Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/4EA8246E46C511F089D87F7DDAE4EC9C.roa
File: 4EA8246E46C511F089D87F7DDAE4EC9C.roa (raw, json)
Hash identifier: qjyPFtl59ffxyefqLmWJlRsBfN31sPgRtcOSrX+rkQE=
Subject key identifier: BC:50:26:14:52:89:04:35:63:7E:0B:FC:DD:AD:2D:32:9C:A2:48:1A
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D46
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/4EA8246E46C511F089D87F7DDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:09:29 +0000
ROA not before: Tue 24 Jun 2025 13:09:24 +0000
ROA not after: Fri 18 Oct 2030 13:09:24 +0000
asID: 11845
IP address blocks: 196.3.176.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3398 (0xd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:09:24 2025 GMT
Not After : Oct 18 13:09:24 2030 GMT
Subject: CN=68498009-e624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:b2:55:af:7e:af:7b:54:04:5a:a4:5c:42:
26:65:19:14:77:f2:49:b0:8e:d5:11:50:86:93:cc:
f2:87:6c:0e:bf:4a:37:2f:34:7b:e0:b9:12:55:60:
68:58:68:76:cb:0f:63:7a:4c:83:07:7f:a5:a6:08:
03:a2:41:d4:4b:62:b6:f0:b0:2b:b3:1b:0d:76:b9:
f6:bc:dd:af:9e:8d:21:7d:4b:e1:45:9a:32:73:a8:
c9:20:25:d2:8c:28:2b:10:14:8a:1d:e8:9e:57:3a:
29:eb:5c:e3:0d:96:7d:82:97:de:f4:33:37:4f:33:
62:f9:36:d7:bc:30:81:44:a9:7b:00:8c:1c:ed:a7:
e5:f7:e1:3c:8b:d7:b8:80:bb:a7:c5:8e:77:9d:0b:
4e:c9:74:6e:25:34:97:a8:fc:04:6d:5e:11:c2:2e:
49:df:bf:d1:bf:07:db:a4:e2:73:40:2a:95:d3:b7:
71:6b:3b:dc:ab:f5:c4:b8:99:99:60:ee:8f:78:61:
52:70:0d:1d:7e:c8:39:04:b2:e3:04:8a:94:f9:77:
79:89:06:29:97:54:25:68:5d:a6:bb:6b:b4:f2:ce:
a0:0e:a5:91:20:8d:8e:16:58:b5:df:b6:64:9f:13:
68:28:b3:29:de:0e:36:7f:8b:ca:fd:d7:96:23:4d:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:50:26:14:52:89:04:35:63:7E:0B:FC:DD:AD:2D:32:9C:A2:48:1A
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/4EA8246E46C511F089D87F7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.3.176.0/22
Signature Algorithm: sha256WithRSAEncryption
38:30:b6:15:87:83:46:30:ca:da:b5:e9:85:2c:bd:14:9e:0d:
0e:aa:d8:61:6f:8e:13:b8:07:2c:96:a2:9a:9a:f6:25:6b:c2:
16:17:b4:54:12:bb:a8:48:be:84:89:4d:3a:9d:f9:20:5b:53:
86:35:9b:1b:78:45:08:cd:f4:bd:06:ec:a6:46:be:9d:f7:d8:
e6:89:61:d3:fd:9d:ea:4d:aa:b7:83:61:57:ff:4f:92:b8:72:
c7:7b:22:4a:da:d6:8a:70:e6:3d:c5:33:7a:ce:30:8e:3d:e5:
78:63:aa:e6:59:e4:e6:15:b4:93:a2:95:0f:d2:9a:9a:10:b8:
2c:0a:6a:1b:3d:aa:73:73:e6:7e:35:34:5f:1d:00:fb:ad:0a:
96:26:ed:0b:d8:32:3f:c0:37:09:1a:d4:01:dc:d9:32:a0:1e:
dd:c2:94:95:48:78:cf:56:16:b6:75:7a:7f:27:68:2d:f9:82:
82:44:6f:b4:55:a4:d6:e3:2a:0f:f8:e8:95:55:b8:40:27:dd:
57:2c:0d:5c:79:09:14:37:cc:36:40:13:9b:fe:3e:78:c7:bf:
45:8d:a3:1d:e5:aa:06:d3:ca:5b:2c:28:ea:e6:9c:9e:ab:6c:
b7:46:1c:8c:65:57:9f:f1:5f:01:80:e2:a2:4e:d3:c3:42:32:
a7:d7:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:23 2025 by rpki-client