Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8980F4265B11F08BFBB99ADAE4EC9C.roa
File: 0B8980F4265B11F08BFBB99ADAE4EC9C.roa (raw, json)
Hash identifier: 9mej+qFCh+w2Umq3gKBmxQBAYd5gWeYJBFsR5hhAG+s=
Subject key identifier: 3B:2C:3C:74:51:73:15:9C:1A:28:3D:93:5C:66:0E:AA:5B:9E:3D:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8980F4265B11F08BFBB99ADAE4EC9C.roa
Signing time: Thu 01 May 2025 07:08:13 +0000
ROA not before: Thu 01 May 2025 07:08:08 +0000
ROA not after: Fri 09 May 2025 07:08:08 +0000
asID: 9009
IP address blocks: 154.218.194.0/24 maxlen: 24
154.218.205.0/24 maxlen: 24
154.218.206.0/24 maxlen: 24
154.218.214.0/24 maxlen: 24
154.218.215.0/24 maxlen: 24
154.218.222.0/24 maxlen: 24
154.218.231.0/24 maxlen: 24
154.218.239.0/24 maxlen: 24
154.218.246.0/24 maxlen: 24
154.218.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97744 (0x17dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 07:08:08 2025 GMT
Not After : May 9 07:08:08 2025 GMT
Subject: CN=68131ddd-56dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:46:df:a1:f7:38:44:a4:22:0d:a8:95:41:
73:09:a7:a1:d8:15:e9:e7:1f:e2:95:b4:6f:f6:5a:
9e:60:aa:88:79:8e:d0:f3:8f:4f:04:8a:de:46:35:
c6:83:99:f3:31:2b:b4:e1:c4:33:a3:10:a0:ad:6b:
9b:6d:1f:e6:25:bb:45:39:f5:bd:87:8d:bb:2a:51:
23:fd:82:ae:c5:b1:75:67:0d:61:5d:fc:73:21:61:
7d:19:ab:60:64:be:7e:c1:64:29:86:44:df:b5:3b:
ec:5d:f9:ff:a2:f7:ed:65:51:d7:c2:b4:bc:94:2f:
06:ed:75:fb:92:98:67:a4:2a:a8:9a:50:d5:b9:31:
c3:b9:c3:a1:89:f9:16:67:bc:e0:bc:f1:b6:37:0f:
30:96:3a:96:c5:fa:5f:4c:ff:69:1e:7f:3d:aa:04:
51:d7:33:6c:fd:42:0d:88:7c:f6:a0:9c:c8:98:31:
5b:8e:4e:8b:db:7c:90:e6:09:c7:b7:7a:c4:88:75:
dc:97:3b:1c:0c:a2:88:1e:43:7c:4c:a2:38:33:13:
a1:db:78:a9:54:18:0f:7a:ed:92:50:6b:51:97:37:
97:60:21:06:09:a5:99:d9:48:9c:fe:0a:73:54:1b:
aa:78:89:23:c5:cf:54:14:58:43:67:3d:6f:8c:e6:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2C:3C:74:51:73:15:9C:1A:28:3D:93:5C:66:0E:AA:5B:9E:3D:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8980F4265B11F08BFBB99ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.194.0/24
154.218.205.0-154.218.206.255
154.218.214.0/23
154.218.222.0/24
154.218.231.0/24
154.218.239.0/24
154.218.246.0/24
154.218.253.0/24
Signature Algorithm: sha256WithRSAEncryption
51:02:19:e4:d6:a1:56:4c:0e:f7:15:08:e1:8a:dc:f3:79:72:
8f:a8:78:3b:67:44:4a:3f:01:00:fb:2f:1c:d5:61:85:14:61:
ce:7a:2f:0d:9c:16:0c:8f:d9:11:f0:59:b8:74:d3:1a:22:21:
eb:85:ae:23:5a:06:6d:0c:51:25:ff:e6:84:92:c2:51:1a:0d:
4e:1f:de:2a:83:1c:03:e6:93:aa:2b:5b:c7:61:a7:02:bb:bf:
91:1e:bd:3c:87:41:d5:4b:ec:23:94:ef:4d:5e:65:13:71:64:
41:29:c1:b6:e1:a6:1f:e0:ef:43:40:9f:2a:01:4e:b3:c0:f7:
be:9d:bc:6b:50:1e:42:f6:13:fa:4a:5f:e0:c3:12:29:3d:6e:
e0:bd:1c:61:d2:0c:31:30:86:03:12:25:ce:79:a7:d3:3f:ef:
b6:d4:ba:26:0d:a0:44:6b:55:6b:9c:08:42:e5:92:ee:1f:50:
9e:0d:69:4f:7d:8a:63:db:f2:c8:91:92:b0:7b:6b:50:d8:0e:
ce:65:e4:e9:a7:5b:b9:ed:65:81:7d:be:ee:b3:4a:62:89:04:
99:91:a8:f0:13:1a:79:34:c3:28:48:89:fd:83:f9:6c:a4:45:
43:ca:bd:6d:5d:a4:dd:89:44:8d:bd:88:e4:1c:1c:38:81:76:
ae:bb:37:4b
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIDAX3QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMDcwODA4WhcNMjUwNTA5MDcwODA4WjAYMRYw
FAYDVQQDEw02ODEzMWRkZC01NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx39G36H3OESkIg2olUFzCaeh2BXp5x/ilbRv9lqeYKqIeY7Q849PBIre
RjXGg5nzMSu04cQzoxCgrWubbR/mJbtFOfW9h427KlEj/YKuxbF1Zw1hXfxzIWF9
GatgZL5+wWQphkTftTvsXfn/ovftZVHXwrS8lC8G7XX7kphnpCqomlDVuTHDucOh
ifkWZ7zgvPG2Nw8wljqWxfpfTP9pHn89qgRR1zNs/UINiHz2oJzImDFbjk6L23yQ
5gnHt3rEiHXclzscDKKIHkN8TKI4MxOh23ipVBgPeu2SUGtRlzeXYCEGCaWZ2Uic
/gpzVBuqeIkjxc9UFFhDZz1vjOYdqwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDss
PHRRcxWcGig9k1xmDqpbnj1EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjg5ODBGNDI2NUIxMUYwOEJGQkI5OUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmtrCMAwDBACa2s0DBACa
2s4DBAGa2tYDBACa2t4DBACa2ucDBACa2u8DBACa2vYDBACa2v0wDQYJKoZIhvcN
AQELBQADggEBAFECGeTWoVZMDvcVCOGK3PN5co+oeDtnREo/AQD7LxzVYYUUYc56
Lw2cFgyP2RHwWbh00xoiIeuFriNaBm0MUSX/5oSSwlEaDU4f3iqDHAPmk6orW8dh
pwK7v5EevTyHQdVL7COU701eZRNxZEEpwbbhph/g70NAnyoBTrPA976dvGtQHkL2
E/pKX+DDEik9buC9HGHSDDEwhgMSJc55p9M/77bUuiYNoERrVWucCELlku4fUJ4N
aU99imPb8siRkrB7a1DYDs5l5OmnW7ntZYF9vu6zSmKJBJmRqPATGnk0wyhIif2D
+WykRUPKvW1dpN2JRI29iOQcHDiBdq67N0s=
-----END CERTIFICATE-----
Generated at Sat May 10 19:26:17 2025 by rpki-client