Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D40DE441EF11F08047AC95DAE4EC9C.roa
File: B1D40DE441EF11F08047AC95DAE4EC9C.roa (raw, json)
Hash identifier: e24G8G+974TCvwlrsZVjWEEQr54/wMM4FL0qerc7WNw=
Subject key identifier: 24:1C:C7:65:70:A4:5F:8A:45:34:F1:97:0B:5F:16:0A:02:39:0B:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D40DE441EF11F08047AC95DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:30:19 +0000
ROA not before: Thu 05 Jun 2025 09:30:14 +0000
ROA not after: Sun 29 Jun 2025 09:30:14 +0000
asID: 19318
IP address blocks: 154.222.190.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99576 (0x184f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 09:30:14 2025 GMT
Not After : Jun 29 09:30:14 2025 GMT
Subject: CN=684163ab-7c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:63:b6:16:3f:c4:1b:ab:2f:3d:e4:86:03:
33:32:41:ef:18:ba:a4:35:cb:0f:53:29:d6:a5:d2:
e4:a0:70:df:3b:44:40:af:6f:63:84:b8:5f:57:57:
58:d5:08:57:f6:4a:f1:45:5e:53:b0:35:4d:f9:aa:
7e:ef:24:ba:79:fb:3e:bc:b3:76:1f:51:c4:15:55:
1a:ef:88:af:95:a3:f1:26:7d:fa:01:7d:92:6c:68:
92:e3:d9:28:89:5b:94:26:6a:8c:b1:0f:83:ae:ef:
74:84:0b:23:8f:a0:18:f6:2c:b0:5b:40:c1:08:36:
8b:31:60:42:f1:9a:5c:df:af:be:d0:f1:10:80:05:
ad:0b:ec:d3:98:fc:ef:f5:82:93:d5:be:9a:59:cd:
53:31:33:a9:35:61:97:fc:6d:65:b9:37:da:ab:79:
e2:90:36:86:88:e7:e0:50:ae:47:27:a0:5a:d6:48:
2b:22:86:eb:2e:07:ee:66:28:9e:1a:a7:69:11:88:
e7:9f:69:b9:05:3a:51:1c:b4:3c:45:24:e1:e6:a4:
db:24:67:56:66:2a:f1:ca:86:57:56:ca:c9:88:65:
5b:57:3a:df:1d:4a:41:7b:6f:ae:ec:e9:92:8f:cf:
33:7c:04:d3:8d:83:7e:c8:3c:3c:5f:fc:63:e6:18:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:C7:65:70:A4:5F:8A:45:34:F1:97:0B:5F:16:0A:02:39:0B:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D40DE441EF11F08047AC95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
45:83:42:af:14:51:0b:60:2e:2b:b3:3e:db:c7:11:69:97:f0:
13:5d:33:b3:08:96:f8:f2:b0:5d:30:8c:ea:81:c2:41:ca:9f:
0c:d8:a2:58:c1:c8:1b:b8:52:ed:ff:99:69:c5:b0:5d:fd:c1:
89:41:d0:02:64:82:3f:51:e9:0a:2e:19:70:a4:13:93:1a:ac:
0f:7f:9e:78:12:45:3a:ae:40:99:a2:54:cf:3f:14:56:54:2e:
ac:9e:90:d0:3c:32:13:8e:d7:10:27:74:40:a3:fa:d0:f3:43:
d3:8e:24:79:f9:0b:78:fb:99:fa:fa:19:a4:2c:7f:33:6d:27:
37:63:cd:f6:c2:e8:43:fe:de:36:6d:9c:bf:ac:23:e0:8f:50:
30:bd:db:20:55:3b:50:7b:5c:af:9b:4f:94:35:62:f4:ca:cd:
f4:99:60:7e:0a:79:8a:d5:ab:84:ff:36:8a:db:9f:59:72:d1:
76:2a:8b:bb:6f:60:dc:84:66:87:51:9f:81:14:cc:d2:db:ef:
f5:d6:b5:a3:32:18:42:c0:64:12:09:7b:bc:11:71:5f:b7:dd:
6c:c9:71:11:34:9e:07:4f:f6:f6:93:1b:ba:27:f3:ff:a3:79:
4f:20:0c:6b:2e:10:60:da:4d:22:1c:4f:0c:62:5a:5e:3e:09:
00:63:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:21:28 2025 by rpki-client