Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC595EEEF86E11EFBC95605F762E951A.roa
File: EC595EEEF86E11EFBC95605F762E951A.roa (raw, json)
Hash identifier: jWI7KyNzXIUFc7n4TsqO01rTpCb6qkS8BVBD29pA+W8=
Subject key identifier: 49:C9:43:DB:39:A7:8B:A9:E6:7B:F1:B1:E2:0F:B3:73:AC:1E:C4:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017139
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC595EEEF86E11EFBC95605F762E951A.roa
Signing time: Mon 03 Mar 2025 20:34:37 +0000
ROA not before: Mon 03 Mar 2025 20:34:33 +0000
ROA not after: Thu 27 Mar 2025 20:34:33 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94521 (0x17139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 20:34:33 2025 GMT
Not After : Mar 27 20:34:33 2025 GMT
Subject: CN=67c6125d-96f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:f6:c4:b3:84:89:26:a5:79:72:87:90:58:
8d:55:3b:78:9e:2a:c3:97:e0:54:7b:f3:cb:c3:67:
66:7b:8c:5b:a5:ae:8d:55:8c:5d:0c:33:92:05:52:
86:55:e0:bb:59:0f:1e:8b:4d:4a:79:79:50:dc:68:
c0:50:22:b6:86:ec:63:33:22:06:93:43:74:75:8f:
8f:48:26:f1:06:f6:e7:66:c5:65:b8:8c:26:e6:4a:
ab:5f:6c:27:cb:15:ae:1d:47:45:a6:71:cb:e3:1d:
25:4c:29:ed:e2:c0:f3:e0:fe:c9:f9:85:08:8b:f4:
94:99:04:1d:ca:bd:6e:e9:9b:c7:b3:90:71:8d:34:
d1:aa:8f:53:83:df:f2:e7:e0:fd:3f:b7:a4:33:6e:
82:b4:2b:1f:3a:1f:70:b5:eb:c5:a5:bd:86:53:02:
3e:70:46:ac:af:5d:bc:f1:2b:31:87:ec:dc:31:2b:
cc:90:88:5d:73:02:7d:b0:11:45:49:bd:96:ea:81:
cc:63:83:cf:2d:66:70:d0:fc:96:c0:d1:41:ac:69:
1b:1e:33:71:0b:6f:99:2f:f4:99:72:be:ad:cf:a4:
06:e8:5a:62:8e:93:68:97:70:36:a4:93:ed:0e:34:
29:0c:56:b5:f8:80:8e:fe:8a:6a:f5:70:73:e0:5b:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:43:DB:39:A7:8B:A9:E6:7B:F1:B1:E2:0F:B3:73:AC:1E:C4:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC595EEEF86E11EFBC95605F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.237.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
28:d1:a4:18:f5:f7:47:06:38:59:6b:6b:9e:95:24:ed:eb:09:
84:c4:52:f9:6f:ec:a4:b1:5a:50:eb:31:b5:6e:11:5c:b7:0b:
97:07:43:f6:eb:c8:f3:99:ee:3a:9e:b7:82:f3:96:5c:a8:6e:
52:94:76:7d:8d:d4:7f:f3:0d:3e:8c:7a:fe:aa:e5:63:b7:ce:
ec:6d:ae:47:99:67:b6:f0:e2:a2:1c:f6:78:b1:5b:81:0e:2c:
dc:21:b7:0a:c6:4f:47:12:09:e5:24:ea:63:68:48:3f:09:cf:
ef:a4:0a:4b:75:a0:f1:02:46:4c:04:40:13:44:27:ac:48:c7:
b9:8a:1d:03:70:ed:80:94:9a:7c:fe:c1:02:9c:71:18:58:00:
56:e8:c7:d1:43:58:bb:ff:70:c9:77:20:d3:f1:e1:1a:47:ad:
65:c3:0f:fe:32:ef:bb:e5:09:9f:0c:6c:f1:00:3e:8f:1f:64:
07:fc:c1:00:9f:04:d7:8d:c8:27:ba:f4:fe:3f:c1:c5:28:92:
d6:92:2d:58:b5:4b:bc:90:82:ab:4d:93:65:89:eb:42:a3:f6:
07:a2:a2:54:55:5d:2d:8b:87:0b:9b:b6:9b:ca:88:ce:a8:da:
51:aa:03:a3:a0:66:4f:63:c5:21:4e:f9:1d:fe:dd:71:93:f2:
28:f3:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:03 2025 by rpki-client