Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3169398F85911EF806D5A53762E951A.roa
File: E3169398F85911EF806D5A53762E951A.roa (raw, json)
Hash identifier: INDWAqqlu95n7uRBJ1h9weu5gAXaEViP/4aBOlAOLr8=
Subject key identifier: 94:E5:BD:C0:DC:D1:B4:14:C9:3E:34:F1:43:CC:9F:BD:06:CE:3A:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017103
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3169398F85911EF806D5A53762E951A.roa
Signing time: Mon 03 Mar 2025 18:04:02 +0000
ROA not before: Mon 03 Mar 2025 18:03:58 +0000
ROA not after: Thu 27 Mar 2025 18:03:58 +0000
asID: 62240
IP address blocks: 154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94467 (0x17103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 18:03:58 2025 GMT
Not After : Mar 27 18:03:58 2025 GMT
Subject: CN=67c5ef12-d266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:51:f2:eb:c6:3c:a4:bf:85:31:42:56:22:
a6:71:e5:f1:f1:ad:c8:54:7f:79:47:f1:57:2e:b2:
d4:79:42:b0:42:31:97:df:6c:fe:0c:60:de:2c:73:
e1:a0:b6:e4:74:f0:7d:c4:cd:86:8e:bc:ac:55:f4:
9b:a9:7e:12:08:10:f4:6d:e0:7e:c1:95:e3:ce:c7:
02:2f:09:54:4d:3a:41:86:58:a8:8f:63:40:51:37:
29:c2:87:cc:4d:b5:33:95:86:fa:01:30:b5:1e:7b:
b3:76:55:d4:b2:17:84:f9:09:df:94:23:cc:5a:05:
c5:38:90:d2:e9:f1:1b:fb:2c:60:10:07:68:a9:7f:
37:3b:8e:05:fc:9f:8f:2c:16:0d:bc:6a:6c:6b:55:
09:b5:c2:f2:12:bd:55:6f:d6:3a:d5:18:2d:77:f0:
97:31:ce:59:8a:f9:ce:36:af:e4:7e:a7:e8:51:45:
cb:38:c9:1a:db:3a:5b:5c:95:b1:10:02:58:52:67:
d4:36:05:5a:b2:a4:7f:e3:b6:a4:56:7e:16:2a:69:
da:29:b5:da:48:1d:f0:ad:58:ba:21:05:66:13:33:
14:f0:60:92:36:e6:ce:96:97:23:f4:2d:79:ac:62:
c9:b9:6d:db:b3:91:17:d5:28:f4:69:7a:4a:42:29:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:BD:C0:DC:D1:B4:14:C9:3E:34:F1:43:CC:9F:BD:06:CE:3A:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3169398F85911EF806D5A53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.208.0-154.223.212.255
154.223.219.0-154.223.223.255
Signature Algorithm: sha256WithRSAEncryption
57:57:be:34:f0:51:41:82:4f:08:20:7d:02:63:ee:78:0f:15:
f4:ef:9c:31:8e:69:46:55:7a:06:cd:5c:d4:41:c3:cf:46:89:
37:76:7b:cd:01:9b:db:72:53:ff:57:f9:da:ba:bb:1d:1c:9c:
c1:3e:74:c4:40:a1:b2:4a:27:d3:e0:8e:61:86:ab:59:73:4f:
e7:e8:fe:a3:34:66:9b:31:a0:06:ca:54:08:f8:58:5d:da:c4:
6f:01:a7:84:ba:da:4e:2a:e8:e9:ef:97:fc:33:03:22:3b:28:
f1:48:ae:cd:47:93:d7:42:8e:b6:1f:97:07:85:35:bb:ee:fa:
38:d2:8b:ca:ba:2c:82:60:5f:30:98:3b:09:c9:43:c1:d9:27:
2d:50:37:93:19:22:02:37:ec:1a:d1:f7:4e:54:ae:d1:70:99:
52:76:06:e3:0e:24:16:d9:ef:43:65:00:3c:45:9c:ed:ec:64:
6c:e3:69:35:ef:9b:31:c7:6f:84:e4:16:ed:56:d3:07:5c:85:
e4:5c:20:e8:fc:8d:69:bf:0a:37:4f:14:09:03:13:26:13:2b:
49:8b:99:b5:60:1c:76:18:73:38:78:3c:5f:52:28:5b:b3:ed:
47:16:d8:f2:3d:bb:00:24:78:fa:e8:d8:93:0f:e0:f4:3e:b0:
47:f8:27:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 9 07:12:56 2025 by rpki-client