Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E609DFB2F83911EFBFD4E97B762E951A.roa
File: E609DFB2F83911EFBFD4E97B762E951A.roa (raw, json)
Hash identifier: xbohQSU3fkKh1GZK5bmXrYF76sVUs2p+b4NysaOVMbk=
Subject key identifier: DE:C1:F1:E3:5E:66:39:F8:69:8D:39:3A:2A:F2:A6:3D:4B:49:22:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E609DFB2F83911EFBFD4E97B762E951A.roa
Signing time: Mon 03 Mar 2025 14:15:03 +0000
ROA not before: Mon 03 Mar 2025 14:14:59 +0000
ROA not after: Thu 27 Mar 2025 14:14:59 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
154.81.41.0/24 maxlen: 24
154.81.42.0/24 maxlen: 24
154.81.43.0/24 maxlen: 24
154.81.44.0/24 maxlen: 24
154.81.45.0/24 maxlen: 24
154.81.46.0/24 maxlen: 24
154.81.47.0/24 maxlen: 24
154.81.52.0/24 maxlen: 24
154.81.53.0/24 maxlen: 24
154.81.54.0/24 maxlen: 24
154.81.55.0/24 maxlen: 24
154.81.192.0/24 maxlen: 24
154.81.193.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94433 (0x170e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 14:14:59 2025 GMT
Not After : Mar 27 14:14:59 2025 GMT
Subject: CN=67c5b967-4db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:f8:22:7d:db:a5:50:6a:db:ea:15:47:1e:
ea:54:da:06:b3:d0:be:8d:55:02:4b:c4:70:54:ec:
79:cc:51:ec:9d:49:e7:bc:88:13:04:82:1b:84:a1:
64:66:a3:22:d8:b9:11:b3:ba:62:a6:46:bf:0c:85:
a4:f6:de:a0:06:d2:1c:ec:f5:8b:b3:12:d5:9b:1b:
b4:a4:8c:af:a6:d5:61:38:aa:e8:80:c2:42:e3:54:
09:29:94:2c:8b:20:34:61:f1:97:1e:b4:47:21:0d:
75:9e:4a:d1:1a:83:42:20:46:b9:a7:dd:c8:41:0e:
c3:e8:30:b5:7b:10:e5:43:80:c1:d7:1f:af:c0:2f:
88:3c:a8:89:16:a5:aa:73:93:99:20:5a:3b:d8:df:
32:5b:11:55:c2:e7:d2:79:50:5b:7d:71:db:82:9f:
5d:9c:ab:1b:6d:75:7b:60:15:bc:04:55:a0:63:2d:
e7:dc:3b:fd:90:90:51:d3:7c:6c:80:7d:22:b2:71:
80:1f:0d:cb:1d:d9:a2:2d:38:76:24:9c:94:29:34:
6d:71:53:8d:e9:a3:0f:89:e5:60:9b:01:23:43:2f:
11:84:df:0a:eb:4f:ad:00:22:76:77:46:48:73:bf:
bb:52:69:9b:c8:8c:11:32:61:83:c0:64:5d:fb:d0:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:F1:E3:5E:66:39:F8:69:8D:39:3A:2A:F2:A6:3D:4B:49:22:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E609DFB2F83911EFBFD4E97B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/21
154.81.52.0/22
154.81.192.0/21
Signature Algorithm: sha256WithRSAEncryption
79:59:48:9f:c6:2e:d0:db:10:c3:bd:b5:a8:b6:11:b1:e4:df:
4a:e9:cf:09:ed:9e:dd:1e:06:39:70:13:03:ac:52:a2:ba:aa:
2b:d2:a4:88:0d:73:b5:fb:7c:1b:a5:e7:b6:a0:3c:15:20:43:
4f:b0:16:46:df:8b:00:54:80:6b:cd:3a:7f:56:dd:ea:91:ed:
cc:ba:21:9c:5b:03:09:d3:e7:12:25:a2:72:96:09:60:a9:9c:
3c:11:25:1f:03:1b:ab:01:61:c7:78:00:d7:b1:0a:86:99:01:
58:13:ad:8b:23:df:b8:11:25:2e:46:16:43:04:b5:1c:7a:ef:
f6:1a:ec:ee:6c:41:b1:3e:e2:92:1e:b0:00:99:52:fd:a5:34:
c1:1a:2a:18:2e:1f:bc:00:91:91:b7:86:24:15:5a:4d:39:90:
a8:4e:da:e0:68:c0:99:08:22:92:3d:42:12:00:34:18:c2:3c:
e8:f4:74:6e:e0:73:59:cc:81:fb:3b:56:a2:b1:64:75:7b:6b:
cc:e1:51:f3:c2:ea:fa:47:03:56:bb:87:62:a8:70:79:d4:5a:
97:a1:aa:40:ce:5c:79:8c:9b:d7:4a:6b:b0:73:08:2a:ea:ad:
7e:5e:1e:08:7a:2d:79:31:d6:9e:53:82:d7:6b:cc:e2:8a:ec:
af:44:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:05:03 2025 by rpki-client