Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C897023AF86A11EF9E31AD42762E951A.roa
File: C897023AF86A11EF9E31AD42762E951A.roa (raw, json)
Hash identifier: E+VsBHUI57wU9bOvYnhAcEwNRpOxMq88jkaAOGu8FB4=
Subject key identifier: 84:54:8C:94:81:66:A7:FC:1A:60:D7:5C:36:A8:39:A6:98:21:D2:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01712D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C897023AF86A11EF9E31AD42762E951A.roa
Signing time: Mon 03 Mar 2025 20:04:59 +0000
ROA not before: Mon 03 Mar 2025 20:04:55 +0000
ROA not after: Thu 27 Mar 2025 20:04:55 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94509 (0x1712d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 20:04:55 2025 GMT
Not After : Mar 27 20:04:55 2025 GMT
Subject: CN=67c60b6b-3a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:01:32:d9:d1:38:4c:21:13:61:e2:88:02:
24:e2:03:44:a2:b3:55:80:70:17:c6:3e:bf:0b:17:
8e:e7:92:0b:dc:d4:a0:46:3c:20:f8:10:bb:d2:fe:
47:25:8c:24:88:3f:c3:b5:b1:aa:b1:71:3d:d4:f5:
a1:80:f3:4c:4f:f5:d8:d7:ee:12:d2:7d:e5:a0:43:
49:c4:b2:2b:24:d4:d2:d0:66:6c:25:0e:f3:a5:34:
e5:10:63:54:e8:d3:26:c5:ff:59:80:57:28:53:7f:
90:b5:f6:8e:e0:25:83:b1:a9:1c:6d:d1:a2:67:38:
8f:c6:87:7d:e6:35:e0:81:98:80:2f:03:af:5e:a7:
ff:dc:aa:14:21:a6:7d:a5:1e:e4:ea:36:61:18:37:
23:ed:76:03:7e:47:d1:ae:55:1f:53:31:80:3e:0e:
e7:8d:9f:bf:fd:de:25:81:2c:26:19:f5:a6:b4:8d:
36:e6:90:63:d8:fd:53:26:47:c3:69:e9:ce:01:b8:
ea:1f:35:30:61:9a:c8:f0:f1:51:32:a9:66:87:b7:
a6:a3:c2:64:eb:75:ee:6b:09:c1:c2:65:38:ab:36:
61:91:64:a1:8e:c5:92:9b:28:04:f0:c6:c8:1a:ad:
43:34:f6:5c:df:9b:48:74:44:57:ce:62:c2:8f:4b:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:54:8C:94:81:66:A7:FC:1A:60:D7:5C:36:A8:39:A6:98:21:D2:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C897023AF86A11EF9E31AD42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0/24
154.198.39.0/24
154.203.206.0/23
154.203.212.0/22
154.203.250.0/24
154.205.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d3:0f:80:aa:26:4f:e4:26:72:e6:8e:10:2b:38:f1:67:c5:
d4:1c:4b:94:33:42:e1:40:6a:33:38:50:09:fb:06:84:06:43:
c4:2e:ad:01:17:66:fa:f3:fe:94:0e:52:f5:18:3f:19:e6:72:
20:d3:e4:3c:ed:89:6b:ad:99:cf:f1:85:c3:3d:d8:d9:87:ca:
7c:9a:5e:bd:c9:96:25:31:d2:fb:41:99:f5:2a:39:1f:bd:29:
cc:77:b9:98:4d:89:f8:68:45:18:a8:52:c7:74:4a:83:98:a3:
62:62:57:3c:e7:cd:9f:07:0d:65:5f:47:69:ab:a6:0d:82:be:
46:55:46:f4:4a:fc:1c:82:cb:9a:04:65:a3:2a:0a:bc:34:f6:
98:fc:d8:2d:f8:fc:9d:a5:89:c8:d8:0d:e0:b8:f2:68:e1:bf:
08:ab:b0:df:52:37:cf:28:8f:8e:78:96:87:3c:d0:bb:c4:33:
a4:5c:61:7b:3d:91:16:83:1c:c4:17:1d:fe:a1:bd:f1:c5:29:
05:dd:f4:c3:7a:c9:43:00:9d:d1:f8:92:1f:b3:18:05:ea:55:
db:fb:18:06:b1:f0:cd:7f:18:22:46:43:fd:51:a5:3d:73:8b:
1c:60:29:81:ff:a7:a5:2a:ca:00:19:a8:5f:ec:21:8e:b7:ba:
67:3e:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:32:58 2025 by rpki-client