Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6681D4EF87811EF976B95A0762E951A.roa
File: F6681D4EF87811EF976B95A0762E951A.roa (raw, json)
Hash identifier: PcQs/hyqQ1znd6Wh2ZbfhE3tQ9PLMvlcyqJ2Q5+YIlw=
Subject key identifier: 57:B3:2B:A2:A7:1E:0A:A0:F3:72:A6:BA:86:99:E1:B5:97:DB:4B:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017149
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6681D4EF87811EF976B95A0762E951A.roa
Signing time: Mon 03 Mar 2025 21:46:28 +0000
ROA not before: Mon 03 Mar 2025 21:46:24 +0000
ROA not after: Thu 27 Mar 2025 21:46:24 +0000
asID: 44559
IP address blocks: 154.81.52.0/24 maxlen: 24
154.81.53.0/24 maxlen: 24
154.81.192.0/24 maxlen: 24
154.81.193.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
154.81.195.0/24 maxlen: 24
154.81.196.0/24 maxlen: 24
154.81.197.0/24 maxlen: 24
154.81.198.0/24 maxlen: 24
154.81.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94537 (0x17149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 21:46:24 2025 GMT
Not After : Mar 27 21:46:24 2025 GMT
Subject: CN=67c62334-39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:56:ee:1b:42:d8:f0:4e:ff:3e:02:ea:c0:fd:
22:e3:a4:84:66:62:46:21:14:fd:8c:a1:c3:05:e6:
93:09:18:1d:4b:92:be:cb:16:99:86:b6:f0:de:6e:
cd:ea:f5:ba:c6:46:30:73:91:01:0c:9f:ea:16:f0:
c2:2a:b0:11:29:59:86:79:49:fe:bb:01:ec:22:c9:
c6:4b:99:9a:57:b2:10:40:70:0c:05:29:67:e6:01:
dc:f1:40:4b:c7:a3:7b:8e:7a:40:53:4e:92:e0:43:
11:54:a6:fe:68:92:51:9c:99:48:f3:ae:2d:fa:ba:
3f:86:64:72:81:b7:96:2b:a2:ff:2e:03:e1:8f:57:
6a:56:60:ce:c4:0d:5f:37:57:d7:50:37:7d:68:27:
b1:4f:35:49:a7:22:5e:b0:d7:2f:ed:6e:b8:38:e0:
43:84:ba:f0:36:31:ea:09:e2:55:be:27:60:77:ba:
e9:df:98:f7:fb:09:16:c2:af:04:a1:94:6e:ba:e6:
60:c8:b5:0f:2f:26:f8:3f:df:8d:d6:cb:92:e9:4c:
95:98:53:ef:e2:c6:8b:70:28:f6:d2:d2:1c:71:5e:
af:7c:e4:e2:0d:ee:b2:62:88:83:c3:9b:f1:b2:ce:
84:a5:9c:5c:6f:c5:ae:c3:50:a3:a0:c7:20:d6:40:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:2B:A2:A7:1E:0A:A0:F3:72:A6:BA:86:99:E1:B5:97:DB:4B:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6681D4EF87811EF976B95A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.52.0/23
154.81.192.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:e4:4e:ba:dc:f1:57:6d:e4:49:f3:8d:a8:37:6e:df:5e:fd:
c7:ad:d0:28:9c:57:13:f0:32:13:ad:cb:06:36:55:20:47:00:
de:8a:eb:e2:53:29:c1:a7:42:a3:fa:3c:60:ce:ad:67:ec:92:
13:2f:c1:37:16:61:47:96:e2:6e:bb:72:e0:16:20:49:20:eb:
97:c2:22:60:a7:48:39:c7:f1:14:ef:65:ef:36:ce:b1:bf:46:
ca:2e:12:40:ca:ab:d5:35:d3:f8:31:a8:77:49:bc:c2:e8:b2:
32:9c:96:44:11:d8:69:65:6e:fd:ce:0f:bf:6c:52:cb:cf:0d:
49:c5:35:2a:92:97:44:3c:54:0d:60:3b:ab:67:3d:de:11:a4:
35:00:ed:8e:6e:44:19:47:ae:64:d3:fe:62:7a:64:35:ed:29:
02:48:63:ca:e2:54:e8:af:dd:19:97:70:7c:bd:15:de:7a:13:
d8:ae:b6:71:a9:0c:dd:78:e6:bb:c9:9a:01:75:d6:96:3e:65:
67:88:0c:f4:82:65:55:e5:28:66:dc:5f:68:19:20:02:73:80:
86:bf:8a:4d:db:df:eb:0e:95:6a:ee:b0:3c:e8:58:a5:eb:e7:
f8:eb:47:f0:65:51:c8:fc:e8:bc:68:38:25:93:30:fc:65:61:
b3:43:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:49:58 2025 by rpki-client