Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/7A55532C46C311F0A855E5F0DAE4EC9C.roa
File: 7A55532C46C311F0A855E5F0DAE4EC9C.roa (raw, json)
Hash identifier: rHdSgUS+SlwggCoWJZgjF6rhTUxpB3fhFGFetcNmcsE=
Subject key identifier: B3:DC:2F:57:8F:34:10:16:DA:D1:B2:6F:CE:A1:CD:08:D4:33:25:D2
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D2E
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/7A55532C46C311F0A855E5F0DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 12:56:24 +0000
ROA not before: Tue 24 Jun 2025 12:56:17 +0000
ROA not after: Fri 18 Oct 2030 12:56:17 +0000
asID: 11845
IP address blocks: 102.220.208.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 12:56:17 2025 GMT
Not After : Oct 18 12:56:17 2030 GMT
Subject: CN=68497cf8-59f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:d6:0c:4e:b4:5e:db:4e:ee:4c:c2:2e:1b:
bd:a8:6f:ba:74:f3:bb:34:43:15:ef:04:22:44:d8:
9e:86:d9:bd:7c:b6:6b:76:93:21:0e:6a:79:2e:a9:
ff:dd:57:a6:3b:0c:18:6c:82:bb:4a:b2:bc:a5:56:
79:11:e3:3a:e1:fc:1b:7c:58:f7:54:32:e1:f6:6b:
77:6e:57:21:7e:b5:bb:0b:e5:ef:ab:22:d1:3c:f9:
e0:5e:2a:81:d2:27:ff:cf:9b:99:c4:2a:73:d7:53:
9b:24:0e:97:f4:7f:95:da:03:fb:d2:2e:42:d5:2c:
71:7e:e1:68:16:0e:bf:13:ff:48:8c:de:31:69:e1:
58:e2:77:e8:d7:03:15:81:8d:f3:1b:0b:6a:35:93:
20:38:f6:79:f2:53:69:37:09:51:40:1c:d6:c4:b8:
ba:47:ec:0c:18:63:27:18:2c:17:3b:04:9a:62:a1:
28:3c:c1:22:e6:ab:f3:d3:4a:96:ef:ae:34:8c:05:
3c:72:7d:02:79:ee:fb:48:d1:60:7a:07:8d:f4:61:
19:37:9f:fb:47:9e:c7:b6:69:26:ed:86:62:76:2e:
9e:1b:27:d3:a0:9c:15:32:b9:80:30:29:7f:08:09:
ef:79:4f:c4:75:a7:0e:69:fe:67:77:1b:40:1c:22:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DC:2F:57:8F:34:10:16:DA:D1:B2:6F:CE:A1:CD:08:D4:33:25:D2
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/7A55532C46C311F0A855E5F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.208.0/22
Signature Algorithm: sha256WithRSAEncryption
16:59:87:f0:38:53:48:f7:49:cc:23:ad:18:23:95:9a:b8:1b:
41:f8:ec:9b:81:07:43:19:d9:2e:05:ab:2d:4b:1c:19:68:34:
4f:5b:6e:dc:be:c5:ab:ed:c5:2d:4f:8a:01:19:ed:c8:68:bf:
54:f4:5e:c1:43:08:19:3f:d4:d6:33:9d:4c:c2:95:2e:94:d2:
79:b9:0d:9f:32:98:72:e9:07:69:13:46:21:a0:a5:29:72:21:
d0:49:b4:8d:f4:0d:8f:0a:26:a2:29:35:8e:a9:f8:36:da:1b:
4f:2d:9b:d1:26:a8:eb:68:74:d2:66:a0:04:41:af:00:9f:31:
69:23:9e:d8:ca:d4:bd:0e:c0:61:d7:2c:5d:3a:51:45:c4:71:
31:f4:23:9e:1f:fd:fe:67:99:40:39:96:d7:97:b8:78:41:f9:
a4:bf:0c:47:f1:d1:78:f3:a5:ec:09:1c:15:e5:ad:fb:6b:eb:
ee:79:d1:bb:10:00:86:90:ae:cb:12:99:17:ac:ea:cb:60:32:
e3:a5:f5:52:7a:e5:55:2d:47:32:9b:f6:10:72:5c:ff:80:14:
a7:b1:16:cc:e7:c3:a2:49:e5:8d:5e:dc:c9:98:f7:f6:f0:17:
98:c6:dd:0e:dc:35:8b:3f:13:58:90:fb:fc:8e:e0:1f:4c:e2:
81:39:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:05:06 2025 by rpki-client