Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714A6996FF2B11EFAC8E0A9A762E951A.roa
File: 714A6996FF2B11EFAC8E0A9A762E951A.roa (raw, json)
Hash identifier: sJPfVNwJ+I/UiBzqp7Ur2lFc+0ROD/fQeN7JecaR6AM=
Subject key identifier: C3:82:33:CB:57:A4:65:6B:18:D8:3A:2A:2E:0F:D8:3C:D6:3C:A7:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714A6996FF2B11EFAC8E0A9A762E951A.roa
Signing time: Wed 12 Mar 2025 10:19:12 +0000
ROA not before: Wed 12 Mar 2025 10:19:08 +0000
ROA not after: Mon 31 Mar 2025 10:19:08 +0000
asID: 22773
IP address blocks: 154.202.24.0/23 maxlen: 24
154.212.0.0/24 maxlen: 24
154.212.16.0/22 maxlen: 24
154.212.24.0/22 maxlen: 24
154.214.28.0/22 maxlen: 24
154.219.6.0/23 maxlen: 24
154.219.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95203 (0x173e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 10:19:08 2025 GMT
Not After : Mar 31 10:19:08 2025 GMT
Subject: CN=67d15fa0-360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:b3:76:b6:b6:12:25:b1:e0:e4:74:a4:0e:
fd:d1:ac:59:77:17:8b:3a:ca:db:8d:f6:c6:6a:7d:
94:c2:77:25:25:a2:6c:47:8f:32:c9:be:b6:cd:5d:
b9:31:4c:fa:06:f7:8e:b8:53:cf:bb:8b:42:ef:0c:
d4:68:86:13:8d:c8:7a:82:09:62:7a:e7:23:57:f6:
25:ef:ee:af:3e:81:ae:70:20:d9:6a:28:87:30:1d:
b8:8a:66:9c:28:2a:0f:5b:3d:72:68:8e:ed:3e:54:
6b:a8:0e:b6:72:6b:79:80:3e:db:76:93:de:96:1d:
25:00:4c:bc:91:86:fd:91:87:b2:d4:f9:80:cf:84:
b7:8d:6e:7c:71:81:6a:a5:a4:21:a7:6c:d0:bd:5d:
6d:e6:80:05:08:ca:1f:2e:45:6d:41:17:25:39:55:
b6:e0:8b:93:7d:ec:05:a8:77:1e:60:c3:bf:7e:20:
89:7f:63:43:e0:ab:d6:4a:0a:cd:97:14:51:fd:75:
82:3c:7a:72:47:ec:36:77:19:de:4b:97:a0:c9:92:
06:1f:3d:5c:2c:79:53:d9:ca:f6:81:0a:94:3f:4c:
6c:43:a2:83:a8:18:35:fc:12:ce:f2:f9:f1:71:71:
6f:6f:18:06:54:d6:81:d7:d7:b7:74:81:00:92:51:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:82:33:CB:57:A4:65:6B:18:D8:3A:2A:2E:0F:D8:3C:D6:3C:A7:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714A6996FF2B11EFAC8E0A9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.24.0/23
154.212.0.0/24
154.212.16.0/22
154.212.24.0/22
154.214.28.0/22
154.219.6.0-154.219.15.255
Signature Algorithm: sha256WithRSAEncryption
a3:60:f5:2d:b7:d8:a3:83:c5:c3:7d:a9:dc:73:13:dc:d3:6e:
f6:60:cd:41:1e:8e:c0:83:10:9e:a2:42:95:b1:b0:f4:70:f0:
80:ea:ab:9a:e9:32:65:bb:bf:1b:0d:8f:fb:6f:0a:f6:2f:18:
a9:67:26:2b:80:a9:a5:2d:1e:92:49:6a:f4:43:67:64:1b:ef:
a7:bf:de:b2:e0:14:81:c4:18:97:f0:9e:c6:8e:d2:66:4c:b6:
1a:5c:9f:e2:de:3c:aa:92:de:08:4e:11:5f:e2:9e:6a:1e:b2:
b4:60:47:53:db:34:e7:32:80:11:9d:f5:44:31:8b:ff:02:34:
a4:cf:38:9a:19:70:f3:37:95:71:58:59:d0:89:08:c1:e6:0a:
67:46:2c:7b:1b:fb:bc:7d:1f:c9:7e:28:88:bd:99:ec:85:c5:
fe:e2:4c:2d:c9:5e:73:a9:67:51:81:bf:6d:40:5f:c0:02:7d:
78:26:22:2a:ea:6f:3d:26:2b:b5:6f:49:a9:a7:8a:10:dd:6a:
a6:a3:00:d8:cf:01:a8:33:dd:eb:b2:5a:4d:89:c6:dc:cc:4e:
cb:4c:1e:ce:fc:e8:2f:63:e2:b0:c1:6e:91:59:df:cd:d5:a3:
64:e6:38:de:bd:57:5b:a6:17:a1:11:05:4f:1d:b6:89:9c:61:
b6:94:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:32:50 2025 by rpki-client