Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D713B424273711F0A9E876DBDAE4EC9C.roa
File: D713B424273711F0A9E876DBDAE4EC9C.roa (raw, json)
Hash identifier: zwKQGswzNgsFsZY6yKc4BtTsaxqhqMOltB/mNICMKlU=
Subject key identifier: E8:E7:9C:AB:34:77:21:3B:A9:CF:60:A1:A9:30:88:4E:B4:49:BA:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D713B424273711F0A9E876DBDAE4EC9C.roa
Signing time: Fri 02 May 2025 09:28:44 +0000
ROA not before: Fri 02 May 2025 09:28:39 +0000
ROA not after: Mon 12 May 2025 09:28:39 +0000
asID: 135097
IP address blocks: 154.220.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97882 (0x17e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:28:39 2025 GMT
Not After : May 12 09:28:39 2025 GMT
Subject: CN=6814904c-307b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:5a:01:d7:94:64:ec:c9:0f:f8:b2:69:84:
fa:36:28:ce:dc:4b:99:42:e2:16:db:f8:06:1e:3b:
ab:83:86:ee:ac:b8:60:fc:ab:06:8c:a4:88:fb:74:
40:ad:63:c6:cc:31:47:b1:46:bf:61:cc:e3:24:1f:
65:95:70:48:c2:b5:8c:9e:bf:5a:d7:a5:a3:fe:fb:
26:b5:08:07:5b:f4:7c:1b:f5:ca:c2:be:32:cb:66:
00:e5:52:53:ae:ae:3c:74:07:5d:a5:3a:13:b6:4f:
a5:8c:a4:03:18:ce:f6:8b:97:23:55:85:53:c2:44:
2c:0f:50:eb:a0:97:87:35:65:81:6f:f7:cd:7c:f8:
92:54:24:1d:2f:84:43:39:27:53:0f:4b:bf:33:ae:
27:be:23:eb:95:12:9a:19:60:d6:70:d3:a0:62:eb:
69:fc:fa:df:d4:d5:ef:e4:70:79:16:8e:78:fa:ce:
1c:3e:c1:c3:ba:f4:c5:e7:d4:b6:3c:53:ad:33:07:
36:63:0e:31:6a:e5:51:b4:c8:3f:f8:24:53:fa:64:
4f:d1:87:83:cf:f1:6e:80:1f:30:84:2e:73:b4:3f:
ab:8d:30:40:0a:4a:8d:6f:2b:2c:b9:92:b9:fb:37:
d9:37:67:bb:6e:ad:3c:df:ce:a0:d3:85:8e:aa:fc:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E7:9C:AB:34:77:21:3B:A9:CF:60:A1:A9:30:88:4E:B4:49:BA:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D713B424273711F0A9E876DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.64.0/18
Signature Algorithm: sha256WithRSAEncryption
cf:d1:9a:c3:cb:d4:a0:cd:ca:fa:ee:d8:c9:63:d6:29:01:01:
50:2e:6b:15:af:95:a1:cd:98:b2:95:37:66:42:b5:7c:7b:35:
a7:1e:e0:55:3c:20:e9:1f:96:61:2d:4f:c3:c0:5a:97:3e:f6:
ea:71:66:46:fc:b1:41:9e:bc:cf:d8:3f:e3:dc:2e:13:22:81:
05:73:f9:25:0d:1a:33:02:7b:c4:20:b1:86:27:2c:45:38:f5:
cb:0e:e0:b9:e0:2f:58:a5:d2:be:95:26:4e:7f:ce:ef:20:ff:
78:05:74:d1:de:3f:ca:75:26:9f:d4:02:6a:37:9b:dd:b9:38:
d5:a4:e0:fe:50:a7:93:40:03:33:8f:95:b2:2b:cb:e6:61:cb:
02:5b:8e:77:5b:2e:b6:ed:76:ff:a2:14:8c:05:61:0a:a1:11:
1b:8d:0d:7b:aa:d0:09:52:7b:d2:71:6d:47:03:25:12:06:49:
6e:cf:76:35:3d:1f:9e:08:00:ce:2f:b3:a5:99:4c:de:6d:07:
34:c7:d6:53:a9:d6:2f:aa:43:f4:dc:4d:74:dc:c6:f7:81:54:
33:eb:e5:a8:70:5b:ba:78:e7:d6:ad:d9:f3:28:b8:24:d5:5c:
c3:91:2e:0b:92:c3:cf:83:75:4e:eb:40:06:98:2e:e2:7c:fb:
88:9c:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:11:31 2025 by rpki-client