Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B811DF0469811F0B3ADDEDEDAE4EC9C.roa
File: 8B811DF0469811F0B3ADDEDEDAE4EC9C.roa (raw, json)
Hash identifier: jDKATWQ+vrTUZVsqUGbU4PgziMIKnMtIWFfCZeOlCYs=
Subject key identifier: 01:A7:2E:92:8D:6E:DA:07:48:0D:CD:C7:3E:9E:C7:E1:3E:63:F8:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B811DF0469811F0B3ADDEDEDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 07:49:04 +0000
ROA not before: Wed 11 Jun 2025 07:48:58 +0000
ROA not after: Mon 16 Jun 2025 07:48:58 +0000
asID: 204721
IP address blocks: 154.215.2.0/23 maxlen: 24
154.221.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99820 (0x185ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 07:48:58 2025 GMT
Not After : Jun 16 07:48:58 2025 GMT
Subject: CN=684934f0-3e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:18:cc:73:fc:50:fc:84:df:22:45:2e:b3:
d1:e5:56:de:74:0f:c7:e0:10:77:49:04:a2:bc:b3:
13:62:4b:fb:3b:45:c5:bf:0e:2a:ee:66:ad:fa:99:
1f:ec:d3:99:8f:b1:9a:ec:10:86:cd:60:6e:1c:57:
98:cc:89:06:bf:6f:b3:b0:b9:e6:bb:e7:b3:9d:da:
18:29:45:5d:7e:fc:04:69:e8:f1:db:c6:ae:3c:93:
21:64:fe:62:74:07:92:5b:88:16:28:7a:8f:d6:50:
fc:06:10:17:31:ad:19:ae:7b:2c:73:6b:e2:01:15:
16:70:1b:b9:22:98:8a:ae:ba:aa:2a:73:a4:73:51:
81:19:35:43:cd:0f:6a:f1:dd:2a:a6:cf:69:70:fb:
f7:6d:c1:42:07:9f:fc:b8:16:b5:22:dc:f6:d5:d8:
50:5b:92:ad:15:b6:9f:7d:f2:73:b9:5f:d2:4f:ae:
94:42:73:5b:b8:44:e5:1a:0f:48:b0:9d:46:e5:79:
82:cf:32:47:94:61:cb:3b:51:d8:9a:a3:95:81:b1:
69:77:2a:a5:18:3e:a5:22:1d:0a:39:3e:93:f3:15:
1f:34:47:97:59:7d:04:b0:06:64:b2:2e:02:0f:c1:
be:5d:81:94:be:4e:27:1d:25:7f:14:b8:93:dd:f3:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:2E:92:8D:6E:DA:07:48:0D:CD:C7:3E:9E:C7:E1:3E:63:F8:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B811DF0469811F0B3ADDEDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.2.0/23
154.221.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:dd:52:0c:97:6f:02:67:4b:e2:0b:d1:e1:03:a5:0b:45:66:
28:aa:b2:e4:8b:25:ac:08:22:f8:f5:7f:9c:71:54:5e:aa:c6:
c1:82:58:5e:6c:d0:a2:18:27:01:82:98:a3:93:3a:2c:43:3c:
b5:b2:28:bb:1c:68:f4:6a:cd:23:df:ea:80:38:68:32:eb:23:
3b:3b:7f:a0:bb:b3:6d:d8:69:e0:42:60:42:24:26:a1:cf:be:
fb:96:cf:fa:10:6f:53:5c:14:75:66:b8:1b:99:e1:82:1c:31:
8b:f1:19:2a:46:4f:4c:c8:21:cd:ac:47:1c:92:53:11:94:83:
60:cf:37:f0:6f:e9:31:b2:4b:fb:4c:3e:77:40:bf:89:df:89:
6d:9d:c8:e9:f4:ca:ad:e2:ce:26:95:d4:45:e6:1d:46:e8:89:
d7:06:20:9f:c0:64:cd:ac:e0:cf:33:84:ec:10:97:c9:00:0b:
e1:d3:b8:bf:cd:ae:56:1e:a8:bd:42:54:85:af:33:f9:1e:45:
d0:30:cb:a8:2c:e3:8b:ae:be:ef:2f:b9:1f:d8:71:36:43:01:
68:72:31:c8:a2:96:81:30:90:85:f7:71:de:b6:89:52:20:cb:
79:6b:41:d9:a0:5b:1d:f6:b2:05:70:3b:2c:04:4a:43:2d:40:
9c:00:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:02:01 2025 by rpki-client