Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7761840E25A011F086E3A6B7DAE4EC9C.roa
File: 7761840E25A011F086E3A6B7DAE4EC9C.roa (raw, json)
Hash identifier: 87mVovXW6fcQQTareXPh3aPpXKuBFI1TnGACwm/srLI=
Subject key identifier: 92:23:57:00:C7:92:C9:B9:64:15:CB:EE:5F:28:65:71:56:41:AC:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7761840E25A011F086E3A6B7DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 08:52:38 +0000
ROA not before: Wed 30 Apr 2025 08:52:33 +0000
ROA not after: Fri 09 May 2025 08:52:33 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
154.200.188.0/24 maxlen: 24
154.200.213.0/24 maxlen: 24
154.200.220.0/24 maxlen: 24
154.200.245.0/24 maxlen: 24
154.223.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97584 (0x17d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:52:33 2025 GMT
Not After : May 9 08:52:33 2025 GMT
Subject: CN=6811e4d6-b956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b4:e8:93:b6:e5:4c:27:78:29:b0:56:d3:2b:
b2:a1:e2:8c:0d:4b:9f:83:81:ed:21:69:e2:a2:06:
a3:05:53:9c:9a:16:9a:35:da:58:78:61:1f:64:43:
0e:da:06:dc:8a:13:a8:4e:23:b3:3a:a3:5c:f7:a3:
ed:a0:f4:af:53:33:53:00:cc:0f:2e:d8:18:8b:5d:
bc:4b:63:38:eb:22:16:73:af:eb:c1:55:a5:64:a7:
cb:61:e1:7b:79:cd:e4:91:88:b0:f6:f5:a7:fb:50:
df:9b:4c:3f:1f:7c:07:37:ce:3a:9a:62:3c:55:df:
d3:5e:b0:9f:65:42:41:b4:2f:53:a8:3e:8b:38:62:
ca:15:35:00:92:d3:02:7b:f0:ae:63:f0:5d:1a:ab:
e9:ca:2d:7e:4f:b0:d3:04:5f:b9:c9:2a:16:5d:04:
ce:64:08:2f:7d:1f:f9:f8:9b:fa:22:4a:f4:78:8f:
ba:6e:d4:14:25:60:73:21:ff:94:03:cb:a0:d8:74:
0a:34:da:19:4b:54:1d:04:6c:52:d0:0e:68:46:3d:
02:cf:db:89:78:ce:59:3c:c3:1d:80:43:5e:94:79:
c3:e2:7d:89:1d:79:f8:a4:81:8e:cd:5e:ab:46:57:
a1:23:2d:bb:89:7f:f4:90:c9:ec:e2:6e:fe:3d:bd:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:57:00:C7:92:C9:B9:64:15:CB:EE:5F:28:65:71:56:41:AC:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7761840E25A011F086E3A6B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
154.200.188.0/24
154.200.213.0/24
154.200.220.0/24
154.200.245.0/24
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:3e:0a:d8:9a:0d:bb:1c:77:af:8d:14:0b:13:73:21:e8:87:
3e:f5:0c:37:d4:c9:2e:73:ae:9e:2d:f1:42:61:20:b7:b9:46:
fd:ce:9b:4a:7c:52:d0:30:f7:43:f8:8b:01:43:24:fa:bb:db:
b9:aa:14:db:93:ba:58:e0:95:f0:02:23:14:09:c4:41:06:f8:
4e:38:35:8d:73:24:a6:3a:ab:d5:d1:b8:bb:77:ad:f3:69:65:
bc:c9:86:06:b2:ba:32:11:77:14:d1:59:29:1b:2a:86:fd:a8:
11:23:7e:ed:5b:e3:28:a1:12:29:55:1f:c3:72:02:9a:67:dd:
4e:5e:f7:be:9d:54:90:67:15:ce:20:3c:68:b0:92:f5:e0:1e:
f4:8e:14:ed:db:be:9c:1b:40:a6:3a:32:21:93:22:2c:3c:2c:
6e:31:03:cd:25:b2:1c:84:08:76:ee:46:3e:07:62:dc:11:41:
78:a0:8a:f8:25:2e:09:72:b1:9a:b7:26:97:ee:83:ed:eb:84:
fe:da:82:71:2e:1e:00:c3:06:3a:85:80:67:e7:3e:a2:eb:53:
4a:8a:8e:57:97:83:1e:bb:a7:8f:19:8b:a2:8e:b3:ef:8e:7a:
a8:7b:76:2f:27:a0:d8:42:14:18:41:b9:4e:d8:90:54:61:b2:
96:17:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:22:03 2025 by rpki-client