Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A549FAF86711EFAB5C78AE762E951A.roa
File: A6A549FAF86711EFAB5C78AE762E951A.roa (raw, json)
Hash identifier: vJ7QtoKsGbEHwvkzLT96iMXvi6APO9E5Zk3Su4dnhJo=
Subject key identifier: F8:B8:BE:C7:52:8C:7D:F1:24:01:88:82:D3:08:82:07:AB:F6:02:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017127
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A549FAF86711EFAB5C78AE762E951A.roa
Signing time: Mon 03 Mar 2025 19:42:33 +0000
ROA not before: Mon 03 Mar 2025 19:42:30 +0000
ROA not after: Mon 31 Mar 2025 19:42:30 +0000
asID: 44559
IP address blocks: 154.209.147.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94503 (0x17127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 19:42:30 2025 GMT
Not After : Mar 31 19:42:30 2025 GMT
Subject: CN=67c60629-8290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:06:02:d1:8f:cf:49:8a:f3:2d:a0:62:78:
81:fc:a4:9c:67:02:14:46:a3:d7:84:d2:31:ea:63:
ff:3c:b8:8c:a4:c0:39:cf:f4:21:6c:4f:03:a2:2c:
54:14:f6:e4:f2:99:87:d0:d7:72:a3:25:37:d7:3b:
f0:33:11:e1:2c:b4:00:c1:95:e6:2b:9a:ab:0f:81:
45:85:d2:84:89:9f:99:b4:28:c6:a4:ce:c0:5a:38:
be:16:70:6e:ce:e7:7f:e5:f2:cf:a0:28:85:e0:4c:
16:b5:1e:87:eb:00:65:c2:40:75:f7:87:12:45:57:
c7:13:5b:51:b0:bd:77:d4:0e:c1:e9:84:20:3a:b0:
d8:15:f3:58:b9:8e:92:7f:a3:d2:23:d0:61:c2:39:
af:6e:c7:56:eb:a9:97:1b:fd:fa:08:80:22:64:bd:
42:31:68:79:56:ea:e1:9a:ae:33:8a:44:95:86:9e:
0d:af:60:28:f4:54:7c:74:6d:4a:95:42:cb:99:03:
3c:48:5b:31:2f:ef:ad:bc:5a:ad:69:26:8f:17:12:
ab:83:cc:38:b1:1e:31:78:27:c6:e2:d7:80:e4:68:
f7:97:67:db:a6:87:bf:17:2e:78:be:f5:3c:e1:28:
07:86:e9:96:d7:23:99:41:b5:cb:e0:b8:5f:08:77:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:BE:C7:52:8C:7D:F1:24:01:88:82:D3:08:82:07:AB:F6:02:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A549FAF86711EFAB5C78AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.147.0/24
154.209.150.0-154.209.155.255
154.209.157.0-154.209.158.255
154.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
84:81:59:d6:f3:cd:c7:3b:be:71:d2:f0:37:94:e9:ac:50:12:
67:7c:10:eb:44:1c:3a:c1:4f:8d:2c:90:e9:43:e6:0c:a8:3c:
7e:53:76:e8:e3:46:9d:9c:77:17:42:ab:b3:c4:59:8d:b3:62:
5c:84:58:96:07:c6:a3:a5:34:35:48:cb:33:b6:27:d3:b8:7a:
34:8a:4e:c8:f1:38:31:c2:1a:a0:2b:e5:81:40:ef:61:e4:cf:
f1:83:31:45:c7:d8:56:f7:82:47:2b:05:f4:79:09:59:40:d5:
96:0e:cb:84:cb:47:e8:6e:bd:5c:7d:4d:ed:23:20:ff:59:28:
45:54:98:45:12:9c:22:91:3f:a2:f2:b4:3a:08:69:d8:a1:35:
cb:42:a1:aa:e0:6a:b2:c4:a5:f8:0e:89:5e:74:2e:39:3f:5c:
bf:1f:29:ab:e2:79:6c:38:f3:94:59:74:01:7d:7c:94:b2:c1:
4e:2e:98:6a:7e:a3:5f:b5:19:03:44:f1:7e:f0:c7:1c:4e:cd:
f6:a9:53:6b:8b:23:fe:e4:aa:bc:bb:39:a6:0c:9f:7e:72:8a:
1b:94:a0:1d:92:45:3c:ea:20:39:bd:b2:d4:54:9f:ef:b8:98:
f6:4a:5e:d4:17:f1:7e:92:37:12:86:cc:47:29:46:df:87:a2:
34:c8:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:45:45 2025 by rpki-client