Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF09A063BC411F0BCBC0F79DAE4EC9C.roa
File: FEF09A063BC411F0BCBC0F79DAE4EC9C.roa (raw, json)
Hash identifier: 4u702DSVnHaQgBM6NSWCnZjgvizPd5v6sZ8QPkKtM1M=
Subject key identifier: 27:E9:C9:D9:58:45:C8:50:1F:C3:42:BE:A9:83:F0:26:FA:AB:01:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018376
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF09A063BC411F0BCBC0F79DAE4EC9C.roa
Signing time: Wed 28 May 2025 13:09:33 +0000
ROA not before: Wed 28 May 2025 13:09:28 +0000
ROA not after: Wed 04 Jun 2025 13:09:28 +0000
asID: 7029
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99190 (0x18376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 13:09:28 2025 GMT
Not After : Jun 4 13:09:28 2025 GMT
Subject: CN=68370b0d-5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:a4:39:cf:4b:a8:60:06:09:5c:e2:59:54:
3b:81:a8:0f:a4:71:ae:53:7f:f9:d1:76:95:13:af:
34:44:d0:e5:1e:0f:5f:82:a9:98:42:b0:53:54:f1:
f4:c2:01:b1:68:74:a0:af:21:97:81:5a:6b:41:6a:
bc:db:ba:66:7e:a6:df:bf:70:cc:d3:79:a5:e5:2b:
c6:cb:a6:88:dc:3a:f2:f4:1c:c8:12:05:97:fe:23:
c4:b2:f7:af:45:63:c5:42:f5:c8:b0:87:45:94:6e:
01:df:18:0e:f4:84:39:13:f7:a7:58:a8:d4:69:ac:
c7:eb:3b:99:f0:7c:2e:5d:41:bb:8d:09:76:f4:2c:
1e:2e:2c:8c:26:69:07:b2:5f:a2:9d:ad:86:4d:3f:
5c:4c:db:dd:29:ff:85:bb:52:5a:c7:04:75:61:58:
c3:21:78:3d:30:6b:f3:b8:40:fb:1e:f8:1e:42:ea:
7c:06:09:ac:bd:29:88:85:65:4e:00:8d:c7:b5:2f:
7f:12:f1:d1:97:d4:ca:d8:2b:1a:b6:f3:4f:a4:41:
70:d7:46:08:c9:13:f4:42:29:cf:01:60:f3:ec:63:
55:d0:8b:7e:f3:26:42:48:8b:a0:fc:c9:79:02:8d:
ca:34:0b:ca:c7:c0:c3:7b:ee:dc:0b:1e:a3:3d:b3:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E9:C9:D9:58:45:C8:50:1F:C3:42:BE:A9:83:F0:26:FA:AB:01:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF09A063BC411F0BCBC0F79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
89:d5:5d:87:8c:0f:91:3d:b2:ba:5a:f3:bd:15:ca:02:9e:1d:
bb:86:0e:8b:f3:d9:36:e0:f9:c7:90:61:cb:38:35:10:48:e6:
82:b7:e8:c1:8d:fe:9d:2d:9e:4c:ac:97:d5:5e:4d:09:5a:72:
55:63:bf:2e:d2:7a:b9:c1:54:9c:bd:f9:40:7d:9b:84:98:1a:
7c:52:ce:53:c6:5c:f3:bf:e9:4c:02:62:bd:ee:56:52:63:d9:
78:43:7e:a3:65:c9:99:20:92:3b:2f:6a:58:95:b8:8b:65:46:
9a:0f:a5:91:43:0b:7f:60:62:41:3e:39:c5:23:62:97:dd:95:
d5:76:3d:47:cf:71:24:2b:bd:af:6d:7f:b4:6c:69:05:05:09:
0b:d9:28:e3:f5:20:29:29:0e:1f:42:97:87:7e:0a:fc:2f:9b:
58:2e:73:1d:1b:e6:c6:ea:0a:74:51:67:3e:8c:61:a7:79:f5:
31:85:00:c9:6b:3e:d9:f2:47:df:35:d3:97:82:91:3c:3e:01:
82:d0:c4:df:b9:50:45:c9:ad:b2:fb:89:cc:0a:fe:8f:24:72:
99:2a:66:e6:41:b3:19:84:84:f6:59:85:9a:75:12:7e:f5:fe:
66:10:8e:34:48:48:8f:5d:75:56:c7:65:df:3d:ae:a7:44:78:
82:0c:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:02 2025 by rpki-client