Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9824F200265611F09CCCA87DDAE4EC9C.roa
File: 9824F200265611F09CCCA87DDAE4EC9C.roa (raw, json)
Hash identifier: itT3qhzmB/1c/DA8NBNMfD7xMOEsjB0URk6M5usifIQ=
Subject key identifier: 8F:BB:7D:27:DC:70:EF:F2:8D:B6:2F:F5:80:66:AD:A2:74:76:15:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9824F200265611F09CCCA87DDAE4EC9C.roa
Signing time: Thu 01 May 2025 06:36:21 +0000
ROA not before: Thu 01 May 2025 06:36:16 +0000
ROA not after: Fri 09 May 2025 06:36:16 +0000
asID: 9009
IP address blocks: 154.216.204.0/24 maxlen: 24
154.216.213.0/24 maxlen: 24
154.216.215.0/24 maxlen: 24
154.216.222.0/24 maxlen: 24
154.216.229.0/24 maxlen: 24
154.216.232.0/24 maxlen: 24
154.216.237.0/24 maxlen: 24
154.216.240.0/24 maxlen: 24
154.216.243.0/24 maxlen: 24
154.216.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97730 (0x17dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 06:36:16 2025 GMT
Not After : May 9 06:36:16 2025 GMT
Subject: CN=68131665-4484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:6b:bd:52:72:ea:b6:a3:b0:fc:47:8c:5a:
dc:f3:e2:c3:63:b6:79:47:94:e0:f7:93:1c:2b:9c:
9c:21:20:13:30:75:ce:a6:a4:fe:52:e6:01:8e:d9:
d3:c5:25:89:0f:e5:6a:9d:73:08:7f:3c:10:06:eb:
8f:a6:a7:d5:09:93:c7:05:0b:85:a8:f3:5d:f7:64:
22:25:b6:14:a8:f7:13:44:03:14:79:18:f3:06:37:
51:75:e9:e9:ff:5e:d9:2a:55:bc:cf:fe:95:b6:fb:
3a:46:b3:0b:43:5e:ae:24:66:68:5c:78:f2:84:1c:
55:21:33:03:91:9f:00:ee:2d:4e:d9:39:c2:fb:e8:
30:99:36:4c:0b:3e:2f:0b:41:20:00:fe:3e:9d:2c:
24:8b:5f:1f:16:15:e4:17:a7:45:65:8c:bf:96:96:
e6:20:3e:7d:8d:4a:7d:3c:f5:76:05:de:40:db:7e:
a2:42:1b:6f:8b:1c:8a:d5:32:fe:6c:4f:cf:1f:2b:
55:d7:c1:b5:5d:4e:9d:ee:12:d9:da:3d:13:fb:44:
09:7d:23:13:44:de:3f:9c:b7:e0:6b:89:26:15:de:
a7:6e:ab:44:8f:0a:7b:22:71:54:45:5b:6d:26:51:
ab:b5:c6:4a:7f:27:ad:fb:ad:ce:ad:ab:2c:20:46:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:7D:27:DC:70:EF:F2:8D:B6:2F:F5:80:66:AD:A2:74:76:15:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9824F200265611F09CCCA87DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.204.0/24
154.216.213.0/24
154.216.215.0/24
154.216.222.0/24
154.216.229.0/24
154.216.232.0/24
154.216.237.0/24
154.216.240.0/24
154.216.243.0/24
154.216.246.0/24
Signature Algorithm: sha256WithRSAEncryption
46:59:bb:7a:55:e9:82:5c:86:9c:ea:10:69:ba:85:49:58:89:
3b:47:ba:de:a2:d1:3f:46:b3:9c:23:a9:c6:79:1a:dc:0c:50:
46:84:9b:cc:7c:5c:fd:6d:42:f6:9c:32:94:eb:69:ed:8f:0d:
3e:b6:17:70:78:81:bb:39:b6:3d:8d:c3:89:a5:90:3c:e9:53:
bc:fb:db:f8:12:d1:fc:7e:cd:97:64:dd:09:03:8c:a0:40:27:
0f:6a:ce:f8:e4:50:bf:4f:e8:e1:52:34:13:95:e4:38:41:19:
82:77:63:78:21:2b:12:ac:5d:01:4f:30:c5:b0:1b:0c:89:2c:
96:72:97:13:c3:63:30:3f:51:52:29:75:0b:c1:f9:ec:15:2a:
76:66:1f:bb:b6:d7:a6:d7:31:87:95:d5:8a:48:27:b7:a8:60:
3c:c2:b8:2c:69:2e:1e:30:c5:5e:bd:8b:b6:fb:60:41:a8:fc:
0f:ea:05:0f:29:e6:72:ed:c6:0a:33:5b:96:82:9d:f4:e3:69:
fa:5f:86:2b:b3:e2:0f:68:68:06:d1:d9:d5:db:8b:3b:00:f4:
98:fa:4d:bd:61:5b:34:a4:72:b5:14:a2:3b:e6:68:03:2e:a9:
68:67:d1:cf:d3:54:ee:11:55:66:5d:5f:3a:5c:fe:4a:10:da:
9d:ee:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:44:08 2025 by rpki-client