
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C442E06B8911F08E27BED3DAE4EC9C.roa
File: C7C442E06B8911F08E27BED3DAE4EC9C.roa (raw, json)
Hash identifier: Rw7tazAZWlsGAPcvtf2r1mi+vmQa5mg6v0jN806JEPk=
Subject key identifier: E0:42:05:C3:EE:19:D8:98:36:6B:D0:08:3F:3D:18:D6:12:88:BE:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C442E06B8911F08E27BED3DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:06:36 +0000
ROA not before: Mon 28 Jul 2025 08:06:30 +0000
ROA not after: Mon 04 Aug 2025 08:06:30 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
154.202.66.0/23 maxlen: 24
154.202.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102330 (0x18fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:06:30 2025 GMT
Not After : Aug 4 08:06:30 2025 GMT
Subject: CN=68872f8c-9b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:0d:b9:40:4d:f2:01:53:c7:76:d4:4a:63:
c7:2e:0e:36:aa:f4:c5:3f:a3:2b:37:f8:94:fe:89:
43:0a:56:09:af:79:e1:48:17:66:4a:24:ad:6b:e8:
cc:71:ef:f7:d8:3a:b0:cb:97:e4:e4:60:3c:29:6f:
7f:35:4d:ff:21:bf:02:ce:94:46:97:09:d3:fa:c7:
6c:4f:20:cd:42:3d:d9:fd:ba:44:4f:d5:b6:b3:22:
72:37:00:f1:49:bb:9e:74:c2:83:9d:74:ca:a3:2c:
77:7a:84:fa:fb:37:b4:2f:12:ff:89:73:7b:89:b0:
17:88:f9:6c:da:f0:b5:da:1a:71:70:af:8b:73:23:
2c:e3:5b:8f:af:b5:a3:f7:25:29:46:bd:17:01:6e:
d9:9d:46:b5:9e:87:94:2a:de:fb:49:bc:5a:4c:f9:
95:57:b3:59:f6:22:85:c1:df:fe:29:3d:37:eb:f9:
c2:58:7f:3f:50:7f:33:7f:f2:ea:12:e8:6d:ea:ff:
12:47:88:98:21:bd:47:9d:26:24:f8:42:37:ee:b5:
37:bd:a9:1e:2f:01:45:0d:00:bf:14:99:e2:dc:49:
f3:75:37:3d:c9:d3:e4:62:7a:f5:e3:48:34:6f:60:
26:63:de:1e:02:11:72:1d:b6:fa:2c:57:61:59:d7:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:42:05:C3:EE:19:D8:98:36:6B:D0:08:3F:3D:18:D6:12:88:BE:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C442E06B8911F08E27BED3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0-154.202.68.255
Signature Algorithm: sha256WithRSAEncryption
73:d9:da:7a:a0:ef:18:18:60:3d:27:29:71:34:18:ef:08:da:
87:cc:4b:0b:ef:79:75:16:b9:5e:1e:b9:37:ba:06:bd:6a:c5:
5e:cf:c9:0e:c5:32:4b:8a:0b:6c:6e:c9:89:da:5f:66:a1:bf:
fc:c5:e9:2d:71:fc:eb:90:f3:b1:a8:4b:5d:c0:8c:30:72:a4:
5d:b6:9c:61:60:7b:a7:67:c9:fe:ce:e2:fc:84:64:19:b2:f9:
7c:c1:29:ae:75:04:1c:76:6a:86:a1:64:ea:b4:a6:66:cd:54:
a8:e4:c3:26:0f:ea:b8:7f:e8:d0:8a:b8:07:60:44:fc:70:4a:
90:bc:eb:31:30:b9:5e:6f:3f:0f:e3:d7:15:1e:2b:05:4b:6f:
51:ce:38:49:a1:59:e9:a4:31:33:ab:63:3d:61:17:bf:da:c7:
6f:bb:68:6a:c1:84:7a:ca:85:88:4a:8a:31:89:7b:1d:b0:94:
97:db:82:ed:95:dc:0c:de:62:52:42:b4:b5:2f:ce:fb:10:a0:
8a:f4:86:a5:c4:5e:42:66:d4:c5:63:56:c2:b5:93:3d:e9:e7:
2c:92:25:d2:9a:81:44:44:0d:fe:84:4b:e2:4f:d6:81:55:9f:
6c:52:68:5c:cc:14:91:9b:38:0f:ae:14:03:40:cc:d0:ea:8e:
37:4f:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:02 2025 by rpki-client