifier: C6:8B:47:66:E6:1C:28:D5:9C:0F:34:E9:D1:70:06:BF:1C:39:DD:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638FF402FF2511EFB912FB74762E951A.roa
Signing time: Wed 12 Mar 2025 09:35:52 +0000
ROA not before: Wed 12 Mar 2025 09:35:48 +0000
ROA not after: Mon 31 Mar 2025 09:35:48 +0000
asID: 7018
IP address blocks: 154.84.182.0/23 maxlen: 24
154.85.12.0/23 maxlen: 24
154.85.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95185 (0x173d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 09:35:48 2025 GMT
Not After : Mar 31 09:35:48 2025 GMT
Subject: CN=67d15578-762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:70:cc:ba:13:45:a7:0c:2d:01:19:7c:d7:
19:90:90:21:7f:11:16:07:cc:b7:bc:c2:c0:3e:5a:
ed:7a:a7:c6:9d:f8:10:4b:85:2b:e5:80:17:1d:7e:
b4:55:45:7c:9f:33:a7:0f:06:b3:2c:95:4d:c4:60:
8c:92:3d:32:45:5c:74:c8:67:a2:15:15:32:f6:1c:
56:d1:3e:85:1e:85:9d:bc:73:88:51:64:a2:57:cb:
1f:eb:a2:82:9e:2f:55:1a:29:ac:6d:75:57:b8:63:
bf:e5:f0:15:b1:84:6c:23:db:7d:02:66:be:c8:02:
b9:88:ef:d6:2e:3d:e2:0f:58:c7:65:74:1e:41:05:
07:cb:ff:a8:76:78:c9:9a:c1:20:fe:b1:0b:27:ef:
8f:e8:8b:b1:2a:b6:8b:2a:5f:df:15:ee:11:18:e7:
48:a1:44:94:f8:ab:61:2c:fd:db:6a:07:10:8b:d8:
f9:10:79:7b:4a:a7:f9:52:e2:1c:b2:50:e7:44:d1:
7b:f7:4f:72:4f:8d:ae:99:6c:dc:eb:87:3d:af:71:
8d:23:89:39:60:ac:4b:b4:95:a0:29:dc:7b:95:ec:
a8:7c:f9:4e:a0:53:24:40:28:1b:f5:d0:6f:27:bb:
46:7b:1b:63:7e:af:34:f3:4c:39:18:d7:2b:16:e3:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8B:47:66:E6:1C:28:D5:9C:0F:34:E9:D1:70:06:BF:1C:39:DD:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638FF402FF2511EFB912FB74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.182.0/23
154.85.12.0/23
154.85.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:82:68:e9:18:47:9c:50:3c:3f:81:4e:a9:ee:0f:6c:80:22:
64:7b:79:88:c3:69:f3:e1:12:c2:3b:58:10:ef:6f:27:b0:dc:
90:86:3b:c1:06:01:4c:80:bf:64:c8:87:57:ff:6b:dc:c2:25:
6c:85:7f:c2:0c:7a:08:5e:7a:e5:2e:b5:31:e1:13:7a:14:14:
b0:16:ee:8e:e4:5a:ca:0b:7b:e7:e8:98:bf:65:ab:9b:ea:bd:
3b:a1:44:62:1b:ba:0b:7a:8e:ca:c0:1f:f9:86:a1:d8:b8:0c:
4f:55:cb:cb:e3:05:0a:1d:d0:65:32:d7:c3:54:b9:68:18:b3:
f2:23:4c:94:6f:fb:18:12:13:1d:4c:f2:4c:1b:b1:0f:ba:60:
52:a1:85:d1:e8:a1:c4:ba:51:4b:09:14:7a:67:7e:77:e8:9d:
15:2a:26:67:f4:0b:d5:be:44:aa:0f:02:df:b3:6c:ba:7e:c6:
4e:22:16:4a:cc:07:49:bd:67:f9:31:25:95:3f:38:e0:1d:56:
0f:f9:c7:7c:44:02:6e:71:af:b9:85:0a:fd:bd:f6:59:97:52:
9a:4c:3b:a4:e9:24:c0:29:bd:16:0a:eb:bf:e8:dc:0e:2d:53:
99:a3:e3:1e:c0:fe:3e:15:92:cb:bf:98:9f:7d:06:77:c2:f3:
a2:7d:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:49:23 2025 by rpki-client