Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D229B16A265211F0B768F3E2DAE4EC9C.roa
File: D229B16A265211F0B768F3E2DAE4EC9C.roa (raw, json)
Hash identifier: g+0iA/XZzXWwOKP+oKQyJLTIBIkXY71RRV88L2HyvgA=
Subject key identifier: EA:3E:7C:33:7D:6F:7A:0F:FA:FA:61:40:30:0F:E0:AE:9B:6F:3F:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D229B16A265211F0B768F3E2DAE4EC9C.roa
Signing time: Thu 01 May 2025 06:09:21 +0000
ROA not before: Thu 01 May 2025 06:09:16 +0000
ROA not after: Fri 09 May 2025 06:09:16 +0000
asID: 9009
IP address blocks: 154.216.193.0/24 maxlen: 24
154.216.197.0/24 maxlen: 24
154.216.198.0/24 maxlen: 24
154.216.201.0/24 maxlen: 24
154.216.205.0/24 maxlen: 24
154.216.206.0/24 maxlen: 24
154.216.210.0/24 maxlen: 24
154.216.220.0/24 maxlen: 24
154.216.244.0/24 maxlen: 24
154.216.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97714 (0x17db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 06:09:16 2025 GMT
Not After : May 9 06:09:16 2025 GMT
Subject: CN=68131011-3264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:43:7c:76:23:f7:8c:29:3c:ce:bd:7b:38:
21:79:48:8c:c9:c4:23:c4:af:b4:f2:6b:78:6e:8a:
c6:90:20:84:1a:a1:0f:1e:4f:27:36:cf:8e:be:5b:
49:d0:49:3d:92:50:6e:a5:63:b1:9c:a4:63:1b:16:
28:0d:11:40:50:af:db:14:48:e9:bd:60:98:ba:9c:
a0:d9:b5:fe:5b:c6:23:a1:ee:4e:d9:f6:56:1f:e8:
d4:e6:1e:56:70:22:f3:10:bf:70:b0:27:55:64:f7:
99:75:aa:dc:a2:c7:0e:78:61:af:fc:53:8a:d1:bc:
9c:5d:57:6c:7c:4d:54:33:15:46:ce:1a:39:9b:49:
23:bc:91:86:d6:b9:85:4d:6d:bd:ef:34:66:cf:35:
9c:8f:82:de:56:f2:aa:e3:09:42:ea:ec:67:4b:c7:
c4:5e:fe:78:39:d4:a8:be:d2:17:88:01:7b:77:70:
c9:32:37:c2:02:20:44:39:67:2a:01:17:18:ad:cf:
60:04:29:75:7f:d4:20:c2:e8:f5:37:50:23:df:a4:
36:1f:b6:27:57:79:b4:f8:98:c3:7e:b5:9c:0f:75:
db:e4:22:3d:af:f3:60:68:a9:2e:d6:6c:4d:42:e6:
b4:3a:28:4c:09:b3:65:c3:19:b8:de:15:e2:87:e3:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3E:7C:33:7D:6F:7A:0F:FA:FA:61:40:30:0F:E0:AE:9B:6F:3F:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D229B16A265211F0B768F3E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.193.0/24
154.216.197.0-154.216.198.255
154.216.201.0/24
154.216.205.0-154.216.206.255
154.216.210.0/24
154.216.220.0/24
154.216.244.0/24
154.216.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:80:56:ec:3e:e2:86:50:75:87:85:06:2d:4c:13:43:c2:1a:
b9:66:44:21:73:ea:86:ff:63:b7:29:4a:a9:53:2d:56:0e:9e:
66:9a:e2:09:83:46:bd:0e:cf:a6:50:d8:7d:c9:38:66:8a:8c:
80:7f:0c:9f:ee:2b:80:90:98:91:8e:7f:3e:e4:07:86:8b:4c:
b1:82:a9:31:87:84:ec:b9:49:f4:73:57:49:55:ca:3e:3a:9b:
5e:17:4f:cd:7f:e9:02:3f:0d:38:ad:f6:d7:61:3d:e6:d9:14:
17:5d:15:86:4c:47:bb:8b:7e:15:54:ba:4b:83:8e:db:6a:21:
1e:02:53:f6:78:90:91:0d:de:24:91:f5:bf:c1:a9:d9:a8:6e:
b9:3f:aa:b4:f4:a6:f0:08:30:97:e8:e7:5c:91:d8:40:99:d3:
f6:1d:43:4f:c2:7a:df:6d:7b:da:42:24:ed:96:c0:f4:27:65:
08:5e:2b:b3:88:56:0a:61:ac:b8:cd:02:eb:a8:c8:29:0f:67:
b8:ef:d3:dc:a1:17:80:ca:e9:29:18:32:ee:9e:d9:d7:e2:5f:
67:70:37:78:c9:4e:1a:7a:dc:47:97:b3:4b:7f:88:d7:47:d6:
04:e2:4b:f4:a2:e1:02:f2:b6:1d:12:eb:ae:2d:59:e8:dc:21:
e7:3a:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:08:33 2025 by rpki-client