Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86198A44FD9311EFB63135A4762E951A.roa
File: 86198A44FD9311EFB63135A4762E951A.roa (raw, json)
Hash identifier: Pespa/D7fIOKclN2vcbNBq6OC/FkItE9drcTQHxWLDM=
Subject key identifier: 4F:00:E5:FE:90:C0:5C:9C:BE:BA:1B:E3:E9:54:8B:7A:9B:18:DC:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01733D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86198A44FD9311EFB63135A4762E951A.roa
Signing time: Mon 10 Mar 2025 09:39:12 +0000
ROA not before: Mon 10 Mar 2025 09:39:08 +0000
ROA not after: Sat 29 Mar 2025 09:39:08 +0000
asID: 7018
IP address blocks: 154.206.48.0/22 maxlen: 24
154.207.152.0/23 maxlen: 24
154.207.154.0/23 maxlen: 24
154.207.156.0/23 maxlen: 24
154.207.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95037 (0x1733d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 09:39:08 2025 GMT
Not After : Mar 29 09:39:08 2025 GMT
Subject: CN=67ceb340-e42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:31:ad:26:ef:48:f6:45:ba:dc:fd:4c:de:
5a:4a:f7:62:21:6b:43:0c:16:0f:c5:db:a3:e2:09:
7c:df:ca:87:53:4a:14:88:da:e7:16:d7:07:5e:62:
38:46:ab:a9:e3:27:54:aa:04:72:4b:a4:fa:bc:27:
97:f1:04:90:36:f3:07:2a:54:b9:76:24:ef:54:3e:
e6:31:67:cd:33:61:86:85:41:1f:b6:a1:19:d7:f2:
db:6b:01:c0:3c:50:86:10:82:4d:e9:41:9a:5a:a9:
32:ca:4b:c5:d0:8b:4a:41:b7:a7:ac:fe:5c:f2:db:
f3:ae:28:7f:cc:69:4e:27:32:45:fe:c5:34:68:e2:
45:6d:c8:f5:05:0c:89:6d:77:9b:5a:d1:5b:88:9f:
43:33:e0:62:34:1f:31:69:00:7f:20:8b:5a:43:03:
26:fb:76:f0:08:9c:5f:33:4a:ee:9b:cc:b7:ef:88:
f5:3e:61:0e:50:8a:6c:59:46:75:b9:dc:91:f0:66:
26:e5:44:84:11:79:4d:21:da:fc:65:5b:e7:88:78:
45:ae:8b:d0:93:d4:2d:0f:06:85:ef:9e:f2:5f:56:
de:ce:5a:bc:f0:79:34:b2:ab:3d:10:c2:80:2f:f3:
7a:ea:43:cf:6b:c7:b1:db:d0:c9:05:90:5b:7f:5b:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:E5:FE:90:C0:5C:9C:BE:BA:1B:E3:E9:54:8B:7A:9B:18:DC:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86198A44FD9311EFB63135A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.48.0/22
154.207.152.0/21
Signature Algorithm: sha256WithRSAEncryption
92:51:05:10:53:36:1c:df:b0:1f:d2:e0:35:db:e9:2b:ab:6a:
4e:0b:5d:6f:22:88:06:e5:af:a5:e7:bc:a1:4d:d9:b7:c3:81:
00:ce:3a:04:f6:69:44:f8:0d:59:4f:32:2d:1d:49:f5:6e:89:
2c:7a:7d:94:2d:f1:5b:2d:92:9d:b7:cb:60:60:d6:f4:d4:f8:
aa:a9:8f:e7:2f:56:e2:e1:cd:98:8c:10:15:10:bb:a5:33:c2:
39:b0:3b:0f:c4:3c:50:55:44:72:f9:c8:aa:8c:90:da:b4:bc:
3f:67:bd:2f:df:46:4b:1b:ba:97:94:d4:67:13:06:22:a4:c3:
05:4f:45:4b:c7:06:3d:27:32:90:bb:49:a9:fd:c8:3f:b3:b8:
15:d6:00:11:7f:1d:82:6f:a7:ae:cf:bb:06:cb:95:06:0b:22:
cf:33:15:a8:5d:a0:ec:f9:89:be:f7:ac:64:bc:f9:0f:f6:ea:
85:32:9e:a5:b0:11:77:19:09:a2:36:58:04:e4:92:ef:07:74:
bd:9c:d0:b8:92:fd:75:fd:62:21:1c:2d:09:0a:a4:05:f3:25:
7f:c6:a5:61:23:1d:0b:80:26:1b:f9:9a:3d:96:4d:b6:2d:da:
7e:e8:bd:21:41:38:cf:90:27:92:ea:93:cb:85:e5:aa:00:8e:
7c:df:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:46:23 2025 by rpki-client