Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1823402E265C11F0BCADD2A1DAE4EC9C.roa
File: 1823402E265C11F0BCADD2A1DAE4EC9C.roa (raw, json)
Hash identifier: y+QkZLB65WArbxzKISBTi4kLtmJ63Dea61nq+BmEfu8=
Subject key identifier: 12:90:72:37:ED:74:BE:EE:73:EF:E1:F3:76:99:6B:31:05:B6:66:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1823402E265C11F0BCADD2A1DAE4EC9C.roa
Signing time: Thu 01 May 2025 07:15:44 +0000
ROA not before: Thu 01 May 2025 07:15:39 +0000
ROA not after: Fri 09 May 2025 07:15:39 +0000
asID: 9009
IP address blocks: 154.218.201.0/24 maxlen: 24
154.218.209.0/24 maxlen: 24
154.218.210.0/24 maxlen: 24
154.218.216.0/24 maxlen: 24
154.218.221.0/24 maxlen: 24
154.218.228.0/24 maxlen: 24
154.218.232.0/24 maxlen: 24
154.218.237.0/24 maxlen: 24
154.218.243.0/24 maxlen: 24
154.218.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97746 (0x17dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 07:15:39 2025 GMT
Not After : May 9 07:15:39 2025 GMT
Subject: CN=68131f9f-39aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:a1:56:11:c6:d6:1e:e2:76:d2:dd:bb:d9:
b0:32:0a:a9:31:f5:6f:f1:3a:9a:a1:e5:c6:f5:c7:
41:7e:96:45:86:cc:0c:e4:17:63:d8:0d:47:b2:3b:
3d:68:d2:15:02:58:7d:0c:60:46:27:36:b6:85:89:
4b:68:98:27:d5:8a:ed:94:c2:b8:be:5e:ca:fe:60:
c3:35:f0:43:34:69:d5:bc:9b:3e:0d:2b:06:c3:a4:
33:ee:7c:61:bc:77:96:a4:e7:44:a3:ee:64:d6:91:
07:ef:7d:61:1c:0c:51:8b:d8:7a:c2:aa:c5:39:8e:
ad:f4:77:c4:48:78:87:b3:98:3b:07:29:1f:0e:5f:
f3:da:e2:59:2e:8b:9d:a2:90:af:b7:99:e7:db:b5:
69:d2:05:05:74:20:c6:d5:58:cb:09:4b:fd:e2:51:
47:51:d7:00:cb:25:02:19:62:ac:df:41:a9:58:12:
9c:5b:cb:e9:33:32:b6:0c:eb:42:e2:5c:8b:fa:63:
dd:39:e1:e8:66:81:7b:a5:c5:76:47:89:c5:97:bc:
d0:15:8a:6e:82:2b:06:90:47:f3:6c:93:4a:cb:48:
92:f3:69:cf:cc:ca:0d:9d:a2:6d:51:23:70:ff:f1:
0e:32:04:5c:d5:b3:fa:f6:34:34:91:2c:5f:39:ac:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:72:37:ED:74:BE:EE:73:EF:E1:F3:76:99:6B:31:05:B6:66:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1823402E265C11F0BCADD2A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.201.0/24
154.218.209.0-154.218.210.255
154.218.216.0/24
154.218.221.0/24
154.218.228.0/24
154.218.232.0/24
154.218.237.0/24
154.218.243.0/24
154.218.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8a:09:bc:0b:f0:b6:16:63:00:c3:cf:56:67:b6:2e:d5:32:
25:f5:40:30:6d:dc:d4:a6:e4:1a:59:3b:7d:db:2b:c5:36:f7:
aa:cd:50:bf:45:1e:a4:91:25:69:6d:d2:5c:04:00:4c:d7:f5:
96:ab:79:c8:58:c6:ca:7f:c4:20:42:0d:67:2d:4e:ff:af:a5:
27:68:2a:67:61:ef:a4:0b:df:c7:ba:56:43:5b:1b:84:ea:83:
e7:9a:4b:54:8a:27:75:e3:0f:54:3c:4d:fc:51:45:77:8e:c7:
17:10:a8:90:e6:69:7d:40:3e:d7:9e:43:0b:40:21:f0:6f:d2:
b4:c4:b9:2d:3f:e6:f5:69:99:d5:41:57:6f:5c:fb:14:f1:eb:
e7:87:db:ff:d1:ff:69:92:c0:ba:05:93:ac:fd:60:fb:38:88:
d0:7d:79:27:b5:91:0f:02:f6:54:d5:e7:84:19:b0:7b:90:51:
4b:90:18:7e:3a:e0:43:e8:84:2a:62:ec:3b:1c:bc:7b:82:7d:
9c:18:a2:9d:17:a0:5c:10:2f:76:aa:bc:5a:48:16:d2:ac:2c:
58:84:70:97:43:1f:ea:a5:46:f0:05:7e:5c:ad:8c:1b:97:04:
19:d2:25:dd:9d:cc:db:35:a1:58:4b:0b:b4:b7:b5:86:aa:e0:
72:11:08:b7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAX3SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMDcxNTM5WhcNMjUwNTA5MDcxNTM5WjAYMRYw
FAYDVQQDEw02ODEzMWY5Zi0zOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtFahVhHG1h7idtLdu9mwMgqpMfVv8TqaoeXG9cdBfpZFhswM5Bdj2A1H
sjs9aNIVAlh9DGBGJza2hYlLaJgn1YrtlMK4vl7K/mDDNfBDNGnVvJs+DSsGw6Qz
7nxhvHeWpOdEo+5k1pEH731hHAxRi9h6wqrFOY6t9HfESHiHs5g7BykfDl/z2uJZ
LoudopCvt5nn27Vp0gUFdCDG1VjLCUv94lFHUdcAyyUCGWKs30GpWBKcW8vpMzK2
DOtC4lyL+mPdOeHoZoF7pcV2R4nFl7zQFYpugisGkEfzbJNKy0iS82nPzMoNnaJt
USNw//EOMgRc1bP69jQ0kSxfOawgcQIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFBKQ
cjftdL7uc+/h83aZazEFtmZYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xODIzNDAyRTI2NUMxMUYwQkNBREQyQTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAmtrJMAwDBACa2tEDBACa
2tIDBACa2tgDBACa2t0DBACa2uQDBACa2ugDBACa2u0DBACa2vMDBACa2vwwDQYJ
KoZIhvcNAQELBQADggEBADuKCbwL8LYWYwDDz1Znti7VMiX1QDBt3NSm5BpZO33b
K8U296rNUL9FHqSRJWlt0lwEAEzX9ZarechYxsp/xCBCDWctTv+vpSdoKmdh76QL
38e6VkNbG4Tqg+eaS1SKJ3XjD1Q8TfxRRXeOxxcQqJDmaX1APteeQwtAIfBv0rTE
uS0/5vVpmdVBV29c+xTx6+eH2//R/2mSwLoFk6z9YPs4iNB9eSe1kQ8C9lTV54QZ
sHuQUUuQGH464EPohCpi7DscvHuCfZwYop0XoFwQL3aqvFpIFtKsLFiEcJdDH+ql
RvAFflytjBuXBBnSJd2dzNs1oVhLC7S3tYaq4HIRCLc=
-----END CERTIFICATE-----
Generated at Sun May 11 15:26:42 2025 by rpki-client