Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/A50DC96846C411F0942BA07ADAE4EC9C.roa
File: A50DC96846C411F0942BA07ADAE4EC9C.roa (raw, json)
Hash identifier: sHNAOfb/q+PcCzpw6rvPqasqMwLSMx1FINw08PTtxic=
Subject key identifier: 6B:8E:E0:7C:B8:2A:0A:23:09:E1:07:75:51:00:B6:B1:4E:FD:6F:BB
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D3C
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/A50DC96846C411F0942BA07ADAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:04:45 +0000
ROA not before: Tue 24 Jun 2025 13:04:40 +0000
ROA not after: Fri 18 Oct 2030 13:04:40 +0000
asID: 11845
IP address blocks: 196.3.164.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3388 (0xd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:04:40 2025 GMT
Not After : Oct 18 13:04:40 2030 GMT
Subject: CN=68497eed-f2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:97:61:46:aa:99:26:eb:62:eb:d1:7f:9a:
e6:ba:00:1e:01:a1:6e:2b:42:12:12:3d:b3:aa:fd:
0b:44:1c:d0:ea:6d:f1:03:d5:7a:b6:8d:c7:0c:c3:
14:3b:fa:a9:c1:aa:d3:06:30:d0:90:e1:84:fa:3d:
5c:cb:20:46:4b:e1:91:79:30:d3:47:f2:4d:bb:43:
96:a3:d4:47:3f:ae:d7:38:95:87:99:47:c0:95:ab:
72:32:a2:a1:bd:db:03:cf:e1:bf:fc:04:9d:b8:95:
f4:c0:a4:1a:80:18:a3:a1:b5:2e:e6:84:57:87:16:
09:22:4e:2a:a6:64:fe:6f:38:c2:49:01:dc:13:c2:
4f:ab:32:56:b0:bd:5b:e6:47:e7:c7:21:a4:0c:f9:
78:f6:cd:3c:61:65:0f:5f:0c:94:e2:01:9f:79:b4:
b8:b0:d2:13:01:b8:43:6e:60:00:c8:b3:90:af:88:
32:5b:6b:d5:2c:68:17:2f:fa:ff:60:c5:8b:56:4d:
e9:b1:09:4b:e4:44:07:df:9e:0f:f1:19:cc:07:c7:
78:97:9f:5d:2b:8f:26:63:9f:4d:f7:7b:d3:d3:13:
85:1d:a3:af:d5:e8:31:3b:59:cf:e0:47:42:32:cd:
69:1c:af:25:9a:04:13:f0:7e:c9:cc:3e:67:d2:af:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:E0:7C:B8:2A:0A:23:09:E1:07:75:51:00:B6:B1:4E:FD:6F:BB
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/A50DC96846C411F0942BA07ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.3.164.0/22
Signature Algorithm: sha256WithRSAEncryption
09:ce:36:cd:1a:3a:ea:e4:29:68:ff:c6:52:83:3f:84:2c:6b:
57:8f:1b:46:d9:6f:4b:1f:13:a3:7c:41:87:2a:35:b4:69:c1:
34:ca:b2:33:64:f7:39:87:90:cc:fb:19:0b:95:78:06:e2:14:
00:47:b5:ae:8d:5b:4e:39:2c:05:8e:58:05:56:58:bc:9d:a0:
91:a9:e1:95:6f:6c:27:c6:f2:5f:6e:a2:8f:d7:28:ad:32:a9:
50:27:c1:5e:18:5d:80:cb:46:75:06:f7:08:2b:0b:af:9c:b2:
49:bd:9b:1b:d8:e5:38:f3:79:72:12:63:fd:8e:20:bc:40:51:
1e:27:01:c8:e8:fb:fc:13:9a:09:93:c9:a8:a7:1e:98:a6:62:
e5:b5:3a:72:68:38:f9:ae:72:be:93:4c:b5:0c:f2:e8:11:a2:
c8:3e:3a:e8:0e:06:1e:97:c0:2e:0c:f7:3e:6a:12:4c:3f:31:
3e:7b:db:b6:59:36:52:e0:85:97:96:7e:b1:1c:18:e5:f4:9e:
9c:f9:28:0c:d4:c8:00:97:2d:99:04:cc:30:2f:88:d2:dd:61:
c2:d3:5d:ca:c9:b3:36:18:e1:40:65:ba:e6:b8:ef:f7:1d:87:
ed:30:1e:88:ee:3f:92:95:b7:9d:e3:92:53:7f:28:2e:0a:dd:
f8:5b:22:18
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yNTA2MjQxMzA0NDBaFw0zMDEwMTgxMzA0NDBaMBgxFjAU
BgNVBAMTDTY4NDk3ZWVkLWYyYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYYZdhRqqZJuti69F/mua6AB4BoW4rQhISPbOq/QtEHNDqbfED1Xq2jccM
wxQ7+qnBqtMGMNCQ4YT6PVzLIEZL4ZF5MNNH8k27Q5aj1Ec/rtc4lYeZR8CVq3Iy
oqG92wPP4b/8BJ24lfTApBqAGKOhtS7mhFeHFgkiTiqmZP5vOMJJAdwTwk+rMlaw
vVvmR+fHIaQM+Xj2zTxhZQ9fDJTiAZ95tLiw0hMBuENuYADIs5CviDJba9UsaBcv
+v9gxYtWTemxCUvkRAffng/xGcwHx3iXn10rjyZjn033e9PTE4Udo6/V6DE7Wc/g
R0IyzWkcryWaBBPwfsnMPmfSr2BrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUa47g
fLgqCiMJ4Qd1UQC2sU79b7swHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4
QUVBMjI4L0E1MERDOTY4NDZDNDExRjA5NDJCQTA3QURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALEA6QwDQYJKoZIhvcNAQEL
BQADggEBAAnONs0aOurkKWj/xlKDP4Qsa1ePG0bZb0sfE6N8QYcqNbRpwTTKsjNk
9zmHkMz7GQuVeAbiFABHta6NW045LAWOWAVWWLydoJGp4ZVvbCfG8l9uoo/XKK0y
qVAnwV4YXYDLRnUG9wgrC6+cskm9mxvY5TjzeXISY/2OILxAUR4nAcjo+/wTmgmT
yainHpimYuW1OnJoOPmucr6TTLUM8ugRosg+OugOBh6XwC4M9z5qEkw/MT5727ZZ
NlLghZeWfrEcGOX0npz5KAzUyACXLZkEzDAviNLdYcLTXcrJszYY4UBluua47/cd
h+0wHojuP5KVt53jklN/KC4K3fhbIhg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:28:44 2025 by rpki-client