Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748F5036469211F0B28B8EB9DAE4EC9C.roa
File: 748F5036469211F0B28B8EB9DAE4EC9C.roa (raw, json)
Hash identifier: Z5ucEo5z0IgpOUdZnU4qA5zn5Bz3AS5aJS0yAD3NMg4=
Subject key identifier: FB:39:B3:7F:83:DD:2E:A0:8B:14:C0:CB:92:FF:3E:80:0B:3A:35:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748F5036469211F0B28B8EB9DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 07:05:29 +0000
ROA not before: Wed 11 Jun 2025 07:05:24 +0000
ROA not after: Mon 16 Jun 2025 07:05:24 +0000
asID: 137951
IP address blocks: 154.212.132.0/22 maxlen: 24
154.215.4.0/22 maxlen: 24
154.215.8.0/22 maxlen: 24
154.218.128.0/18 maxlen: 24
154.221.4.0/22 maxlen: 24
154.221.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99812 (0x185e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 07:05:24 2025 GMT
Not After : Jun 16 07:05:24 2025 GMT
Subject: CN=68492ab9-4f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:8d:54:74:cb:ca:4b:11:e0:01:4a:d5:2d:
eb:d9:f6:9d:e8:ea:d7:4d:68:23:57:1e:ed:bc:dc:
fa:fe:ac:1f:cd:aa:1d:50:a1:7a:cd:cb:5d:5a:a3:
a7:30:b5:f9:76:9e:b0:03:8a:7f:d2:f4:36:b3:f0:
3a:08:a2:0b:a1:63:b1:40:2e:ca:b6:3a:ca:d0:80:
49:81:dd:e6:e6:2f:76:d3:02:23:b6:41:a7:2d:a0:
18:7c:2e:d2:4d:14:cd:e5:0f:5b:64:9f:bb:28:45:
66:ad:1e:20:e5:a9:29:5f:3f:89:43:33:4b:6a:1e:
0c:9c:d1:c2:6d:ed:9a:cd:14:e0:7f:e7:50:02:a7:
4f:b8:f2:8c:79:46:30:a2:b7:21:00:cb:88:f5:06:
84:c3:31:61:fc:9c:7f:4e:13:e9:ea:ee:30:ca:a9:
ba:79:38:d9:7d:e2:b7:76:06:11:ad:79:b5:31:89:
91:88:a4:2c:7f:f4:b2:01:ec:25:a8:80:7e:7b:57:
0d:a8:fd:75:2b:30:3a:16:59:b7:18:60:a3:1f:15:
71:02:da:64:3b:4d:31:42:a6:68:8c:45:02:50:e5:
3e:3e:12:3a:e2:81:98:1c:84:fe:ba:a9:14:b0:13:
73:a8:93:40:e6:55:3e:51:01:ad:85:6b:d4:ad:3e:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:B3:7F:83:DD:2E:A0:8B:14:C0:CB:92:FF:3E:80:0B:3A:35:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/748F5036469211F0B28B8EB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.132.0/22
154.215.4.0-154.215.11.255
154.218.128.0/18
154.221.4.0-154.221.15.255
Signature Algorithm: sha256WithRSAEncryption
06:8e:fa:d9:4c:6b:78:d0:b0:7f:49:98:ef:92:a8:36:53:9a:
cc:2c:1a:01:de:26:41:62:62:37:90:89:74:b1:2c:e8:95:4e:
a9:8e:b3:0c:a0:8a:6f:86:75:5e:1b:56:f3:be:57:a8:0c:25:
a1:07:3d:7b:38:8f:e8:36:a8:62:02:3e:15:5f:70:fc:42:e0:
88:0a:c4:46:54:fe:fd:3a:a0:b3:a9:a1:6a:c4:9f:21:35:11:
06:92:bd:c1:5b:9b:09:65:62:c4:07:35:56:66:63:e3:11:9f:
89:ad:4a:7f:57:69:00:6b:e8:8d:91:c3:13:cc:2b:b0:62:08:
89:36:51:56:ec:1d:b9:b1:26:ec:4a:88:48:97:fc:c9:3d:c7:
c2:06:56:c9:34:61:4b:1c:2b:5d:62:c7:5c:ef:5b:6d:c1:45:
3f:cd:f9:e5:7e:cc:24:05:a6:ef:8e:e3:50:0c:6a:3b:8c:b8:
1f:f8:c4:67:3f:23:2c:3e:83:76:8d:00:06:51:1c:b6:b2:8f:
9a:c5:dc:12:8c:7c:f5:88:5b:8b:3a:47:e7:92:0b:2f:a0:76:
e7:1b:bf:c8:a9:5b:b4:a1:6a:4d:35:78:b4:21:66:17:fb:dc:
a4:ea:5a:e4:78:b5:8e:1e:29:51:89:d0:fc:6d:f2:2a:13:4f:
4e:98:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:26 2025 by rpki-client