Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78B1E26F85F11EFADC5387A762E951A.roa
File: D78B1E26F85F11EFADC5387A762E951A.roa (raw, json)
Hash identifier: Tf2HEyPdq/X6K/U4OeVCGQhiqD8pY9SlorF6xQl9pRk=
Subject key identifier: B6:89:14:76:17:F7:3B:6C:F8:25:50:4E:FF:8A:1A:55:CF:77:9B:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017111
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78B1E26F85F11EFADC5387A762E951A.roa
Signing time: Mon 03 Mar 2025 18:46:39 +0000
ROA not before: Mon 03 Mar 2025 18:46:36 +0000
ROA not after: Thu 27 Mar 2025 18:46:36 +0000
asID: 49505
IP address blocks: 154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94481 (0x17111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 18:46:36 2025 GMT
Not After : Mar 27 18:46:36 2025 GMT
Subject: CN=67c5f90f-9628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:be:ad:47:ae:c8:6c:72:b2:ac:c1:72:f7:
22:93:8e:4a:b2:0d:f1:ab:bd:8a:84:f0:f6:5e:14:
3a:7d:1d:96:e2:03:4b:65:88:97:2f:88:42:4c:14:
63:6e:ff:83:17:c8:e7:d3:47:95:de:ac:a8:37:8c:
4c:38:b3:49:6b:b5:3d:1a:a5:0e:a4:da:3f:d8:5a:
23:99:cd:3f:c1:c3:7d:7a:96:cd:5c:27:c8:50:23:
be:42:ed:76:24:35:67:91:33:af:19:47:dd:b4:d7:
f0:8d:99:21:ff:37:3a:97:00:30:54:e6:99:e9:6e:
ac:91:ec:9b:96:12:e4:82:75:75:2b:e8:a0:95:60:
fd:a5:6c:1c:28:9e:af:2d:f0:34:e6:4e:65:35:ea:
68:04:fd:34:62:56:ef:ab:16:ea:d6:5a:3c:b1:4a:
86:61:2d:3d:c1:de:5c:42:1f:0c:be:0f:a1:c7:b9:
2f:66:c0:4c:4c:44:6f:20:d0:dc:d2:74:f0:2d:d0:
ff:14:e8:b8:90:ba:20:28:6d:58:fc:53:1c:83:ac:
36:67:2c:15:ef:c4:b4:fc:dc:70:2a:40:44:e0:16:
c8:18:16:df:24:d8:1b:76:3e:63:b5:d3:e4:8f:88:
5b:ce:4b:db:05:0e:25:0a:5b:da:46:57:ed:0c:b1:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:89:14:76:17:F7:3B:6C:F8:25:50:4E:FF:8A:1A:55:CF:77:9B:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D78B1E26F85F11EFADC5387A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.221.0-154.209.223.255
154.223.200.0/22
154.223.205.0-154.223.207.255
Signature Algorithm: sha256WithRSAEncryption
20:bf:e2:87:8e:d5:2d:13:80:83:48:d9:1c:86:f5:21:06:d8:
67:1c:aa:17:ac:ed:a4:39:56:1e:64:73:af:6b:ca:b5:62:fe:
13:c5:a5:8b:59:e2:48:74:46:9e:62:f1:4a:aa:05:cb:11:33:
58:17:0e:b1:4f:56:02:bd:a2:ec:79:42:f7:c2:a4:61:ea:0e:
92:eb:e5:07:81:03:ef:bc:e5:d2:e3:e4:76:20:a7:39:cb:19:
95:1e:d4:34:06:73:46:73:b4:95:33:74:a0:0f:7a:cd:f4:94:
f0:18:19:6e:c0:dc:83:89:83:35:93:71:a0:ac:6e:bb:1b:6d:
b5:7a:03:5e:a1:15:02:99:f2:82:9e:74:9d:f6:5b:d0:2f:4e:
b5:c6:e3:2c:8e:90:d1:12:0c:2f:07:60:df:9d:6a:42:ae:c4:
d0:6b:62:5d:69:37:22:55:83:c0:9f:5b:dd:2c:48:93:c5:c1:
f6:ed:9b:15:89:b9:68:2d:1b:9d:d7:33:83:f4:cc:2c:35:24:
2a:b4:e9:c9:ed:9d:b7:a6:02:37:76:74:6a:25:78:79:64:a4:
df:56:cc:f6:67:b1:3f:fa:5d:69:74:2d:9b:6d:9b:c9:19:22:
85:c2:14:ad:81:a0:29:a6:ec:d2:3a:ec:4f:80:98:d7:05:4b:
99:fa:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:00:17 2025 by rpki-client