Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D37FDE259E11F0AE3DCAABDAE4EC9C.roa
File: D1D37FDE259E11F0AE3DCAABDAE4EC9C.roa (raw, json)
Hash identifier: zvMo0MI2OIQP5Ud5ovSbE5a1Xwx+7W5dU2tTnexBt74=
Subject key identifier: B3:5B:42:3F:85:1E:61:0D:57:D6:A9:09:90:68:48:A1:B9:49:D2:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D37FDE259E11F0AE3DCAABDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 08:40:51 +0000
ROA not before: Wed 30 Apr 2025 08:40:46 +0000
ROA not after: Fri 09 May 2025 08:40:46 +0000
asID: 9009
IP address blocks: 154.218.217.0/24 maxlen: 24
154.218.219.0/24 maxlen: 24
154.218.224.0/24 maxlen: 24
154.218.225.0/24 maxlen: 24
154.218.227.0/24 maxlen: 24
154.218.242.0/24 maxlen: 24
154.218.244.0/24 maxlen: 24
154.218.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97582 (0x17d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:40:46 2025 GMT
Not After : May 9 08:40:46 2025 GMT
Subject: CN=6811e213-32fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:3c:a9:a3:ad:e7:de:eb:74:dc:20:94:6a:
f1:81:39:d0:a5:9d:9a:7c:83:ae:57:84:0c:0e:d2:
46:e9:a7:84:b7:9a:f2:57:8b:7a:5c:64:93:18:f6:
5a:6a:8a:ff:52:cf:2c:74:1e:cb:e0:c1:ab:bd:f6:
b9:69:6c:41:b9:e2:86:64:d9:de:30:bc:2d:75:be:
13:ca:f6:35:be:bb:fc:b0:0b:05:b2:0b:20:83:ac:
f4:79:2b:20:14:72:6c:e9:f9:b9:94:29:9f:c8:2a:
ed:e9:61:c8:cb:06:13:ad:73:3d:81:ae:e2:cb:0c:
91:9a:78:ab:bd:96:ed:d2:95:84:65:62:b6:3a:83:
c8:a4:a9:4b:41:a2:e3:51:82:57:5c:17:46:da:6a:
aa:84:2c:2d:69:59:ae:fd:9f:6c:48:c4:99:2e:9d:
f9:5f:fe:0e:3b:3d:93:fa:fb:ee:01:60:d6:9e:98:
2e:2a:cc:c7:35:45:d1:23:6f:fb:c1:05:55:5b:d0:
5c:76:5d:f5:56:41:95:23:70:2a:da:b5:c1:b7:98:
5f:37:79:08:f0:5c:41:9f:62:2b:d2:1a:d3:c4:55:
3e:d7:b5:b0:59:c1:55:40:b2:5e:7d:35:9c:f5:9b:
04:b3:eb:46:ca:fd:71:07:a1:6b:a5:3b:c9:d6:46:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5B:42:3F:85:1E:61:0D:57:D6:A9:09:90:68:48:A1:B9:49:D2:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D37FDE259E11F0AE3DCAABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.217.0/24
154.218.219.0/24
154.218.224.0/23
154.218.227.0/24
154.218.242.0/24
154.218.244.0/24
154.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bf:77:7d:57:d4:a1:18:21:6c:1e:ce:b6:29:03:9f:99:58:
c5:02:e3:38:86:27:ed:1f:1a:38:19:22:d3:34:e8:3c:68:f9:
9c:a9:f7:f8:83:9e:2f:9a:2f:62:d7:c8:6a:34:62:41:3e:65:
95:b2:cd:60:2c:b9:87:4c:f2:31:04:3b:04:fb:2c:15:13:c7:
69:5d:cb:72:cb:95:8f:de:b4:08:b6:2d:24:fc:29:a1:e9:1d:
7a:98:95:7b:a2:df:d2:51:68:89:b1:d5:27:65:86:50:2e:9a:
f2:e5:84:e8:d9:27:52:08:04:0a:5a:4b:8c:42:eb:43:ac:11:
b2:11:d4:c8:99:de:9c:89:80:b4:09:1f:6d:b3:09:dd:77:33:
a1:a1:bd:63:f5:6b:23:84:36:2f:ba:b9:4f:02:e8:66:25:0d:
e0:53:7c:25:b7:14:5e:29:33:81:64:d8:d0:38:f6:e0:38:51:
bf:68:f7:4a:21:01:a6:e5:f1:3d:09:89:32:30:3b:f8:3e:8b:
cf:04:cc:7f:a8:3b:4d:3c:fb:ba:a6:e1:70:45:29:7a:5d:be:
0b:86:98:f1:54:75:04:c0:a1:77:69:08:ee:42:40:6f:2f:16:
f6:f1:01:79:8b:97:b0:13:94:04:18:18:fe:39:03:3e:8e:78:
ff:1a:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:33:42 2025 by rpki-client