Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F6D75AFF2111EFB922FE5B762E951A.roa
File: B5F6D75AFF2111EFB922FE5B762E951A.roa (raw, json)
Hash identifier: iGjGiXSiqg8P+qoNE//L0oHC/SVyW3xfkan5VIEkDXE=
Subject key identifier: 30:61:F8:6F:5C:CC:B3:E3:2A:62:28:11:2E:05:31:0B:68:E4:79:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F6D75AFF2111EFB922FE5B762E951A.roa
Signing time: Wed 12 Mar 2025 09:09:32 +0000
ROA not before: Wed 12 Mar 2025 09:09:27 +0000
ROA not after: Mon 31 Mar 2025 09:09:27 +0000
asID: 5065
IP address blocks: 154.83.200.0/24 maxlen: 24
154.83.201.0/24 maxlen: 24
154.83.204.0/24 maxlen: 24
154.83.205.0/24 maxlen: 24
154.83.206.0/24 maxlen: 24
154.83.207.0/24 maxlen: 24
154.83.229.0/24 maxlen: 24
154.83.231.0/24 maxlen: 24
154.83.251.0/24 maxlen: 24
154.85.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95169 (0x173c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 09:09:27 2025 GMT
Not After : Mar 31 09:09:27 2025 GMT
Subject: CN=67d14f4c-a2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:df:86:d1:8f:91:45:36:9a:68:3b:1f:07:
69:eb:00:85:8c:5a:5c:f8:56:c6:8d:33:e0:8b:25:
ee:83:66:c6:ed:c1:42:54:a1:5c:c1:af:eb:10:e9:
ac:19:bb:ad:a3:6c:b2:38:eb:d2:9c:ee:9c:c1:37:
d7:9d:59:90:be:9d:58:11:c5:5b:55:6a:5d:4f:35:
29:9e:17:86:a4:67:69:5c:b5:94:11:6e:43:cf:b4:
59:0c:4c:1a:96:3c:5b:50:60:a0:61:fd:4c:af:f2:
c9:20:46:ed:be:28:0f:eb:ef:d8:11:45:ce:23:58:
16:6a:7a:3d:1e:d5:75:05:40:4e:a6:50:b8:b7:6e:
b0:2e:2d:23:b7:db:87:25:b7:e7:7b:52:61:c9:97:
0f:b9:f9:3b:a8:c5:81:5a:26:92:7f:32:01:ce:ac:
ec:64:04:a3:07:33:b6:1a:08:c4:ba:31:d9:3f:30:
22:0e:4d:fb:a6:8f:49:c8:d8:90:82:dd:7c:01:c6:
3a:09:b2:20:75:ed:94:3c:46:96:ed:f4:67:a7:e2:
94:46:a3:3f:92:d3:2c:82:96:c5:db:32:8e:39:fe:
22:76:2e:05:e6:a0:a8:1f:ec:79:64:52:06:95:ff:
77:45:85:50:3b:2e:1d:98:6e:cc:05:db:05:10:2f:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:F8:6F:5C:CC:B3:E3:2A:62:28:11:2E:05:31:0B:68:E4:79:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F6D75AFF2111EFB922FE5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.200.0/23
154.83.204.0/22
154.83.229.0/24
154.83.231.0/24
154.83.251.0/24
154.85.111.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d7:e2:07:65:5c:b8:4b:1f:c4:a1:d0:e3:5c:f1:44:31:85:
28:aa:1f:95:e8:45:0c:af:77:46:e5:61:4b:9c:24:f6:86:40:
06:ae:02:42:51:3c:a9:ce:ce:3c:8c:f4:14:3b:58:e6:95:1e:
9d:7e:f6:bf:1d:05:f9:42:76:57:bf:03:a5:04:ad:59:63:d3:
4c:71:f7:32:3d:37:78:cf:63:72:43:e7:b0:0a:1c:ca:40:03:
de:6a:2b:48:28:06:99:64:12:44:85:fa:81:a1:cf:ed:f8:14:
ff:03:b3:fe:f8:ec:b8:6a:ca:5a:1d:55:f5:42:33:43:3c:9a:
ad:2e:15:27:8a:47:99:9c:8e:a5:65:9b:d2:fc:ca:c9:e8:e3:
79:15:eb:fb:97:02:50:9a:62:02:d2:f9:fb:35:5e:f8:ca:54:
d8:71:8e:ca:68:18:46:6f:8e:6c:1e:1b:6f:99:af:a8:52:a8:
78:9f:fb:50:f8:1e:5b:09:f2:08:bc:05:86:26:29:31:4e:c8:
50:82:3d:97:98:ba:df:75:62:b8:3c:a5:3b:8d:1f:3f:3b:ec:
ab:7f:1e:1a:43:69:e3:bd:cb:e4:f3:18:b0:9f:c0:57:18:af:
33:d7:ff:86:46:8b:6c:81:ca:ec:00:80:c1:4b:06:3d:58:6a:
a3:0c:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:41 2025 by rpki-client