Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/441128F2357211F0B6B0B48DDAE4EC9C.roa
File: 441128F2357211F0B6B0B48DDAE4EC9C.roa (raw, json)
Hash identifier: CyvCcI87iWQZbBnffToh2nJHLcwfLEDHJ7zfpqSM4I4=
Subject key identifier: 2D:0F:DC:09:F1:F9:94:21:96:B3:0E:14:89:43:39:0E:1A:19:99:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/441128F2357211F0B6B0B48DDAE4EC9C.roa
Signing time: Tue 20 May 2025 12:02:14 +0000
ROA not before: Tue 20 May 2025 12:02:09 +0000
ROA not after: Mon 30 Jun 2025 12:02:09 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.118.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.195.164.0/24 maxlen: 24
154.195.165.0/24 maxlen: 24
154.195.166.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98723 (0x181a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 12:02:09 2025 GMT
Not After : Jun 30 12:02:09 2025 GMT
Subject: CN=682c6f46-b975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:35:65:eb:c7:2b:7e:21:67:42:84:de:78:
21:d9:15:21:bd:de:2d:b0:38:b5:00:f8:c8:2f:c3:
7e:11:47:fd:3d:d6:f6:d0:35:12:f1:65:78:65:e5:
f8:4b:2b:c8:fc:13:0a:96:a5:0a:59:33:1b:6d:c3:
ab:ab:7a:9c:f8:78:48:b4:4e:6a:ff:ad:fd:aa:4a:
20:65:b0:bb:53:7f:a6:1b:b8:e0:c8:3b:ee:4a:41:
f1:23:ab:de:6f:e5:af:51:fd:92:1e:56:f9:db:db:
48:fd:b8:b9:62:f8:94:75:0d:c4:ec:9a:0b:81:7e:
f5:ca:f8:79:63:52:a1:c8:fe:ce:ac:89:a2:7f:90:
17:ed:63:07:ff:9a:8e:a6:86:8f:7f:15:2e:e2:46:
8c:c3:8d:e5:d5:19:22:bd:e8:cf:a9:c5:5c:16:d5:
61:17:08:77:16:6b:9e:bf:8a:63:01:a7:a7:ab:55:
13:76:e4:86:88:2a:58:8d:e0:49:ca:bb:6b:02:71:
55:9f:48:78:24:65:28:80:b3:52:39:5b:30:36:4a:
e0:63:60:34:ac:60:75:56:09:47:ec:ed:bf:0c:44:
20:6d:c6:5a:4c:86:43:4f:65:8f:a8:92:0f:4f:04:
94:39:97:b0:4e:5f:6c:89:15:fb:5e:ef:70:e2:49:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0F:DC:09:F1:F9:94:21:96:B3:0E:14:89:43:39:0E:1A:19:99:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/441128F2357211F0B6B0B48DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
154.195.116.0-154.195.118.255
154.195.152.0-154.195.167.255
Signature Algorithm: sha256WithRSAEncryption
a4:a3:cf:b5:89:1a:da:4f:00:53:f6:df:3d:c6:af:df:4f:4d:
5e:68:d9:b1:0b:9b:04:bf:50:3f:1a:9f:d4:a2:de:54:90:fd:
ca:62:bd:d0:f5:1d:40:b2:42:08:f5:c7:ea:21:3b:e4:e6:f5:
2c:02:d7:13:87:b0:a2:4c:e4:27:d7:df:12:8a:8c:cf:06:0e:
e6:c7:80:88:07:fc:fd:36:e8:24:f9:e0:98:55:b6:8e:35:0c:
7e:82:d8:af:90:c0:47:04:f7:00:d3:e3:80:bb:74:79:0d:d6:
dc:cf:0f:0e:2a:44:ba:a8:67:7c:60:cc:b9:45:a7:f3:78:79:
fd:d1:a2:32:c1:d7:2a:23:0a:62:a8:86:58:cb:35:24:60:a0:
4c:ed:d0:21:0a:a8:eb:85:f9:d5:49:f3:e7:fe:57:57:bc:1e:
de:12:f7:27:f4:19:8d:6f:9f:b7:e6:74:fb:30:4b:81:69:d9:
ad:2a:a6:65:3f:9e:39:e3:2c:28:94:b8:30:10:77:0a:97:a2:
59:04:59:40:0e:0e:45:0c:bb:dd:35:e7:11:34:00:c6:2c:20:
d2:a5:fe:5c:54:72:c9:0f:1e:b5:f1:af:c8:4d:e7:23:3d:75:
41:df:a5:70:f3:02:37:dd:00:48:88:ca:27:b4:a9:9e:d2:b4:
2c:31:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:21:03 2025 by rpki-client