Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFBAB330F8CA11EFB5A08E5D762E951A.roa
File: CFBAB330F8CA11EFB5A08E5D762E951A.roa (raw, json)
Hash identifier: DgKD1Fff/GFXDfu/VTDOOzjP/kBC4+6XShhg8dmXIFg=
Subject key identifier: 29:B4:EE:7F:EF:53:87:0F:22:A8:83:7F:B5:65:F1:05:F6:34:2F:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01717A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFBAB330F8CA11EFB5A08E5D762E951A.roa
Signing time: Tue 04 Mar 2025 07:32:22 +0000
ROA not before: Tue 04 Mar 2025 07:32:18 +0000
ROA not after: Mon 31 Mar 2025 07:32:18 +0000
asID: 49505
IP address blocks: 154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94586 (0x1717a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 07:32:18 2025 GMT
Not After : Mar 31 07:32:18 2025 GMT
Subject: CN=67c6ac86-7f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:fa:bf:65:f7:87:81:36:de:e2:09:9f:dc:
6c:06:1b:f6:55:25:73:bc:ea:ed:ef:86:33:a5:9d:
34:ce:d0:7d:12:95:33:e2:3f:30:66:50:c2:00:ad:
57:fd:61:e4:06:ef:76:34:70:7e:ad:1e:af:02:2e:
bf:11:46:64:9a:05:ea:1d:39:75:b7:c4:34:98:56:
e3:c1:f0:b6:07:c7:67:a2:1f:63:75:45:97:04:8f:
b3:dc:0a:e4:4e:ef:52:60:42:89:4f:cb:8d:d9:48:
eb:ad:8b:fa:5c:a6:f3:ba:13:2d:9a:3a:92:c7:2f:
78:72:33:85:7b:ce:6a:d5:cc:c1:00:c6:91:55:cf:
13:93:b1:ca:ed:d3:93:f1:95:3d:dc:4d:e6:27:0d:
54:9b:2c:be:ed:86:57:20:fc:5a:7c:b3:73:5e:74:
10:13:28:04:32:b2:02:c5:17:2d:67:10:04:35:2a:
7d:ae:98:71:6b:d8:4d:ed:55:15:80:5f:f8:1b:48:
85:71:83:eb:85:00:1c:3e:bf:72:e9:5c:fd:6e:42:
79:22:5a:dd:16:d4:53:39:6c:2a:6c:08:1e:f6:a5:
57:cc:e1:b6:0e:47:f3:34:c4:cc:d1:9f:de:e6:4d:
d3:3a:b8:cc:75:9a:3c:c7:dd:9d:00:1a:58:db:1d:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B4:EE:7F:EF:53:87:0F:22:A8:83:7F:B5:65:F1:05:F6:34:2F:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFBAB330F8CA11EFB5A08E5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.221.0-154.209.223.255
Signature Algorithm: sha256WithRSAEncryption
14:9d:33:e7:bf:1b:51:ce:0d:0a:07:b2:ab:7f:0d:32:e9:ea:
6f:72:70:fa:79:95:f7:20:93:17:e6:e3:84:42:74:08:81:40:
5e:3b:a1:30:81:35:bc:29:73:24:13:b5:7c:3f:a9:3e:65:8f:
70:a0:7c:8b:0d:93:9f:4f:5a:d1:d1:a5:58:77:b7:52:b1:ba:
7c:9a:9d:9e:13:2d:66:a9:93:e6:7b:a8:fa:5e:61:eb:cc:ff:
f0:14:9c:ef:38:fb:85:63:ee:bd:89:12:e5:d3:ab:8d:6c:66:
97:b7:3b:58:2a:77:78:5d:84:35:43:c1:c6:30:69:fe:d8:93:
fc:20:a8:c2:f4:fb:43:c1:d5:0d:19:61:7e:8f:a2:12:84:5e:
9e:09:af:d9:31:88:de:db:5c:aa:87:1c:23:a3:d0:67:1d:98:
7e:94:cf:d3:8e:9a:9a:4f:c4:d3:59:11:96:b1:f4:cf:00:29:
ab:73:05:e3:0e:4d:83:20:0a:63:6f:93:34:fc:af:00:e3:17:
f1:ba:18:0f:5c:3e:58:e8:8a:1f:d2:e9:3c:68:6f:bb:81:d0:
11:8e:db:24:af:dc:65:b1:ca:2b:3c:f9:61:83:79:d7:c8:9a:
49:40:34:9c:3a:15:cf:66:73:ec:64:a2:86:32:c3:f1:5a:c4:
f8:27:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:23:36 2025 by rpki-client