Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06E8E786265D11F0834A38A8DAE4EC9C.roa
File: 06E8E786265D11F0834A38A8DAE4EC9C.roa (raw, json)
Hash identifier: ZKJSzB6lgt/jtA8Alk+nYtp33asdsKCAtWgN1rH6xTg=
Subject key identifier: 74:3D:C3:80:DA:11:6E:BC:D3:27:09:44:78:B9:DF:A8:8E:83:FC:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06E8E786265D11F0834A38A8DAE4EC9C.roa
Signing time: Thu 01 May 2025 07:22:24 +0000
ROA not before: Thu 01 May 2025 07:22:19 +0000
ROA not after: Fri 09 May 2025 07:22:19 +0000
asID: 9009
IP address blocks: 154.218.198.0/24 maxlen: 24
154.218.199.0/24 maxlen: 24
154.218.207.0/24 maxlen: 24
154.218.211.0/24 maxlen: 24
154.218.213.0/24 maxlen: 24
154.218.226.0/24 maxlen: 24
154.218.233.0/24 maxlen: 24
154.218.238.0/24 maxlen: 24
154.218.247.0/24 maxlen: 24
154.218.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97748 (0x17dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 07:22:19 2025 GMT
Not After : May 9 07:22:19 2025 GMT
Subject: CN=68132130-b856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:60:5b:85:02:a1:21:89:e8:4c:1d:b6:cd:ca:
d2:6d:91:71:83:4e:0e:42:5f:fe:02:a0:5d:b8:2a:
9e:3f:a6:48:e0:eb:8c:52:1d:52:21:dd:52:5c:8d:
fc:ae:03:c7:ba:10:59:84:2f:7e:cc:50:f5:36:7d:
bf:3c:ae:78:26:a1:31:a1:64:0e:42:78:3f:98:d7:
a9:38:a8:e5:7f:57:49:57:df:86:ae:94:b7:bc:f8:
4c:36:7b:a3:be:a7:75:f1:e3:97:d3:c9:59:d1:ee:
82:da:bd:28:dc:0b:93:a5:1c:d6:10:97:ec:4b:2e:
40:bd:f7:c8:05:52:86:04:d7:06:6e:c4:76:f9:ac:
52:68:40:8e:ee:61:9e:af:c0:37:c4:f3:7e:ee:05:
e5:e1:3a:22:80:43:15:b5:44:24:04:59:a1:b9:a9:
df:3c:1a:ec:95:bd:52:f1:f8:da:21:16:44:56:57:
92:7d:f3:d6:d3:84:29:6c:f5:a3:f4:ce:f8:59:0c:
81:85:f1:a5:18:ba:7d:4a:5a:48:b3:76:99:26:5a:
73:a9:7d:3a:7f:33:cf:35:d0:ca:55:cc:43:7e:b7:
df:5f:74:58:4b:cb:84:c9:aa:78:e3:11:0c:d7:59:
51:66:82:7b:24:ea:fc:b4:93:00:f1:ad:b9:58:cc:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3D:C3:80:DA:11:6E:BC:D3:27:09:44:78:B9:DF:A8:8E:83:FC:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06E8E786265D11F0834A38A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.198.0/23
154.218.207.0/24
154.218.211.0/24
154.218.213.0/24
154.218.226.0/24
154.218.233.0/24
154.218.238.0/24
154.218.247.0-154.218.248.255
Signature Algorithm: sha256WithRSAEncryption
9d:df:3f:f5:f4:62:5c:a7:66:a4:1c:ad:fa:78:6b:56:38:4c:
b2:2f:97:55:f2:ae:1d:bf:0a:f5:a7:c1:1e:e1:ed:77:77:47:
1c:eb:ad:03:ff:62:b2:10:08:00:e5:ca:91:ea:55:c7:18:b5:
89:a1:d8:25:43:85:83:f4:51:77:83:31:9f:5c:4c:78:fe:2d:
7d:18:8b:00:59:6c:b7:0c:ef:66:0e:c6:8d:6a:e0:4a:ad:3e:
96:ac:c1:d2:75:2e:0e:2e:c8:0d:7d:0f:a3:73:62:2e:9a:fc:
76:2c:36:f3:f9:27:6b:35:b5:2b:bd:23:b0:58:32:bf:bd:01:
5f:4e:0e:2f:38:1a:d6:62:a1:47:bd:15:bf:13:88:f5:fb:93:
81:2d:18:5a:33:91:4e:30:5d:87:27:cc:52:d6:c4:e3:3c:f8:
16:9a:b5:ab:81:06:33:fa:9e:a7:b4:be:d9:ff:f6:9f:e2:22:
2d:84:33:39:b8:43:4b:80:20:67:b5:9c:b4:47:70:6c:90:08:
b7:ea:85:98:2f:f4:0a:36:5a:07:bd:0d:21:08:aa:35:8a:e6:
e5:a9:e4:54:1a:99:b5:dc:14:44:9e:30:33:05:d6:6c:1e:52:
ac:0f:4f:69:fb:bd:0d:89:35:4f:fe:80:ab:8e:6d:a4:d3:8c:
58:5c:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:45:20 2025 by rpki-client