Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5571062469711F0A3AB7ADADAE4EC9C.roa
File: C5571062469711F0A3AB7ADADAE4EC9C.roa (raw, json)
Hash identifier: EGveh1Se/1IuASe0PN1rzB/DjgWs9CjG5mHIrcWx/SA=
Subject key identifier: B5:54:97:0B:EB:F4:1F:90:78:AB:A7:71:FF:1A:9A:67:29:EC:EA:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5571062469711F0A3AB7ADADAE4EC9C.roa
Signing time: Wed 11 Jun 2025 07:43:32 +0000
ROA not before: Wed 11 Jun 2025 07:43:27 +0000
ROA not after: Mon 16 Jun 2025 07:43:27 +0000
asID: 18013
IP address blocks: 154.210.16.0/20 maxlen: 24
154.212.132.0/22 maxlen: 24
154.215.2.0/23 maxlen: 24
154.221.2.0/23 maxlen: 24
154.221.8.0/21 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99818 (0x185ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 07:43:27 2025 GMT
Not After : Jun 16 07:43:27 2025 GMT
Subject: CN=684933a4-44aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:29:cd:25:08:25:77:43:b8:13:38:61:a1:
b5:5c:8a:5c:ae:64:fe:5a:f8:bb:99:04:3e:89:f3:
fa:ab:32:9f:9b:11:0c:89:80:e8:3a:c1:be:41:a1:
b5:24:32:3a:b2:35:5b:a0:be:1d:00:ac:77:ba:37:
0c:a2:40:70:df:c3:7a:52:cf:92:0b:46:07:e9:fb:
bd:e6:e9:ec:ab:ad:13:d3:15:0b:d8:ca:0d:2a:9d:
2b:8d:d8:5a:3c:7b:2a:58:cc:33:d6:0a:6b:bd:01:
12:73:1a:05:48:47:b4:fb:d9:d3:d7:97:9d:d6:d6:
f0:f7:68:9c:b9:22:f1:b4:7c:67:e0:56:48:fd:a8:
8f:c7:fb:e0:6c:6a:58:f6:4c:21:e1:20:26:84:4a:
c0:87:11:fc:af:da:fa:9e:7a:0b:e9:b0:48:fc:27:
fb:62:8f:e2:0d:6c:fc:56:5d:5c:9f:b8:58:13:5b:
7b:d5:2a:47:4d:84:86:c2:23:b0:64:25:55:04:e3:
cb:5b:64:47:e6:f0:7d:0b:bd:23:62:72:ff:5d:b3:
75:53:b9:0e:b0:8d:08:35:5c:25:e0:e9:a6:bd:2d:
d0:12:10:05:4a:cb:cb:f9:9a:22:3c:19:85:6f:fe:
e2:7c:37:e4:e1:58:b5:17:c5:02:0f:b7:9a:ce:28:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:97:0B:EB:F4:1F:90:78:AB:A7:71:FF:1A:9A:67:29:EC:EA:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5571062469711F0A3AB7ADADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.212.132.0/22
154.215.2.0/23
154.221.2.0/23
154.221.8.0/21
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:f5:3f:db:c6:16:8c:7e:7f:c1:de:ff:01:db:40:e6:d7:c9:
16:af:b8:de:22:f0:42:2a:2d:7f:52:ad:8c:41:eb:d2:d3:c2:
30:ec:ea:14:f6:52:54:e7:c5:ea:48:27:0b:85:76:dd:b3:ef:
21:38:b6:a2:2d:ce:79:11:0b:e3:b1:cb:52:89:83:f2:77:50:
4a:cb:d1:8e:11:b3:ec:f6:2f:5f:e5:06:b1:a9:ef:89:2a:19:
03:f7:d2:59:16:38:2d:e5:0a:b6:07:d8:6d:06:b6:ae:20:6b:
94:d4:5d:59:c1:4a:d4:8e:4c:3d:97:31:74:d5:0f:f5:33:88:
a8:0e:9f:80:e1:00:65:9b:a2:c1:0e:8a:de:4b:8b:46:0c:4b:
b3:be:e1:ea:33:22:13:d0:6e:48:bd:dd:ae:e1:f7:15:34:41:
50:05:fd:d3:a3:99:dd:14:b9:77:78:52:1e:30:c6:6b:a5:93:
f2:90:cf:8d:c7:61:c7:5a:cf:31:2f:b8:ac:61:be:91:fd:7e:
d2:07:11:e0:75:82:6f:58:b8:62:85:c6:85:42:2e:c1:99:4b:
f6:3e:53:01:75:53:3f:bb:e1:0b:93:20:21:0f:bf:22:c6:87:
b7:ea:80:26:bc:01:86:c1:61:36:c5:ec:04:8d:c3:94:4a:22:
10:6b:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:21:02 2025 by rpki-client