Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01C823A070F11F0A0BD8560762E951A.roa
File: B01C823A070F11F0A0BD8560762E951A.roa (raw, json)
Hash identifier: fdUkFh74WQdin55PTattxrKM74i1qDAH6rHG1wcNbjA=
Subject key identifier: 6D:BB:2A:9B:2D:59:DD:1D:C5:27:68:20:0C:CD:60:58:55:E8:00:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01C823A070F11F0A0BD8560762E951A.roa
Signing time: Sat 22 Mar 2025 11:20:41 +0000
ROA not before: Sat 22 Mar 2025 11:20:37 +0000
ROA not after: Mon 31 Mar 2025 11:20:37 +0000
asID: 5065
IP address blocks: 154.86.96.0/24 maxlen: 24
154.86.107.0/24 maxlen: 24
154.86.108.0/24 maxlen: 24
154.86.109.0/24 maxlen: 24
154.86.110.0/24 maxlen: 24
154.86.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95648 (0x175a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 11:20:37 2025 GMT
Not After : Mar 31 11:20:37 2025 GMT
Subject: CN=67de9d09-d9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:0a:bd:82:33:7b:a4:f7:ae:d1:12:11:09:
16:e9:e1:30:31:d2:5b:fe:7a:bc:e7:7c:19:2c:91:
26:56:71:48:79:9e:08:a1:31:13:d5:10:d9:4e:26:
42:11:71:a5:c3:27:c5:e1:7e:80:e4:ac:61:c5:6d:
20:19:da:41:87:7d:18:5c:86:43:07:fa:6a:d1:d2:
14:84:35:84:61:ca:7a:9b:c9:18:90:62:5a:cf:fb:
57:31:64:2e:ba:cd:7a:69:a2:3d:5c:48:1a:50:04:
20:d4:38:f6:26:fe:36:78:36:e7:83:fc:46:b4:cd:
f1:d4:e6:0a:75:48:9f:4a:05:5a:7b:fd:b4:55:78:
ef:39:33:6a:ae:b1:2e:e7:7f:d9:8b:57:3d:0f:a7:
a0:d9:43:44:8a:1a:b5:8f:2b:8f:3d:28:9c:81:5e:
99:46:eb:b4:48:6a:55:78:0d:5f:02:01:93:84:b7:
ba:68:41:90:15:4f:53:46:39:9a:47:80:d8:d5:c5:
5e:41:4d:35:21:22:d3:eb:cf:b3:68:60:dd:19:93:
dd:82:20:dc:96:75:dd:7f:d7:1d:96:f6:be:81:ea:
82:ff:a0:b2:5f:03:26:0e:2d:df:22:d7:66:a9:d3:
a9:ce:24:1c:e1:fe:42:54:ca:ed:be:4e:b4:a2:d9:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BB:2A:9B:2D:59:DD:1D:C5:27:68:20:0C:CD:60:58:55:E8:00:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01C823A070F11F0A0BD8560762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.96.0/24
154.86.107.0-154.86.111.255
Signature Algorithm: sha256WithRSAEncryption
5f:4e:56:8f:e4:cb:3a:1e:7c:28:55:58:3d:f5:42:66:29:4a:
2d:d0:d0:d1:1a:37:c2:83:17:83:f1:ca:92:29:fe:10:33:ed:
10:e3:ab:3d:a8:99:0e:48:bd:1f:76:c4:51:75:e0:51:64:b5:
9d:11:25:85:68:00:a6:2d:3e:3d:31:9f:2f:2a:89:0c:1e:59:
29:41:23:cd:d9:cf:43:d5:14:c3:b1:2c:69:86:78:d2:82:1b:
06:44:20:19:c0:61:aa:33:58:74:8f:02:c2:16:11:3d:3c:25:
ad:29:4b:7c:40:68:47:e1:83:73:ec:f6:57:c4:ad:8e:6c:d8:
fb:f6:df:a0:ba:21:c1:9b:bf:f7:85:da:4f:f8:4b:ed:83:80:
b4:d7:f6:e4:ab:d0:ff:a5:10:84:ed:0a:b2:a1:44:76:73:d9:
88:9f:32:5f:1d:1b:bb:bd:61:f1:9a:98:0b:3f:1f:f1:67:d8:
cc:d3:20:df:d3:89:3e:3a:7e:cd:50:d1:55:20:a1:1c:ec:aa:
fd:b7:63:a3:88:f6:a1:56:0e:d1:c6:7b:52:cd:14:7e:48:35:
34:78:17:bd:b8:ab:2d:85:9e:5c:a4:3d:c7:4d:fa:0f:66:80:
96:5b:f0:01:80:0d:cb:39:28:1a:e5:c6:39:47:81:2b:e4:26:
0f:22:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:08:22 2025 by rpki-client