Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F957CCBA259C11F0905824A0DAE4EC9C.roa
File: F957CCBA259C11F0905824A0DAE4EC9C.roa (raw, json)
Hash identifier: m+jsnI7lclwinpZFOUnL7ZiCxzrOmDbrpr1/Fq5l9yM=
Subject key identifier: DA:52:3B:88:38:89:F1:6C:0F:3C:16:52:EA:C5:0C:F9:BA:09:44:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F957CCBA259C11F0905824A0DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 08:27:38 +0000
ROA not before: Wed 30 Apr 2025 08:27:33 +0000
ROA not after: Fri 09 May 2025 08:27:33 +0000
asID: 9009
IP address blocks: 154.218.201.0/24 maxlen: 24
154.218.209.0/24 maxlen: 24
154.218.210.0/24 maxlen: 24
154.218.216.0/24 maxlen: 24
154.218.221.0/24 maxlen: 24
154.218.228.0/24 maxlen: 24
154.218.232.0/24 maxlen: 24
154.218.237.0/24 maxlen: 24
154.218.243.0/24 maxlen: 24
154.218.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97578 (0x17d2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:27:33 2025 GMT
Not After : May 9 08:27:33 2025 GMT
Subject: CN=6811defa-9f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:13:8c:24:85:c5:69:54:be:fb:dd:e3:8d:
cb:69:89:c8:ce:8d:75:c0:4d:b3:6c:41:8c:6f:b9:
29:47:fb:49:ae:29:69:da:1d:6d:64:4a:0c:20:77:
95:b4:0e:e1:94:97:35:13:80:43:be:27:6b:95:8f:
fc:cb:90:84:ff:ae:6f:94:50:64:b9:d0:74:c2:2b:
78:03:f7:29:71:99:9a:36:af:c9:91:9a:6a:a0:2e:
9c:b6:9a:d6:50:90:82:85:63:17:91:cf:c0:1b:87:
77:06:25:23:62:c8:33:56:7c:e0:2f:8d:87:ba:6e:
ee:06:6c:35:6b:a6:46:43:0c:29:bf:a1:7f:e9:1c:
96:49:a0:d3:fc:72:93:8f:3f:eb:22:ab:cf:3c:9b:
c1:75:d1:3e:34:4c:f0:b4:c8:f7:e8:eb:e7:b7:d3:
41:48:f1:65:0e:1e:a9:30:c1:1b:4d:67:b3:ec:5c:
bb:3d:af:bc:79:11:18:fd:1e:21:2b:77:17:41:1a:
2d:25:62:0c:19:64:e1:a9:2e:3c:ba:66:f5:7b:19:
5d:49:10:65:f7:4f:1f:c4:11:76:a1:fe:03:cc:65:
49:34:ce:c0:2e:60:c4:eb:52:0e:80:45:3a:ee:10:
ff:14:0e:c4:08:ba:18:74:10:77:98:04:c9:9a:da:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:3B:88:38:89:F1:6C:0F:3C:16:52:EA:C5:0C:F9:BA:09:44:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F957CCBA259C11F0905824A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.201.0/24
154.218.209.0-154.218.210.255
154.218.216.0/24
154.218.221.0/24
154.218.228.0/24
154.218.232.0/24
154.218.237.0/24
154.218.243.0/24
154.218.252.0/24
Signature Algorithm: sha256WithRSAEncryption
18:df:b7:55:28:c7:fe:35:19:d4:22:ea:b7:4c:97:b5:69:bc:
d3:b8:05:2b:00:a4:d5:fc:b1:14:6f:77:7f:d1:79:1b:89:a7:
58:cc:65:47:ce:6e:82:ef:af:00:67:f5:21:2a:db:a7:bb:56:
86:fe:61:0c:f9:cc:dd:fd:f0:33:51:71:01:95:85:94:68:37:
67:d3:b6:b1:ca:4e:d9:a4:9f:06:80:a0:b0:ba:fc:98:a9:01:
44:f9:27:e9:0e:36:32:09:e8:c7:cb:14:6f:63:09:1f:40:a7:
c3:ae:6b:21:f6:30:34:f6:d0:0c:7f:b1:86:38:af:ba:bc:f5:
b5:53:73:80:30:93:c4:40:21:3b:78:18:8e:69:92:1e:a9:d4:
49:96:69:60:a5:b4:d8:24:5d:1b:65:51:f3:f9:ab:4e:71:ef:
8b:dd:23:ea:06:95:35:58:bf:7b:00:ba:58:77:36:03:05:34:
8b:0b:a6:48:e1:49:24:35:8d:97:6d:1f:b6:01:58:da:0f:41:
65:c4:73:12:c8:e8:b2:83:cf:c5:70:30:a3:70:6b:e6:62:c7:
93:36:92:6e:7a:56:57:92:85:ba:1a:f6:88:c2:b7:00:00:4f:
5c:4f:b1:80:8e:22:b4:ed:96:e0:3d:f8:2c:c9:ee:02:3a:19:
d7:a0:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:24:58 2025 by rpki-client