Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/936B6AE8246011F08EAD1ECEDAE4EC9C.roa
File: 936B6AE8246011F08EAD1ECEDAE4EC9C.roa (raw, json)
Hash identifier: Ff476eDU6tSGzUeaarQUyHzdoXZpvjJqJO5mbOWjKtw=
Subject key identifier: 99:61:7A:84:7A:CB:C4:2F:67:F9:1D:51:C6:1C:57:CC:F0:E7:CD:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/936B6AE8246011F08EAD1ECEDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 18:42:46 +0000
ROA not before: Mon 28 Apr 2025 18:42:41 +0000
ROA not after: Wed 04 Jun 2025 18:42:41 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
154.218.22.0/24 maxlen: 24
154.222.215.0/24 maxlen: 24
154.222.216.0/24 maxlen: 24
154.222.217.0/24 maxlen: 24
154.222.218.0/24 maxlen: 24
154.222.219.0/24 maxlen: 24
154.222.242.0/24 maxlen: 24
154.222.252.0/24 maxlen: 24
154.223.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97383 (0x17c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 18:42:41 2025 GMT
Not After : Jun 4 18:42:41 2025 GMT
Subject: CN=680fcc26-7148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:f5:05:1c:66:a3:d4:13:47:38:3c:df:d3:
c3:a5:e1:73:39:7c:c6:4e:72:6d:ab:c6:80:81:ce:
b3:73:34:43:b2:05:af:b7:2d:71:59:58:bd:4e:de:
16:d6:e0:10:e1:ae:81:5c:33:ac:9f:75:49:e0:16:
d4:c5:24:29:b1:12:47:3f:74:c4:6c:a3:4a:48:a1:
e7:24:27:e4:e2:08:a2:7f:df:a5:91:41:de:28:d8:
a4:4b:e4:d8:49:6f:1d:db:ce:eb:bf:73:6f:6b:74:
9e:08:f7:e0:05:27:3b:22:7d:52:71:e3:6c:4b:ed:
f5:c1:33:f1:bf:e0:43:31:10:5a:fe:2c:61:72:fc:
d8:f8:22:c0:4f:7f:44:78:d3:55:8d:db:1f:10:6c:
6e:be:fa:62:2e:27:fc:b8:ec:07:84:83:c3:2e:92:
62:44:60:81:d5:52:4d:e9:c7:38:d4:e4:65:fb:a9:
f9:86:3a:dc:c8:eb:fd:93:97:a7:f5:a1:f7:7a:a1:
1f:e7:cc:8b:6b:bd:24:98:87:3a:53:37:0c:62:a4:
aa:db:31:8e:36:d9:89:4a:5d:79:03:64:e9:2a:74:
7c:db:a8:ee:c6:11:cf:5f:15:46:db:33:98:3e:0f:
d5:85:de:61:21:96:a2:aa:43:e5:35:5b:54:43:15:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:7A:84:7A:CB:C4:2F:67:F9:1D:51:C6:1C:57:CC:F0:E7:CD:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/936B6AE8246011F08EAD1ECEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/24
154.218.22.0/24
154.222.215.0-154.222.219.255
154.222.242.0/24
154.222.252.0/24
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a0:0f:85:c1:2c:49:09:5e:87:2b:3d:69:9b:54:06:59:f5:
18:0d:ee:79:63:29:f5:f9:fd:5d:cd:09:1f:12:97:41:fd:c1:
c0:1f:41:21:dc:ed:9e:34:85:36:e6:d5:64:23:66:1e:ca:bf:
3b:8f:43:e3:87:ff:7c:d7:8c:0e:08:8f:4e:2a:3b:39:a1:50:
2c:c1:3e:57:6a:8d:3f:03:05:8e:11:41:18:47:0e:16:9a:9d:
97:89:27:8d:65:72:4f:c1:af:c3:b1:5e:09:cb:4d:d7:ca:97:
4b:26:16:43:a3:88:af:74:0a:8d:50:55:af:42:c0:98:1b:d7:
79:9a:f4:8f:87:af:92:25:47:19:a3:61:10:ca:a1:a8:76:e4:
e0:0d:80:63:56:7c:7c:3e:76:dd:0b:b7:ea:6c:e6:c6:8c:2b:
41:40:40:38:cd:15:1a:eb:01:f1:1c:75:92:f7:58:68:6f:96:
96:a2:e4:38:67:6b:84:4a:c6:81:88:dd:dd:37:40:38:a3:f8:
51:38:7b:c9:e6:7e:a7:43:ef:44:d3:af:e0:6a:c0:36:dc:54:
5e:48:6d:94:93:e9:5b:c0:ff:92:75:f6:a5:d4:b8:78:75:cd:
41:02:75:4c:d5:47:0b:1a:ad:a1:56:5b:2d:3a:e1:eb:0e:63:
59:5e:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:50:36 2025 by rpki-client