Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/1B68AA0C46C411F0AE592FF5DAE4EC9C.roa
File: 1B68AA0C46C411F0AE592FF5DAE4EC9C.roa (raw, json)
Hash identifier: QPJ/pgy5MDLWjEUGppoWDCqEirKoVOtAK5W3WyI3dAw=
Subject key identifier: CE:31:25:D8:8D:CA:4A:D8:39:BD:51:75:BE:30:82:B5:6D:96:D1:71
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D36
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/1B68AA0C46C411F0AE592FF5DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:00:54 +0000
ROA not before: Tue 24 Jun 2025 13:00:49 +0000
ROA not after: Fri 18 Oct 2030 13:00:49 +0000
asID: 11845
IP address blocks: 196.22.224.0/20 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:00:49 2025 GMT
Not After : Oct 18 13:00:49 2030 GMT
Subject: CN=68497e06-a615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:80:d4:4e:b4:28:ec:76:8a:bf:5b:74:c9:
5d:ef:81:f8:ef:f6:51:38:55:e4:8a:e9:fc:1c:e5:
2f:c8:29:5b:74:40:eb:86:90:ff:db:fc:5a:81:59:
a2:00:bf:93:0f:28:dd:b3:a4:01:f5:a1:e1:51:be:
d3:ba:47:47:bd:38:5d:53:7c:6c:2b:e0:26:c2:e9:
25:ae:a3:47:d1:10:11:a3:2c:be:68:b2:ac:27:f8:
51:aa:59:0a:4d:eb:c2:b2:5c:4b:0e:0b:a0:65:d1:
f4:c9:b4:29:9c:e3:a4:ab:0e:76:58:57:ae:f8:80:
d3:86:0e:8b:bb:a1:0d:2a:26:59:2d:04:f8:d5:44:
c4:ce:be:78:c8:b2:e1:0a:da:0e:cf:8f:fd:52:61:
18:ce:5c:3d:d8:3d:5a:84:3c:36:da:89:a5:31:97:
f0:45:64:9c:93:77:e7:de:e1:16:0c:dc:b9:c7:41:
ae:b3:a6:07:56:3a:e3:93:7e:32:6f:ec:c8:25:5b:
1a:62:8a:3e:ca:49:8a:2e:05:8f:56:7c:d6:c9:24:
44:4a:6c:31:56:d0:ba:10:05:5b:87:90:6f:cd:1d:
08:b4:3d:be:34:80:96:10:49:e1:a5:2d:89:0f:94:
bc:61:1e:23:a8:bf:71:16:78:eb:94:94:65:d6:13:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:31:25:D8:8D:CA:4A:D8:39:BD:51:75:BE:30:82:B5:6D:96:D1:71
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/1B68AA0C46C411F0AE592FF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.22.224.0/20
Signature Algorithm: sha256WithRSAEncryption
44:1a:6e:99:21:29:2c:12:b1:f1:04:40:0b:2b:df:c2:44:66:
af:0c:db:da:88:20:68:e8:63:3d:3a:a9:8f:1f:1d:47:ac:db:
84:a5:e4:07:0c:d7:4e:a1:1e:8d:9b:b8:33:9e:94:db:41:b3:
7b:52:62:84:39:b9:26:a1:e3:64:95:1f:1c:f8:e6:55:22:a5:
4b:f2:45:c2:5c:b2:ca:fb:9d:1c:a7:8e:ba:ba:17:56:5c:fb:
75:f3:91:58:d8:d5:f3:f6:a3:06:62:ad:36:50:49:87:0a:4f:
1a:ca:a2:c8:31:17:c1:26:63:93:44:27:c7:38:57:6b:2c:33:
41:d5:cc:14:61:2b:51:fb:39:e5:21:6a:4f:cd:28:87:1f:06:
9f:67:4a:4b:a9:15:0a:1d:02:67:37:38:66:78:87:ab:2b:a5:
0f:7f:ec:d5:53:ed:7b:70:98:5a:03:44:58:b8:3b:31:98:0c:
07:3b:2f:c2:71:7b:88:f6:1a:ff:63:13:d9:4e:a9:a8:58:5c:
dd:ff:98:d2:95:a4:be:ca:c9:2a:48:2b:df:53:8e:ef:de:bd:
a5:05:08:f3:54:2e:6d:83:b6:03:a7:ba:d5:cf:2f:ce:e7:1c:
05:4c:37:aa:5d:bb:0f:d9:d6:70:23:1f:a3:61:9f:07:57:0d:
f3:0b:84:1c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDTYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yNTA2MjQxMzAwNDlaFw0zMDEwMTgxMzAwNDlaMBgxFjAU
BgNVBAMTDTY4NDk3ZTA2LWE2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC054DUTrQo7HaKv1t0yV3vgfjv9lE4VeSK6fwc5S/IKVt0QOuGkP/b/FqB
WaIAv5MPKN2zpAH1oeFRvtO6R0e9OF1TfGwr4CbC6SWuo0fREBGjLL5osqwn+FGq
WQpN68KyXEsOC6Bl0fTJtCmc46SrDnZYV674gNOGDou7oQ0qJlktBPjVRMTOvnjI
suEK2g7Pj/1SYRjOXD3YPVqEPDbaiaUxl/BFZJyTd+fe4RYM3LnHQa6zpgdWOuOT
fjJv7MglWxpiij7KSYouBY9WfNbJJERKbDFW0LoQBVuHkG/NHQi0Pb40gJYQSeGl
LYkPlLxhHiOov3EWeOuUlGXWE/sXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzjEl
2I3KStg5vVF1vjCCtW2W0XEwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4LzFCNjhBQTBDNDZDNDExRjBBRTU5MkZGNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATEFuAwDQYJKoZIhvcNAQEL
BQADggEBAEQabpkhKSwSsfEEQAsr38JEZq8M29qIIGjoYz06qY8fHUes24Sl5AcM
106hHo2buDOelNtBs3tSYoQ5uSah42SVHxz45lUipUvyRcJcssr7nRynjrq6F1Zc
+3XzkVjY1fP2owZirTZQSYcKTxrKosgxF8EmY5NEJ8c4V2ssM0HVzBRhK1H7OeUh
ak/NKIcfBp9nSkupFQodAmc3OGZ4h6srpQ9/7NVT7XtwmFoDRFi4OzGYDAc7L8Jx
e4j2Gv9jE9lOqahYXN3/mNKVpL7KySpIK99Tju/evaUFCPNULm2DtgOnutXPL87n
HAVMN6pduw/Z1nAjH6NhnwdXDfMLhBw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:07:33 2025 by rpki-client