Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9E90AA03D5411F0A4173DA1DAE4EC9C.roa
File: C9E90AA03D5411F0A4173DA1DAE4EC9C.roa (raw, json)
Hash identifier: ijle4p0xHhQCV8OrZQCy5FhShyg8UZDJpQ5lzFcxgPE=
Subject key identifier: 3C:70:FC:3F:05:E8:23:63:E1:E9:5A:C8:CD:2B:6C:A1:24:AF:64:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9E90AA03D5411F0A4173DA1DAE4EC9C.roa
Signing time: Fri 30 May 2025 12:51:23 +0000
ROA not before: Fri 30 May 2025 12:51:18 +0000
ROA not after: Mon 16 Jun 2025 12:51:18 +0000
asID: 9465
IP address blocks: 154.212.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99287 (0x183d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 12:51:18 2025 GMT
Not After : Jun 16 12:51:18 2025 GMT
Subject: CN=6839a9ca-d749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:34:e5:ca:45:ea:96:52:a2:77:3a:b4:73:
72:e8:51:ae:86:c5:08:6d:d0:e7:a3:0e:44:67:4c:
c6:8c:ad:a9:7a:5f:7c:e3:92:d8:17:51:38:78:b4:
d5:76:94:f3:24:66:dc:19:27:39:92:98:b8:ba:47:
10:db:b6:c1:a0:fc:00:9d:d3:71:ce:31:2e:19:ac:
eb:1d:91:62:c9:b0:d6:f1:6c:36:d4:28:cb:30:91:
eb:41:c4:99:7d:77:83:fe:0a:92:dd:61:46:3d:83:
48:33:78:14:23:82:35:8a:00:b0:37:66:69:5f:f7:
e3:34:36:55:2d:b6:1d:96:da:6f:98:7e:dc:43:f2:
c7:12:ff:3e:fc:8c:7e:fc:d5:0a:df:04:05:7a:59:
95:a5:52:5f:6e:23:63:71:08:49:e3:94:ec:79:d1:
3e:c8:e5:be:1f:e1:fd:9a:69:83:3c:b0:9a:bf:36:
c3:61:f0:2d:74:9c:20:30:ee:cf:af:00:b5:63:69:
ac:e7:c2:84:76:3a:71:01:3d:1f:17:2f:99:20:e6:
9a:05:80:b0:1b:5c:6d:0d:fc:08:55:0b:78:d1:cb:
fd:aa:42:63:fc:6e:a7:25:b7:01:c6:99:63:57:11:
4e:7b:1c:7e:49:dd:c2:4c:4f:a7:70:f4:39:c7:98:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:FC:3F:05:E8:23:63:E1:E9:5A:C8:CD:2B:6C:A1:24:AF:64:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9E90AA03D5411F0A4173DA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f5:72:16:a0:3b:cc:48:83:f6:9a:99:f8:9d:37:ee:4d:ca:
65:45:3d:b8:62:78:3b:d5:39:f1:b4:9d:55:97:df:2f:22:fa:
ae:6c:72:4f:70:59:0c:f1:0b:ee:f8:dd:43:f3:57:28:40:17:
74:fa:de:d2:a0:1f:f9:49:30:89:37:9b:23:29:ab:96:0c:b5:
f0:e8:96:ea:70:83:b0:03:95:98:c6:45:cb:97:0e:e6:2b:24:
6b:97:bb:31:79:96:4e:95:9e:7b:0e:24:bc:aa:87:25:9c:41:
91:c6:8c:77:14:6b:f3:5e:90:08:e3:c3:3a:07:05:8b:bb:7c:
57:f6:be:00:07:fc:75:ce:c7:40:c7:f9:b6:15:a8:03:4b:dd:
56:43:46:f7:44:09:50:b1:b4:4e:92:0c:64:7b:84:a1:2a:47:
7a:b1:24:9e:ed:98:16:06:eb:bc:48:b5:28:e2:a6:cd:3b:a3:
03:f9:f7:64:d1:5a:2d:f3:fd:71:67:cc:17:78:ec:af:a9:a2:
ec:92:ce:67:c5:5a:61:c5:c0:de:f4:34:1d:47:07:c3:78:b6:
ed:63:e5:da:fc:bc:1c:84:d8:95:d7:be:25:f3:26:96:7b:90:
0f:db:7f:00:86:12:77:6c:d3:64:30:42:5d:ca:2a:2d:2d:f5:
c8:11:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:31:39 2025 by rpki-client