Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B2CA7DA265A11F0B8FF5394DAE4EC9C.roa
File: 1B2CA7DA265A11F0B8FF5394DAE4EC9C.roa (raw, json)
Hash identifier: Lq+3Y9oWS79ewUJ/LJSYcG0+U0PW53OhYgxbB1hcFVk=
Subject key identifier: 6B:C8:E9:31:FC:9F:A8:E1:77:DC:7E:C9:6E:B8:0D:2E:27:F6:A4:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B2CA7DA265A11F0B8FF5394DAE4EC9C.roa
Signing time: Thu 01 May 2025 07:01:30 +0000
ROA not before: Thu 01 May 2025 07:01:25 +0000
ROA not after: Fri 09 May 2025 07:01:25 +0000
asID: 9009
IP address blocks: 154.218.195.0/24 maxlen: 24
154.218.202.0/24 maxlen: 24
154.218.223.0/24 maxlen: 24
154.218.230.0/24 maxlen: 24
154.218.234.0/24 maxlen: 24
154.218.235.0/24 maxlen: 24
154.218.241.0/24 maxlen: 24
154.218.245.0/24 maxlen: 24
154.218.250.0/24 maxlen: 24
154.218.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97742 (0x17dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 07:01:25 2025 GMT
Not After : May 9 07:01:25 2025 GMT
Subject: CN=68131c4a-4656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:70:a9:9e:5f:0a:04:e7:6e:a7:e7:83:29:
e7:9c:39:88:68:48:2d:46:57:d9:c3:a6:a0:25:f5:
aa:a4:33:6f:98:57:48:81:c1:68:5e:8a:2c:6e:53:
78:80:3e:09:e9:d8:49:a3:68:84:ee:ef:d0:cc:4c:
6a:05:a8:02:f8:e4:93:f7:9d:1e:95:55:a5:c6:10:
1f:3d:fc:bb:ea:0e:fb:7c:9c:73:e4:73:f0:8b:1d:
53:d9:f1:11:af:de:cc:c6:e3:7d:7d:97:d6:e7:d7:
7b:2f:f0:1d:73:ab:04:99:ca:9b:a5:89:b5:cc:62:
02:8a:4b:cf:0d:e2:75:ad:f4:3b:4e:d2:02:78:db:
b6:a1:97:ee:a5:e0:04:65:c7:5d:87:d5:28:45:48:
bd:ac:b5:db:14:a8:75:0d:e6:b9:df:be:f6:b6:f1:
b5:51:78:3a:81:bb:0b:09:30:64:ce:da:db:5d:3f:
35:ea:0b:8f:3a:00:c8:dd:65:5c:05:df:30:21:b2:
05:4f:03:5b:5a:ce:79:d2:c7:6a:42:50:15:0b:33:
a3:83:a6:fd:31:9c:7d:8c:ac:74:59:87:ba:29:8e:
b5:75:45:18:27:bb:f2:a6:53:3f:63:2e:7f:58:da:
65:3a:60:2e:dc:6d:f1:a5:0c:27:1c:cb:55:0e:92:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:E9:31:FC:9F:A8:E1:77:DC:7E:C9:6E:B8:0D:2E:27:F6:A4:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B2CA7DA265A11F0B8FF5394DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.195.0/24
154.218.202.0/24
154.218.223.0/24
154.218.230.0/24
154.218.234.0/23
154.218.241.0/24
154.218.245.0/24
154.218.250.0/24
154.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e6:5e:55:4f:2a:ed:24:62:80:bb:bc:ce:db:20:a6:0c:92:
a3:a8:06:70:d6:2d:06:61:a1:38:f0:b5:e1:50:8b:2b:89:bb:
5c:f9:0c:30:45:1c:c2:71:62:f2:49:f8:7f:bb:c7:f0:9d:27:
93:35:91:db:2c:97:11:7e:e3:ab:59:80:cd:90:2d:a8:76:3b:
32:2f:29:d2:9d:99:87:df:82:aa:40:4b:47:34:8c:49:a9:2c:
b0:d6:b1:45:11:7f:a0:be:f0:1c:6b:fd:8d:27:ec:5c:50:a1:
96:58:90:8e:08:5b:9b:e9:0b:c7:d6:a7:e7:f3:77:83:c6:2d:
fa:27:0a:e0:e5:c9:94:fb:68:cb:98:ad:52:b5:e0:9c:3d:4b:
a5:e6:6d:29:6d:f3:db:b0:a6:2f:24:1d:b5:28:c1:a4:01:60:
74:de:da:d4:06:55:4a:e6:e3:82:e4:ba:e6:8d:33:b4:62:ed:
70:e6:38:3f:3d:c1:5c:d3:48:55:39:ac:ae:7e:dd:25:a0:ee:
ea:ad:28:df:46:8e:f3:3f:df:2b:84:38:0b:04:24:10:ea:e6:
bc:30:9f:83:05:96:2c:f7:67:d4:24:a0:04:8c:03:9a:b2:bb:
d2:a5:39:ba:14:96:5c:ca:2e:69:27:c3:85:fd:3d:5d:1d:8a:
35:c9:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:35:33 2025 by rpki-client