Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/3FFE158246C411F0B4746278DAE4EC9C.roa
File: 3FFE158246C411F0B4746278DAE4EC9C.roa (raw, json)
Hash identifier: JSi407PI78anMYfv+AOzcoeUknjbbweW9RVZYH6HG+Q=
Subject key identifier: C4:F4:83:C9:DD:FA:7A:A0:8F:84:69:FE:BE:07:4A:EC:79:FF:45:45
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D38
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/3FFE158246C411F0B4746278DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:01:55 +0000
ROA not before: Tue 24 Jun 2025 13:01:49 +0000
ROA not after: Fri 18 Oct 2030 13:01:49 +0000
asID: 11845
IP address blocks: 196.41.192.0/19 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:01:49 2025 GMT
Not After : Oct 18 13:01:49 2030 GMT
Subject: CN=68497e43-8013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:2b:c8:c0:a0:8d:f4:57:48:53:52:f5:8d:
81:7e:4c:f9:4f:16:4c:ee:41:92:f9:60:55:49:23:
88:79:4b:43:db:0a:95:c2:cf:6d:1f:f6:1a:8f:59:
09:fa:83:cf:b1:32:34:7d:8f:bd:e7:fd:41:5e:89:
40:a5:94:53:a7:fa:27:3e:57:d8:d7:80:50:b9:52:
a0:d1:11:cb:01:6d:97:14:46:b2:ce:8d:94:34:1b:
6b:d0:65:fc:f0:44:b6:a6:c2:71:d2:d7:50:d9:c4:
ac:b7:3d:a8:a0:22:77:08:6f:25:81:e1:32:af:d0:
07:28:8c:cc:f7:fd:2d:44:7d:cd:1d:0d:82:69:83:
5a:23:40:82:96:4f:dd:2d:17:50:65:6c:99:26:ac:
e4:e9:02:42:02:af:08:0c:7b:2c:52:4d:55:20:ac:
0e:33:67:d6:4c:2b:69:20:b3:50:e9:96:fb:34:25:
07:f2:92:03:f0:6d:0b:e9:a8:31:b7:87:e4:61:32:
b2:03:8a:18:75:47:f4:d4:0c:f6:b5:cc:1e:70:a4:
31:c7:70:b4:4c:28:4e:9f:26:42:b1:eb:2f:e4:81:
5e:18:76:98:35:e7:81:1b:47:5c:25:f6:d5:ad:5f:
50:f3:d5:e2:52:94:cb:6e:5a:da:a8:b3:ec:21:a5:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F4:83:C9:DD:FA:7A:A0:8F:84:69:FE:BE:07:4A:EC:79:FF:45:45
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/3FFE158246C411F0B4746278DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.41.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:1b:fb:f0:4f:8b:2d:41:77:07:75:e3:2f:51:cb:32:6e:94:
07:e8:df:ae:f3:0c:4d:fa:95:4f:1d:c8:77:2a:26:73:dd:f3:
d2:c6:3b:93:d4:67:6e:23:b7:72:09:52:e9:7b:15:39:a2:1e:
54:dc:b2:30:f8:a4:d8:2a:1a:a3:42:ce:59:91:a2:5a:e7:66:
58:40:24:92:22:16:89:eb:27:20:1d:52:9d:41:80:ed:2f:c6:
33:a0:5b:68:d7:d3:c1:a5:79:66:34:70:eb:0f:90:75:15:03:
0e:d5:69:ea:b4:5c:ec:18:8e:32:0a:8d:31:d5:1e:a5:ff:14:
f5:e4:b1:0a:1d:c0:e2:af:36:3e:41:89:a1:9c:7e:47:28:08:
1f:c0:18:97:fd:e7:2b:ad:1e:95:d4:a3:66:4e:fe:8b:49:cc:
ff:92:fc:ea:01:23:a0:74:97:96:38:c4:3e:ca:88:c6:ca:71:
24:61:14:02:fb:79:e0:70:d1:65:35:1e:84:f3:3f:1d:38:1f:
38:e0:8a:b0:99:27:d7:54:db:af:08:35:3b:20:f7:24:77:0c:
a5:46:d7:70:63:af:1d:37:e7:00:ff:1e:0a:5f:a5:57:42:ec:
fb:7d:d0:74:32:20:49:41:cf:3d:3b:41:58:2f:44:48:ed:9c:
38:5b:12:72
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yNTA2MjQxMzAxNDlaFw0zMDEwMTgxMzAxNDlaMBgxFjAU
BgNVBAMTDTY4NDk3ZTQzLTgwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAMivIwKCN9FdIU1L1jYF+TPlPFkzuQZL5YFVJI4h5S0PbCpXCz20f9hqP
WQn6g8+xMjR9j73n/UFeiUCllFOn+ic+V9jXgFC5UqDREcsBbZcURrLOjZQ0G2vQ
ZfzwRLamwnHS11DZxKy3PaigIncIbyWB4TKv0AcojMz3/S1Efc0dDYJpg1ojQIKW
T90tF1BlbJkmrOTpAkICrwgMeyxSTVUgrA4zZ9ZMK2kgs1Dplvs0JQfykgPwbQvp
qDG3h+RhMrIDihh1R/TUDPa1zB5wpDHHcLRMKE6fJkKx6y/kgV4Ydpg154EbR1wl
9tWtX1Dz1eJSlMtuWtqos+whpbbxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxPSD
yd36eqCPhGn+vgdK7Hn/RUUwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4LzNGRkUxNTgyNDZDNDExRjBCNDc0NjI3OERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXEKcAwDQYJKoZIhvcNAQEL
BQADggEBACwb+/BPiy1Bdwd14y9RyzJulAfo367zDE36lU8dyHcqJnPd89LGO5PU
Z24jt3IJUul7FTmiHlTcsjD4pNgqGqNCzlmRolrnZlhAJJIiFonrJyAdUp1BgO0v
xjOgW2jX08GleWY0cOsPkHUVAw7Vaeq0XOwYjjIKjTHVHqX/FPXksQodwOKvNj5B
iaGcfkcoCB/AGJf95yutHpXUo2ZO/otJzP+S/OoBI6B0l5Y4xD7KiMbKcSRhFAL7
eeBw0WU1HoTzPx04HzjgirCZJ9dU268INTsg9yR3DKVG13Bjrx035wD/HgpfpVdC
7Pt90HQyIElBzz07QVgvREjtnDhbEnI=
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:37:14 2025 by rpki-client