Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/739E2F98F8DC11EF904BEE52762E951A.roa
File: 739E2F98F8DC11EF904BEE52762E951A.roa (raw, json)
Hash identifier: aUfXaBjzfmYxI9qmASQiCUdBNzM9YcEia4Vfvwig8K0=
Subject key identifier: 30:BA:BF:49:04:C8:6E:AA:DB:A1:B8:38:46:28:4E:E1:5F:AF:72:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017196
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/739E2F98F8DC11EF904BEE52762E951A.roa
Signing time: Tue 04 Mar 2025 09:38:39 +0000
ROA not before: Tue 04 Mar 2025 09:38:34 +0000
ROA not after: Fri 04 Apr 2025 09:38:34 +0000
asID: 200373
IP address blocks: 154.213.193.0/24 maxlen: 24
154.213.194.0/24 maxlen: 24
154.213.195.0/24 maxlen: 24
154.213.196.0/24 maxlen: 24
154.213.197.0/24 maxlen: 24
154.213.198.0/24 maxlen: 24
154.213.199.0/24 maxlen: 24
154.213.202.0/24 maxlen: 24
154.213.203.0/24 maxlen: 24
154.213.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94614 (0x17196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 09:38:34 2025 GMT
Not After : Apr 4 09:38:34 2025 GMT
Subject: CN=67c6ca1f-1db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:15:39:70:f9:b0:bb:68:4d:b7:40:d5:3e:
82:a4:7c:27:19:34:f6:90:df:b9:dc:2c:f0:94:42:
a4:e1:db:44:07:e1:60:bb:56:c7:b7:3e:cc:c6:6c:
6a:b7:53:b1:1f:49:b4:d1:5b:d4:02:09:ad:8c:bb:
3f:6b:9d:75:67:31:5d:7b:05:ff:b2:9c:91:08:5e:
80:3a:12:30:0e:f2:00:cb:fb:af:7d:12:fa:d7:88:
ea:29:4d:00:8a:b5:fc:78:d9:68:f2:85:73:c1:63:
65:96:a9:43:00:fd:60:35:b6:df:86:f7:6f:d5:e8:
5a:f3:63:fc:88:24:07:d4:91:9b:ab:13:e3:33:cf:
39:51:3f:17:5f:a9:4f:53:8e:b2:5c:86:2f:d7:c1:
cb:01:a0:51:7a:38:b9:7a:60:13:61:93:5f:d4:ac:
9a:74:7f:06:2a:e8:96:7c:48:72:3f:e1:1f:bd:46:
0f:69:2e:0c:d8:0f:1f:fd:ec:51:cf:43:3e:5e:2b:
23:0f:42:ec:50:a1:d0:c7:a6:4c:e9:e5:75:d4:16:
3f:a3:27:42:11:54:a5:2d:46:f7:6f:cb:0a:e9:80:
22:66:08:bf:c0:6a:50:37:0b:b5:83:e5:74:ef:3a:
b4:b3:35:b2:be:5b:19:e6:67:21:0e:80:44:e2:4b:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BA:BF:49:04:C8:6E:AA:DB:A1:B8:38:46:28:4E:E1:5F:AF:72:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/739E2F98F8DC11EF904BEE52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.193.0-154.213.199.255
154.213.202.0-154.213.204.255
Signature Algorithm: sha256WithRSAEncryption
79:5e:b1:b7:8f:0e:ec:e1:fc:70:d3:1b:74:2b:52:ae:05:83:
34:19:b2:0b:49:b0:9a:2b:9a:0e:6f:81:46:e1:fa:d1:56:30:
07:aa:41:e6:f3:d7:06:65:bc:06:47:8d:f1:ed:6f:43:51:84:
07:4e:c1:0b:c2:33:9f:c9:32:68:bb:62:cc:50:08:12:a8:ec:
e9:4a:05:19:50:7f:a9:7f:26:c8:b3:ce:77:e1:23:68:d1:20:
cb:db:12:cf:bd:c7:98:89:45:97:da:79:fc:3a:80:36:b5:30:
c4:e0:2c:bf:cd:1b:46:ee:ac:72:90:ee:22:8a:e4:9b:df:73:
24:52:a0:42:43:fa:ce:95:79:ab:8e:da:47:67:87:1a:d8:af:
71:4b:6d:41:1b:2f:54:09:dd:8b:b3:d0:8c:a0:31:1e:5c:76:
c2:10:b4:8c:4a:1e:8e:14:da:a9:b0:24:b7:b9:15:61:68:03:
4e:e0:d6:5e:93:af:30:b0:f2:28:7f:e5:12:cc:37:89:c7:6b:
69:8f:62:7e:9e:eb:90:d5:bb:9c:6d:d8:95:90:dd:d8:44:30:
40:36:40:e1:50:4c:6c:2c:84:80:94:ee:f7:ba:80:77:11:38:
a3:b8:2c:44:15:8e:a7:37:da:42:d7:ef:40:82:05:f6:2c:07:
b0:8d:ad:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:33 2025 by rpki-client