Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/ADF5650846C511F0973FEB81DAE4EC9C.roa
File: ADF5650846C511F0973FEB81DAE4EC9C.roa (raw, json)
Hash identifier: 7CYfsacbUXhjLqOsEIQOYe+QrprQCfUiJVwPCRh/kdM=
Subject key identifier: 47:07:9D:F7:48:EE:58:C4:2B:48:F5:09:8C:27:DC:3D:3F:DE:B4:31
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D4A
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/ADF5650846C511F0973FEB81DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:12:09 +0000
ROA not before: Tue 24 Jun 2025 13:12:01 +0000
ROA not after: Fri 18 Oct 2030 13:12:01 +0000
asID: 29286
IP address blocks: 41.193.115.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:12:01 2025 GMT
Not After : Oct 18 13:12:01 2030 GMT
Subject: CN=684980a9-fdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:40:84:24:3a:05:6d:57:4d:83:6a:cb:b3:
7a:e4:a7:b6:e4:fb:51:71:89:ad:76:34:86:de:ac:
ab:61:29:12:1c:b9:9e:f9:ef:60:b9:50:48:c4:58:
40:fb:fb:6e:21:30:36:30:91:dd:0a:16:55:14:fc:
01:cb:6d:b6:5f:c7:c9:ee:13:47:a8:f2:98:73:0c:
23:a5:ce:df:80:fa:e9:73:68:3a:51:a9:96:5b:9c:
3c:d7:ae:74:9e:80:84:dc:bd:a2:ad:74:74:50:53:
12:e3:fc:20:11:22:2a:34:8b:ac:f5:55:1a:96:a0:
d1:f1:e8:58:02:db:96:e5:52:ba:9f:b6:9b:ce:7a:
9b:5c:eb:88:dd:91:43:32:d0:eb:87:31:68:7b:22:
71:bf:42:ba:d3:9d:50:0f:a1:94:0b:b0:11:4a:7a:
47:8c:e7:63:a2:0e:2b:e1:50:cb:41:eb:b2:33:48:
d4:9e:03:7e:89:85:17:ed:cf:cf:41:81:3c:eb:88:
8e:c9:5a:3e:ea:92:f8:0f:ca:29:1a:79:3d:d0:ad:
f5:91:83:8d:60:c9:e1:90:06:b9:d3:39:b6:91:58:
24:4c:47:d9:ff:e9:0f:1a:60:22:86:bd:a8:8c:43:
34:3b:8f:7e:f5:be:1b:8b:d5:0c:64:e3:64:d6:6d:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:9D:F7:48:EE:58:C4:2B:48:F5:09:8C:27:DC:3D:3F:DE:B4:31
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/ADF5650846C511F0973FEB81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.193.115.0/24
Signature Algorithm: sha256WithRSAEncryption
40:84:2a:b7:42:e8:94:ab:c6:02:ed:27:21:9a:c4:b1:20:77:
95:a0:4d:92:ae:7a:fa:9d:1f:ea:95:2f:de:0d:ac:97:16:29:
c6:42:24:83:3e:f3:2e:20:93:a9:c9:9f:1d:3c:c4:60:65:8f:
38:bd:0f:48:69:33:1d:3a:12:01:ba:ab:0d:30:bf:70:c4:aa:
ce:bd:b3:75:bb:02:0c:5e:3d:f8:8e:58:df:fc:26:45:d1:a1:
5c:14:7a:05:8f:48:04:a0:59:84:01:38:a3:0e:68:b2:e3:cb:
b5:36:2b:98:3b:03:71:4e:3e:70:b1:d6:9d:91:dc:e3:ab:54:
a1:1c:6e:b7:cb:d7:a0:3c:ef:ec:3f:76:1a:34:43:ce:40:d6:
88:06:eb:aa:22:ae:fd:b5:5d:e5:55:8f:51:3d:f4:44:d2:e5:
59:ea:52:ae:1c:de:e5:c9:4f:7c:e4:9b:4a:9e:30:d9:3f:3b:
db:c3:4b:10:22:aa:cd:5a:b1:56:2c:4c:eb:a4:ee:92:a3:aa:
6a:61:5c:4d:6c:22:4a:bc:c6:1b:15:a1:8a:b4:b7:9e:08:24:
c5:53:80:a4:a2:89:2d:ec:9e:7d:9a:18:8b:d1:c6:f8:b2:d9:
0e:07:b3:28:c3:34:1e:4d:1e:c4:b8:1d:55:24:49:4d:1b:f0:
0c:7a:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:59:40 2025 by rpki-client