Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557092FA460111F0B76AE982DAE4EC9C.roa
File: 557092FA460111F0B76AE982DAE4EC9C.roa (raw, json)
Hash identifier: SmwkEuVuwiUxjPFasW6aSZkaJ+HV5JopUleCNYNPyaw=
Subject key identifier: 1E:2E:45:5E:D5:EC:2A:C6:26:6B:37:B9:AB:E7:F0:3F:85:3B:B3:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557092FA460111F0B76AE982DAE4EC9C.roa
Signing time: Tue 10 Jun 2025 13:46:39 +0000
ROA not before: Tue 10 Jun 2025 13:46:34 +0000
ROA not after: Mon 16 Jun 2025 13:46:34 +0000
asID: 139923
IP address blocks: 154.91.48.0/20 maxlen: 24
154.91.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99792 (0x185d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 13:46:34 2025 GMT
Not After : Jun 16 13:46:34 2025 GMT
Subject: CN=6848373f-de4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:e8:1d:14:64:1a:47:cf:d3:78:d3:c1:b2:
0d:10:98:0c:3b:a3:4c:c2:e2:10:8b:1f:d4:a9:54:
5d:27:42:43:29:8f:6f:84:8e:fb:2d:aa:5f:e8:c3:
05:b2:f9:f1:7b:0c:ea:4d:d5:50:15:9d:91:2d:39:
28:30:78:eb:12:50:9c:a1:42:b5:2e:e9:18:2d:9e:
3f:64:20:45:02:99:f6:fe:0c:42:a6:fe:d8:57:e1:
2f:04:fd:4e:fb:19:2d:b1:c6:9f:35:9e:ac:6a:33:
84:47:d8:30:7e:96:bb:9f:e7:19:2d:1b:23:cb:92:
c3:a9:90:42:c6:8a:c8:36:de:ab:e1:fd:37:9e:54:
a0:50:53:f3:ac:c7:e8:3b:52:60:9d:b6:c3:46:47:
ac:18:b1:3e:8a:c1:15:6c:de:77:b6:89:32:e4:aa:
35:00:ee:53:c6:a6:70:d5:96:5e:69:7b:10:8c:27:
2c:99:a6:1d:30:1b:44:71:72:8c:3f:14:51:9f:fc:
95:a8:07:a1:55:a4:aa:5a:82:98:ef:db:a4:6d:8d:
9f:7a:2f:3d:37:b6:a4:52:ab:2d:5d:17:92:05:a8:
3e:da:fb:2c:82:98:0c:37:e7:84:f2:be:5c:d0:54:
e1:70:5c:4e:b1:2c:6f:ac:95:d6:df:66:53:ee:16:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:45:5E:D5:EC:2A:C6:26:6B:37:B9:AB:E7:F0:3F:85:3B:B3:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/557092FA460111F0B76AE982DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.48.0/20
154.91.176.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:6d:b4:72:03:fb:16:98:13:14:97:8b:f4:04:84:b9:01:5f:
09:c9:51:8d:b3:75:f7:49:6d:1a:23:74:c0:76:ab:64:1a:64:
c2:21:61:38:86:93:87:91:83:2f:20:df:ae:9a:c2:56:19:9d:
41:46:34:1a:9e:d6:2f:78:82:bf:3d:f9:24:cf:f8:d5:13:a4:
9e:e5:92:b4:c6:39:56:eb:c9:c7:86:21:99:e7:b4:d1:66:78:
2c:a0:b6:a3:f4:fb:9c:a4:42:9e:10:3f:1d:14:a1:8b:68:d1:
22:15:f3:85:a9:8b:85:81:c1:28:87:56:e9:ef:96:30:a4:72:
a1:71:e8:05:50:1d:42:96:98:44:91:f9:64:52:94:c7:54:d7:
b4:99:ed:78:ac:e2:12:77:df:41:be:af:0e:b7:2f:da:c2:04:
68:93:8e:ae:59:ff:37:91:6c:ec:a0:af:33:c5:4a:2d:23:a5:
23:f9:bc:9f:08:43:3c:52:8c:ab:dd:cf:e4:c3:09:4f:ab:87:
08:a9:d5:f3:b0:25:7f:16:f1:da:4a:0d:99:2a:0a:c8:53:40:
70:ae:d6:b7:d9:d4:7d:71:a7:25:1a:ea:70:85:5e:a7:67:af:
9e:cd:77:30:e4:03:19:dd:0f:8d:fc:ec:e9:87:b5:62:20:00:
45:e8:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:15:14 2025 by rpki-client