Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE39B2E6F86011EFB6690A81762E951A.roa
File: CE39B2E6F86011EFB6690A81762E951A.roa (raw, json)
Hash identifier: HxlmBmNlZDLHF7Md76Dpkd/wrZ0w7b/dOxMC0qfKhk8=
Subject key identifier: FB:0C:E0:FB:27:ED:A6:2E:D9:D2:36:7A:84:76:6E:14:9D:2A:51:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017113
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE39B2E6F86011EFB6690A81762E951A.roa
Signing time: Mon 03 Mar 2025 18:53:33 +0000
ROA not before: Mon 03 Mar 2025 18:53:29 +0000
ROA not after: Thu 27 Mar 2025 18:53:29 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.205.247.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94483 (0x17113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 18:53:29 2025 GMT
Not After : Mar 27 18:53:29 2025 GMT
Subject: CN=67c5faad-e0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:3f:0f:e1:59:26:41:49:f4:1c:a2:db:50:
aa:71:40:b4:27:48:36:9a:2f:d2:63:da:80:f3:bb:
39:80:d3:db:80:29:f0:4c:68:3b:95:40:64:8a:43:
a4:74:38:4c:d5:5e:10:c3:d5:1f:2b:24:9d:de:81:
98:ef:8c:9a:6c:6a:89:44:c6:f2:e1:0e:e4:e7:b0:
cb:93:85:be:ca:d0:11:ef:5e:0b:fd:25:7a:15:80:
e2:85:1d:32:c4:32:f5:ec:2d:c4:d4:81:f0:30:03:
fa:d3:6a:3a:c3:6f:6c:fc:b3:8f:a0:74:b3:b0:ed:
fd:76:b0:38:5d:0d:1a:4c:69:10:5a:c7:0c:12:5e:
0f:93:a3:86:e5:45:01:d9:e3:22:c1:7b:e0:58:5a:
fc:f9:be:c6:a4:dd:d4:d6:77:97:3e:3a:0b:e9:be:
31:25:a6:39:90:bb:5a:aa:79:f2:ee:64:d7:67:ec:
af:14:5f:1e:0e:ba:a5:73:ae:b5:61:df:4c:7c:f0:
51:70:0e:d2:89:68:55:e7:9b:d0:92:e4:56:0a:cc:
30:11:31:bc:0e:ea:49:4f:85:c9:d1:a9:db:bd:ef:
1f:15:16:a3:0e:69:28:ce:be:3c:39:21:e8:cb:e1:
1a:28:43:be:2c:b3:a5:42:73:bf:12:cc:ad:b6:b6:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:E0:FB:27:ED:A6:2E:D9:D2:36:7A:84:76:6E:14:9D:2A:51:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE39B2E6F86011EFB6690A81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/22
154.223.198.0/23
154.223.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5b:35:66:09:aa:fa:76:72:25:80:8e:42:2f:2c:7c:b0:f1:
c7:00:69:26:db:fa:fe:5e:b1:db:8d:48:7f:fb:ae:48:0d:4b:
5d:58:4c:80:95:44:e1:1f:e6:81:ac:8a:63:2e:c3:d7:46:6c:
aa:34:85:ea:fe:51:fa:3b:c4:fb:48:4e:9f:48:85:22:10:34:
f8:be:44:ac:c8:2e:c0:39:dd:b4:cd:c3:7b:cc:55:a4:0e:de:
23:53:0a:19:88:95:f0:95:5b:21:e7:d8:e1:cd:b3:fd:ba:a7:
78:ef:a9:73:c3:bd:d1:73:26:e2:41:a8:38:dd:ae:54:71:7f:
7f:ee:38:a3:af:bc:33:d2:92:de:24:07:8c:b2:b9:68:2f:d2:
85:b2:33:b7:42:69:4d:08:38:73:b2:2f:75:5b:7b:54:ef:3c:
43:98:ad:b7:dd:c5:c4:bd:a3:7d:01:61:4b:14:39:b6:76:c5:
84:76:e1:4d:2e:53:a7:0c:20:a8:e4:12:b7:19:7b:41:0a:99:
47:0a:4f:e4:21:f1:94:7e:a1:9b:64:68:b0:5c:0e:ac:7e:39:
35:d9:67:3c:34:64:81:f1:f6:ac:35:66:07:f4:6a:6a:58:39:
76:6f:7a:35:10:6a:85:c3:93:be:43:2f:49:34:f5:d4:10:e9:
39:fa:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:26:23 2025 by rpki-client