Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7112D9AE259611F08EB7F6F3DAE4EC9C.roa
File: 7112D9AE259611F08EB7F6F3DAE4EC9C.roa (raw, json)
Hash identifier: l9tp9EJHQupb4SiKFHDuo005M5KprJLaFX5TmQCRowU=
Subject key identifier: AF:65:79:05:F9:ED:99:EB:B6:7E:7D:59:EB:D1:B4:6C:3A:96:44:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7112D9AE259611F08EB7F6F3DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:40:52 +0000
ROA not before: Wed 30 Apr 2025 07:40:48 +0000
ROA not after: Fri 09 May 2025 07:40:48 +0000
asID: 9009
IP address blocks: 154.216.196.0/24 maxlen: 24
154.216.211.0/24 maxlen: 24
154.216.212.0/24 maxlen: 24
154.216.219.0/24 maxlen: 24
154.216.227.0/24 maxlen: 24
154.216.231.0/24 maxlen: 24
154.216.236.0/24 maxlen: 24
154.216.241.0/24 maxlen: 24
154.216.247.0/24 maxlen: 24
154.216.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97560 (0x17d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 07:40:48 2025 GMT
Not After : May 9 07:40:48 2025 GMT
Subject: CN=6811d404-59e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:ae:f2:6c:80:60:f3:83:4b:57:1a:fa:1e:
68:fc:0c:47:af:2c:72:b0:e8:a0:89:30:6a:80:55:
0a:07:a5:29:bf:4a:56:c1:44:eb:ab:70:71:0e:9f:
c6:28:45:0b:1e:9e:95:02:c2:8a:8d:5f:be:f4:29:
48:7c:89:f1:cd:2c:12:e8:fd:22:49:9d:55:99:4c:
e8:af:f6:c1:14:1e:28:64:61:fe:91:53:2e:0b:5f:
6d:d1:4b:ce:a5:2b:db:bc:26:44:59:c1:b4:23:b0:
b5:13:37:ae:66:59:b5:2e:7a:8b:21:30:ca:1c:5c:
a5:96:02:a8:30:4c:7b:67:99:55:17:04:41:df:13:
6c:70:12:ac:fb:a3:11:1c:ba:7b:8b:9d:a2:42:52:
51:77:be:33:6b:53:33:10:a9:84:44:2b:d7:1b:29:
8e:ac:14:71:81:d8:0f:44:bf:36:f8:3f:41:34:0a:
95:0d:c6:40:a4:cb:c2:6a:b2:81:fc:a5:2e:7d:12:
07:a0:30:0e:ed:c9:cf:8e:7c:99:df:16:4c:b1:e6:
a5:d8:7f:28:40:5c:a9:29:f8:e5:fa:29:14:62:56:
aa:87:70:20:26:54:48:0b:38:69:82:2f:e5:91:a9:
b7:8b:55:bd:41:7b:e2:fa:d1:88:a9:77:6d:06:b8:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:79:05:F9:ED:99:EB:B6:7E:7D:59:EB:D1:B4:6C:3A:96:44:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7112D9AE259611F08EB7F6F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.196.0/24
154.216.211.0-154.216.212.255
154.216.219.0/24
154.216.227.0/24
154.216.231.0/24
154.216.236.0/24
154.216.241.0/24
154.216.247.0/24
154.216.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0b:6c:9e:c4:2b:93:3e:a7:ee:0b:f5:06:d7:cb:ce:71:9f:
22:84:b9:d1:04:3b:cd:6a:8c:7a:a8:e9:16:02:6a:2e:a7:ae:
57:38:29:cd:99:7e:31:96:d2:89:dd:fd:81:93:12:21:c2:7b:
e5:7e:26:8c:a5:cd:33:9c:59:4d:c0:29:0e:98:25:65:82:fc:
d7:a2:d6:35:2f:7f:87:75:15:7d:bc:5e:9d:c7:d8:80:ba:9a:
6b:da:ed:da:99:e9:be:ad:d7:71:50:48:4c:47:7f:75:da:10:
64:04:42:a0:ea:f4:3f:31:e7:7f:a9:db:0f:2f:fb:33:5e:68:
51:cf:b3:93:57:c9:88:5e:2f:7e:3c:90:f4:56:68:ba:a0:84:
3d:6a:ab:ea:f6:69:fc:8a:ea:18:0c:e7:ae:25:7b:72:79:b1:
c2:24:d9:40:46:31:8d:41:ea:59:20:ef:d6:7f:4e:91:20:59:
e0:83:50:49:58:e3:a7:f2:99:55:30:38:25:89:c9:c5:34:4b:
b6:ee:12:d1:8e:e6:33:d3:15:0f:fd:3a:15:83:a0:06:f0:ca:
4f:fe:fc:1f:f2:a3:9f:31:87:24:be:f8:78:2f:d8:61:9c:89:
7a:df:17:30:61:11:c9:e6:93:cd:7a:0d:f6:07:95:f8:44:d4:
aa:06:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:01:37 2025 by rpki-client