Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/0D7A512846C611F0B4EAD183DAE4EC9C.roa
File: 0D7A512846C611F0B4EAD183DAE4EC9C.roa (raw, json)
Hash identifier: +ER0d9RIe4bpJeWakTcMzMs/D2X/K+RHUk8EHXUsSzI=
Subject key identifier: 45:22:B5:A9:9A:BB:81:EA:C2:33:87:06:06:17:C4:6C:87:34:4B:DC
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D4E
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/0D7A512846C611F0B4EAD183DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:14:49 +0000
ROA not before: Tue 24 Jun 2025 13:14:45 +0000
ROA not after: Fri 18 Oct 2030 13:14:45 +0000
asID: 206283
IP address blocks: 41.193.240.0/23 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:14:45 2025 GMT
Not After : Oct 18 13:14:45 2030 GMT
Subject: CN=68498149-9f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:b5:0d:45:c2:50:18:0b:46:94:5c:2d:a7:
b2:db:d8:6c:ef:a3:4c:b5:b0:ad:77:07:29:42:a9:
bd:ce:2b:eb:6b:f1:5b:5c:7d:23:51:ec:a1:88:d1:
21:fd:1d:90:79:0a:b0:12:56:cd:c7:03:2c:62:7b:
0d:bf:a5:56:06:e2:37:2f:8a:e0:ef:6b:04:bb:23:
98:a2:93:c5:37:79:87:4d:d4:4d:95:44:5e:c6:a2:
93:ed:27:db:22:10:c2:5d:c0:7b:61:06:48:f8:32:
9e:e8:7d:e5:49:b1:3e:76:a1:66:b1:41:bb:67:2e:
80:dd:ac:63:57:a0:96:7f:64:88:81:c9:4e:43:84:
c2:5d:38:a3:2b:88:7a:e9:d4:0c:2c:03:62:b7:9e:
62:bf:07:e2:8c:9b:5d:01:dc:07:bf:b2:69:ff:f2:
78:69:ea:d3:27:5a:e4:35:dd:56:35:4b:3a:49:3a:
e8:e9:a8:64:3a:3c:36:b5:cc:43:bd:b7:ef:c3:fc:
55:86:1a:87:7f:89:e9:8f:04:5d:a8:82:f9:47:a3:
d6:0e:f3:3c:3a:6e:9f:a3:65:aa:92:51:9f:8b:25:
ba:0c:89:11:e9:30:af:42:f9:87:44:51:ec:a4:3b:
b9:61:7a:42:85:40:f7:21:d4:94:e4:af:45:8a:dc:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:22:B5:A9:9A:BB:81:EA:C2:33:87:06:06:17:C4:6C:87:34:4B:DC
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/0D7A512846C611F0B4EAD183DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.193.240.0/23
Signature Algorithm: sha256WithRSAEncryption
20:37:69:60:5d:1c:c7:24:61:45:56:ef:08:68:9a:dc:c4:c0:
e4:e3:40:51:bc:64:1e:98:3e:63:6a:14:13:10:62:b1:c0:70:
d9:ac:da:3f:8b:58:a3:4d:e9:17:8c:3d:27:9b:55:b4:2a:4c:
e6:a9:b6:63:74:b1:64:fa:53:b3:90:34:30:af:e2:c9:92:ef:
e9:d5:88:7c:56:76:87:6e:b0:ad:7e:ee:53:28:12:0f:a1:21:
27:d1:a7:4e:e2:f4:5a:39:e7:38:7b:f4:bb:d8:70:7f:8e:c7:
5e:3f:9d:c1:ba:3b:49:8b:c7:9b:64:94:de:81:f3:05:2b:0d:
f9:da:b1:a7:c0:4a:a3:65:75:40:85:fc:fe:09:18:5f:93:45:
75:fd:68:f4:07:5f:46:12:5c:fc:88:44:63:ec:12:57:d3:9c:
98:51:fb:56:2b:f0:66:d7:32:05:80:a5:6a:89:4b:42:82:32:
5a:33:6d:e7:ea:7a:0e:91:ed:02:90:9e:f9:77:21:31:f7:01:
13:e8:73:be:a0:56:95:12:30:37:c0:98:ac:fd:8d:3b:77:b1:
bf:3b:2c:89:13:be:a4:ec:ee:23:c1:c5:af:dc:9b:42:98:34:
99:a5:11:a7:48:40:da:fe:54:8c:97:79:c4:f7:c7:b6:c0:d3:
b4:5c:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:30:19 2025 by rpki-client