Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA5CECA265911F087077E8DDAE4EC9C.roa
File: 2CA5CECA265911F087077E8DDAE4EC9C.roa (raw, json)
Hash identifier: 5op/v5b8igi3oDVhrgCJlEwj29mQZR8c+HkMWf3awlQ=
Subject key identifier: BB:46:0C:14:AE:94:F9:91:6E:75:42:DB:0E:81:40:B3:DB:92:65:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA5CECA265911F087077E8DDAE4EC9C.roa
Signing time: Thu 01 May 2025 06:54:49 +0000
ROA not before: Thu 01 May 2025 06:54:45 +0000
ROA not after: Fri 09 May 2025 06:54:45 +0000
asID: 9009
IP address blocks: 154.218.193.0/24 maxlen: 24
154.218.197.0/24 maxlen: 24
154.218.203.0/24 maxlen: 24
154.218.208.0/24 maxlen: 24
154.218.212.0/24 maxlen: 24
154.218.218.0/24 maxlen: 24
154.218.229.0/24 maxlen: 24
154.218.240.0/24 maxlen: 24
154.218.251.0/24 maxlen: 24
154.218.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97739 (0x17dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 06:54:45 2025 GMT
Not After : May 9 06:54:45 2025 GMT
Subject: CN=68131ab9-034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:c1:2e:60:6f:e3:e8:a2:45:6f:80:58:b5:
c3:a4:74:d6:22:3d:44:c5:ac:b2:17:79:48:0b:9c:
b1:be:16:18:ba:69:e1:a3:98:3e:2d:2b:da:a3:77:
6c:12:1a:4d:63:60:cb:41:06:06:2d:b8:85:7a:ac:
0d:65:f6:61:b9:8f:c4:56:bc:1c:64:e4:67:19:ac:
b8:2a:7d:4b:5e:1e:a1:95:77:f8:77:fb:ae:d2:3e:
f1:4f:ca:c9:8c:54:71:6e:e8:e6:53:31:84:e7:b9:
81:b3:58:4e:aa:10:a1:b1:4c:9b:c4:d4:2f:ec:30:
b7:27:0f:63:ce:af:1b:c4:cb:cd:44:1a:05:e4:31:
de:c8:be:ee:0b:63:d1:e2:d1:e1:dc:09:e2:ea:2a:
67:4c:e4:a5:3e:9a:86:5c:4e:e5:b5:29:8b:fd:1e:
bc:e3:c8:f4:6e:10:00:47:06:3f:c5:92:5d:e9:3d:
8c:67:67:5c:29:60:bc:d2:d0:31:55:04:ef:91:05:
0d:29:92:26:d3:e6:bd:ab:d7:3d:d0:39:44:c5:2e:
71:26:0f:de:25:c8:f0:46:0d:e9:49:43:be:ad:d5:
ba:b7:05:53:2c:7c:f9:af:26:f8:26:6c:21:d0:5a:
ea:28:9f:09:89:78:9d:97:e8:2d:d7:86:c6:a3:cb:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:46:0C:14:AE:94:F9:91:6E:75:42:DB:0E:81:40:B3:DB:92:65:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA5CECA265911F087077E8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.193.0/24
154.218.197.0/24
154.218.203.0/24
154.218.208.0/24
154.218.212.0/24
154.218.218.0/24
154.218.229.0/24
154.218.240.0/24
154.218.251.0/24
154.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
87:04:78:b6:66:7d:3c:be:08:84:bd:56:ab:04:d9:1a:ae:01:
a5:37:ff:af:76:cd:f0:7d:34:a4:70:be:a9:bb:cf:63:25:7d:
d0:08:38:9d:90:8b:0e:16:5f:2e:96:72:91:33:2d:c8:01:39:
4e:56:2e:ec:13:fd:fd:17:27:ab:13:08:8b:a0:9a:b1:41:eb:
e4:c8:84:f1:89:1a:b3:14:00:0c:f1:0d:f1:46:c7:35:d0:b8:
39:0b:33:6e:96:7d:4e:35:e0:bb:5a:27:74:70:1f:7f:02:b0:
ff:b6:5a:95:96:3c:54:ef:41:f4:c3:37:3c:0c:8e:bd:f2:3a:
e0:e1:07:66:c3:ca:ab:80:bf:5b:9d:72:f5:f3:58:07:00:0e:
27:0c:c1:00:c6:24:83:59:3d:fe:2c:b5:69:d4:01:0d:ff:f3:
7b:83:4d:a6:a2:b6:2d:f6:f4:e1:47:ee:ec:84:e3:63:b6:4e:
46:a0:31:af:b8:02:ed:c8:0f:4a:66:47:1e:2c:dc:ba:a4:79:
43:50:4a:a5:9b:94:b3:6d:6c:92:24:90:14:c2:9b:d3:2c:5c:
a9:66:9b:24:66:c9:32:1c:22:7f:28:8d:5c:4b:86:6b:cb:f4:
a5:4d:9c:0b:80:a7:f6:e0:f5:64:f6:a9:a4:e6:36:01:29:80:
a3:51:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:44:26 2025 by rpki-client