Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12D451A265F11F0914A66B9DAE4EC9C.roa
File: A12D451A265F11F0914A66B9DAE4EC9C.roa (raw, json)
Hash identifier: G/e8vCx+M8utH6zm4YVf9KIGzlZjwEMLC90gpRcucGc=
Subject key identifier: 3B:34:81:12:FD:AC:4C:63:C8:40:4A:BC:EB:58:44:EB:6E:CB:D6:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12D451A265F11F0914A66B9DAE4EC9C.roa
Signing time: Thu 01 May 2025 07:41:02 +0000
ROA not before: Thu 01 May 2025 07:40:57 +0000
ROA not after: Sat 10 May 2025 07:40:57 +0000
asID: 63888
IP address blocks: 154.207.64.0/20 maxlen: 24
154.207.80.0/22 maxlen: 24
154.207.88.0/23 maxlen: 24
154.207.98.0/23 maxlen: 24
154.207.100.0/23 maxlen: 24
154.207.104.0/23 maxlen: 24
154.207.126.0/23 maxlen: 24
154.207.142.0/23 maxlen: 24
154.207.188.0/22 maxlen: 24
154.207.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97754 (0x17dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 07:40:57 2025 GMT
Not After : May 10 07:40:57 2025 GMT
Subject: CN=6813258e-bc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:cf:87:e6:67:ba:14:a9:c9:22:06:c1:9e:
c3:02:72:03:e9:dd:70:9a:85:17:18:93:c2:76:87:
6a:41:22:79:4e:c5:cc:69:79:73:c2:f5:90:44:e9:
3f:b9:af:f4:b0:42:fa:61:cc:b7:af:df:09:14:84:
39:93:d4:75:90:b4:73:7b:3d:57:1d:e5:15:ea:d2:
e2:38:fe:8d:b1:40:7f:c3:ff:a9:1c:c5:4f:01:dd:
58:09:92:64:cb:42:7c:e7:2f:99:ad:50:22:9e:da:
9a:b2:b3:a5:68:91:d9:7b:ec:3f:9a:02:38:ed:00:
7f:f9:72:1a:8c:b9:99:5e:ff:a3:90:7a:37:0c:03:
89:db:be:e4:06:a0:e7:1b:b4:7f:d3:7a:d7:43:43:
74:b3:ca:cf:72:e6:2f:49:f5:69:3f:1b:17:cb:1a:
21:44:6c:a0:d2:73:f0:3f:72:7b:75:c2:b1:b6:3d:
e1:80:89:d9:c8:77:7a:c8:23:f5:fb:37:de:ff:62:
a2:c3:ce:7e:21:51:fb:80:d9:55:c3:63:aa:8a:4b:
15:42:df:5b:78:0e:c6:1c:21:36:c2:a2:c6:ff:bc:
df:a5:23:c5:fb:c4:64:37:85:f0:50:db:84:27:e5:
3f:5c:cf:5d:be:cc:61:93:67:b5:26:9f:d3:b9:7d:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:81:12:FD:AC:4C:63:C8:40:4A:BC:EB:58:44:EB:6E:CB:D6:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A12D451A265F11F0914A66B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.64.0-154.207.83.255
154.207.88.0/23
154.207.98.0-154.207.101.255
154.207.104.0/23
154.207.126.0/23
154.207.142.0/23
154.207.188.0/22
154.207.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:18:84:b8:da:85:98:d2:79:42:25:78:2e:10:75:9e:5e:b2:
62:5d:74:12:fe:ec:37:cb:e2:72:d9:bf:f1:5c:0a:9d:e1:91:
e7:2d:b6:2f:3a:90:0e:60:15:bb:3f:a2:df:e7:75:49:3d:ec:
83:db:9a:b8:ba:fb:d1:0b:cd:7f:f9:a7:48:b1:ac:aa:a6:7c:
b4:13:4f:82:3a:b9:06:0f:a6:24:d7:e1:c4:de:d3:e9:cc:c3:
d8:f0:55:1b:40:fe:21:27:ea:35:98:b1:37:6e:e9:6d:73:83:
0f:19:e1:b6:99:5c:5a:db:43:bb:92:55:87:ef:9e:90:6c:d3:
31:fa:4e:e8:5a:9e:9c:e8:b2:94:e2:59:ad:08:08:60:df:8d:
e4:62:38:20:5c:a8:d6:85:71:d8:c9:73:1a:62:72:64:39:cb:
d7:2a:6e:73:ff:f2:49:c2:4f:3c:37:fd:bc:a2:e2:6c:26:c5:
c3:4b:b0:d9:7b:15:5f:37:9a:0f:71:d9:23:dd:65:03:1d:89:
4c:f3:5a:59:94:18:f7:37:56:30:57:de:6b:26:72:26:68:e9:
89:d8:62:e0:c9:aa:da:39:85:de:cf:fb:f6:cb:cc:ca:d9:06:
0d:64:e6:10:83:a6:f1:cb:ec:25:28:71:76:51:eb:32:04:a6:
a8:a5:8c:ce
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIDAX3aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMDc0MDU3WhcNMjUwNTEwMDc0MDU3WjAYMRYw
FAYDVQQDEw02ODEzMjU4ZS1iYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2abPh+ZnuhSpySIGwZ7DAnID6d1wmoUXGJPCdodqQSJ5TsXMaXlzwvWQ
ROk/ua/0sEL6Ycy3r98JFIQ5k9R1kLRzez1XHeUV6tLiOP6NsUB/w/+pHMVPAd1Y
CZJky0J85y+ZrVAintqasrOlaJHZe+w/mgI47QB/+XIajLmZXv+jkHo3DAOJ277k
BqDnG7R/03rXQ0N0s8rPcuYvSfVpPxsXyxohRGyg0nPwP3J7dcKxtj3hgInZyHd6
yCP1+zfe/2Kiw85+IVH7gNlVw2OqiksVQt9beA7GHCE2wqLG/7zfpSPF+8RkN4Xw
UNuEJ+U/XM9dvsxhk2e1Jp/TuX25fwIDAQABo4IC3zCCAtswHQYDVR0OBBYEFDs0
gRL9rExjyEBKvOtYROtuy9Y+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMTJENDUxQTI2NUYxMUYwOTE0QTY2QjlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAaaz0ADBAKaz1ADBAGa
z1gwDAMEAZrPYgMEAZrPZAMEAZrPaAMEAZrPfgMEAZrPjgMEAprPvAMEAprP3DAN
BgkqhkiG9w0BAQsFAAOCAQEAbRiEuNqFmNJ5QiV4LhB1nl6yYl10Ev7sN8victm/
8VwKneGR5y22LzqQDmAVuz+i3+d1ST3sg9uauLr70QvNf/mnSLGsqqZ8tBNPgjq5
Bg+mJNfhxN7T6czD2PBVG0D+ISfqNZixN27pbXODDxnhtplcWttDu5JVh++ekGzT
MfpO6FqenOiylOJZrQgIYN+N5GI4IFyo1oVx2MlzGmJyZDnL1ypuc//yScJPPDf9
vKLibCbFw0uw2XsVXzeaD3HZI91lAx2JTPNaWZQY9zdWMFfeayZyJmjpidhi4Mmq
2jmF3s/79svMytkGDWTmEIOm8cvsJShxdlHrMgSmqKWMzg==
-----END CERTIFICATE-----
Generated at Sun May 11 06:13:50 2025 by rpki-client