Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF027F83A0311F0A012A895DAE4EC9C.roa
File: CEF027F83A0311F0A012A895DAE4EC9C.roa (raw, json)
Hash identifier: U7VXY+Cpks0MMpvKOG1QazM8kY2XzYUcslc/+9h/300=
Subject key identifier: 01:51:1A:92:F9:5F:B2:DD:90:2E:48:B3:55:8D:A8:58:75:3B:08:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF027F83A0311F0A012A895DAE4EC9C.roa
Signing time: Mon 26 May 2025 07:34:08 +0000
ROA not before: Mon 26 May 2025 07:34:04 +0000
ROA not after: Wed 04 Jun 2025 07:34:04 +0000
asID: 135097
IP address blocks: 154.197.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99013 (0x182c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 07:34:04 2025 GMT
Not After : Jun 4 07:34:04 2025 GMT
Subject: CN=68341970-c7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:bb:46:e6:1f:13:8b:e5:d5:b6:3d:32:81:
66:b1:9e:4e:13:74:b6:b3:c3:04:bd:07:56:b4:f1:
33:72:e2:63:32:60:a9:18:ca:30:9e:6a:c2:d6:12:
af:a2:4e:ca:e8:b6:8c:b6:07:04:08:67:2e:90:9f:
6a:26:d4:d3:6b:5b:f6:c4:9f:8f:72:5e:8f:b7:95:
21:55:64:56:88:53:88:bc:0b:32:5d:02:01:fd:f8:
01:f3:05:bc:36:11:61:f3:7d:65:aa:8c:1b:a8:91:
4e:13:57:8a:c7:5b:fe:61:30:09:94:0b:3d:ea:15:
9f:34:97:d3:06:69:97:07:5e:bd:48:1c:a7:b5:34:
21:ee:02:eb:64:63:70:8d:2c:13:d8:41:b5:47:58:
63:23:4f:60:af:24:08:03:7b:cc:47:19:58:15:70:
48:cc:23:4b:a4:3b:f5:38:c7:6a:ea:12:22:94:50:
4d:f5:51:28:73:dd:44:ce:92:f9:75:0b:49:48:f2:
ba:84:fe:80:57:66:f5:b2:f9:dd:da:14:e3:e3:07:
0a:9a:33:c6:ce:07:a1:cc:50:b7:3b:46:29:84:2b:
74:ab:d9:74:56:21:25:dd:d4:f8:58:7b:58:2e:ce:
c2:a4:1c:fd:9c:96:e7:4a:e8:24:a7:3c:81:d1:aa:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:51:1A:92:F9:5F:B2:DD:90:2E:48:B3:55:8D:A8:58:75:3B:08:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEF027F83A0311F0A012A895DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.128.0/17
Signature Algorithm: sha256WithRSAEncryption
88:80:88:2a:4d:f2:9d:52:90:21:08:04:49:c5:48:95:23:12:
0d:ce:4e:cc:cf:08:a0:b2:e3:1b:95:af:ae:9b:14:91:d4:11:
b2:6e:31:2a:77:0f:0e:9a:a8:b2:5d:5a:7c:5d:63:9b:03:32:
64:7a:06:f5:e6:28:7d:48:96:08:89:ba:67:b4:bd:a1:1e:cd:
37:48:40:db:3c:40:9c:d5:4f:05:8f:0d:1d:e7:06:68:be:45:
9b:c7:0c:37:75:ba:04:a5:4c:03:3f:ee:12:94:7f:46:01:62:
97:c2:89:2b:06:c2:4e:3f:dc:50:98:ea:e2:72:b9:59:0f:ae:
5b:0e:40:6d:d0:c3:e0:85:cf:e4:d4:48:c9:06:d8:1b:50:09:
7b:00:7f:35:55:e3:e9:71:61:33:c0:24:b9:6d:87:fb:97:a4:
b8:2e:63:da:53:fe:e1:26:70:77:ce:d3:da:8f:26:af:b2:9b:
a8:c2:eb:1c:61:33:c1:a2:e7:7e:c1:55:e9:77:e6:93:d1:c9:
2c:71:94:c1:eb:09:7d:2b:42:a4:02:73:0b:91:1d:03:b2:b4:
be:98:5b:b7:2e:7d:3b:e6:a8:f2:39:76:cf:dc:22:14:02:f5:
22:ad:46:c9:77:30:f4:36:e0:30:26:82:e3:97:02:43:8f:88:
c4:0f:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:38:20 2025 by rpki-client