Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75ED38AFD9011EFA9AC4092762E951A.roa
File: D75ED38AFD9011EFA9AC4092762E951A.roa (raw, json)
Hash identifier: UTBzpx9+xKJ9p3SryFfjIDnAXZ+t8Thgpz5umpi3+hY=
Subject key identifier: 76:76:64:C2:79:AB:51:BE:B2:24:74:0E:E5:F9:28:EC:E5:8A:CD:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017337
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75ED38AFD9011EFA9AC4092762E951A.roa
Signing time: Mon 10 Mar 2025 09:20:00 +0000
ROA not before: Mon 10 Mar 2025 09:19:56 +0000
ROA not after: Tue 01 Apr 2025 09:19:56 +0000
asID: 5065
IP address blocks: 154.207.144.0/24 maxlen: 24
154.207.145.0/24 maxlen: 24
154.207.146.0/24 maxlen: 24
154.207.148.0/24 maxlen: 24
154.207.149.0/24 maxlen: 24
154.207.150.0/24 maxlen: 24
154.207.164.0/22 maxlen: 24
154.207.168.0/22 maxlen: 24
154.207.172.0/22 maxlen: 24
154.207.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95031 (0x17337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 09:19:56 2025 GMT
Not After : Apr 1 09:19:56 2025 GMT
Subject: CN=67ceaec0-dc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:80:59:75:a9:2f:4a:50:3b:c9:93:71:7e:
c1:82:c3:dd:ce:33:a4:71:a2:67:f4:c7:60:03:82:
2d:84:74:3b:9d:dd:60:91:f8:00:3c:e9:e6:48:a0:
38:0b:b1:42:6f:9d:61:ea:d8:00:a0:e5:02:da:b3:
c8:10:e2:68:6c:d2:a0:f7:db:a3:e1:65:26:f9:c3:
46:ff:46:83:a7:e7:6b:0b:01:fb:28:1f:18:73:69:
92:88:d4:b1:20:3f:77:d3:11:7a:3d:df:0d:f2:ca:
26:c8:41:fc:86:b1:cd:1e:5d:7d:8f:f9:40:bc:f7:
16:c7:7c:00:73:48:35:77:1d:e8:65:41:be:28:c9:
cd:80:93:ff:49:e0:fd:05:44:a6:73:59:47:82:99:
83:80:78:f8:11:17:34:87:5b:c6:48:c5:4a:e9:84:
91:b9:29:63:27:a6:ae:80:fa:e4:ee:f4:3c:89:7b:
fd:f5:22:5e:4d:10:66:b8:7a:8a:6c:20:24:8a:5d:
2a:62:12:86:50:4d:20:b1:99:9f:fd:04:96:eb:3d:
55:9d:05:a8:23:1c:4e:6a:c5:07:7c:e4:f9:b2:b6:
81:4b:5b:c0:d8:c7:8a:fb:32:ca:01:3c:b5:5f:ce:
82:c3:7f:69:fc:9e:88:33:66:f3:11:55:7e:5e:1d:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:76:64:C2:79:AB:51:BE:B2:24:74:0E:E5:F9:28:EC:E5:8A:CD:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75ED38AFD9011EFA9AC4092762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.144.0-154.207.146.255
154.207.148.0-154.207.150.255
154.207.164.0-154.207.183.255
Signature Algorithm: sha256WithRSAEncryption
b6:b4:07:d2:b5:d3:53:21:53:79:a4:d9:08:5c:8f:fe:1d:27:
aa:74:b6:aa:eb:2b:eb:c4:44:f3:55:c8:5d:ed:3c:bf:10:a3:
b5:03:e6:95:2c:47:55:aa:34:61:b7:0b:ca:3f:4b:d7:4a:db:
f2:cc:76:b7:78:77:88:85:56:94:74:f0:05:78:15:d7:3c:1a:
d8:0a:56:2d:a4:a3:8a:73:e7:5f:19:35:82:bf:9b:2d:97:f2:
fa:bd:94:f0:3a:33:3e:96:38:9e:94:98:45:d6:09:e7:b4:3d:
02:ad:4e:73:6f:4a:58:82:f5:e8:5b:ff:f1:86:28:98:b8:51:
90:b4:bf:16:cd:c8:3d:c2:75:f8:4d:0b:0d:f0:36:cb:ca:42:
6d:47:c3:4b:10:b6:f6:73:c4:da:da:e5:bb:c0:97:e9:f1:96:
89:03:47:13:d4:9d:2f:34:7e:11:01:52:65:ae:eb:32:a2:cd:
03:aa:24:bb:be:75:80:85:bb:14:8b:41:34:56:39:ca:59:d2:
c7:fd:a3:dd:49:bf:18:2f:ad:90:75:53:94:42:6e:99:9d:30:
c3:d3:f4:47:66:c0:14:bc:96:69:15:1a:21:be:36:f8:0e:f4:
c6:86:63:07:88:ef:99:1e:cb:41:4b:24:e0:4a:4c:75:c2:d0:
e3:c4:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:17:13 2025 by rpki-client