Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/B1D3717646C311F0BC7CC5F2DAE4EC9C.roa
File: B1D3717646C311F0BC7CC5F2DAE4EC9C.roa (raw, json)
Hash identifier: 9gcYwTjOWCFIZzi9rrNFrBl+xybAESXQxu1TkihsHTc=
Subject key identifier: 8A:B2:BE:F2:C7:D9:FE:B4:39:15:02:D5:DE:6D:E4:68:AC:66:58:E8
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D30
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/B1D3717646C311F0BC7CC5F2DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 12:57:57 +0000
ROA not before: Tue 24 Jun 2025 12:57:52 +0000
ROA not after: Fri 18 Oct 2030 12:57:52 +0000
asID: 11845
IP address blocks: 102.39.0.0/16 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3376 (0xd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 12:57:52 2025 GMT
Not After : Oct 18 12:57:52 2030 GMT
Subject: CN=68497d55-04d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:69:eb:b3:6d:06:ee:b1:d3:00:25:3d:42:
d7:c6:22:4d:2e:ec:fc:9c:f4:40:4b:04:05:4d:51:
d4:92:d8:75:08:ed:f4:c5:af:9b:d3:7a:fd:16:32:
33:fd:d2:80:76:c3:18:ce:eb:f3:a7:9a:97:10:24:
50:fc:c9:78:7c:65:21:e4:a2:9d:9b:c2:14:1c:45:
35:44:f8:82:f0:62:1d:54:fe:a4:00:cb:85:73:a2:
1d:20:df:df:c9:36:9c:7a:48:48:95:b3:90:bb:b5:
20:b2:a9:09:44:15:bf:79:40:1a:34:ed:18:25:82:
f0:1c:30:bc:24:d8:e2:32:68:71:93:72:96:ed:53:
ba:e5:c0:c3:2c:1d:7a:52:d7:78:82:0d:0a:15:86:
75:54:0c:20:d5:83:a3:2c:e1:88:05:3d:07:c3:c7:
93:f3:77:1a:34:20:74:35:a5:45:b4:30:1a:eb:4d:
80:9c:9c:b5:41:ff:96:e9:07:f4:33:e0:26:2e:58:
bb:40:44:af:a2:43:24:7b:a8:9c:cb:c0:75:2d:8c:
cf:7c:46:55:f2:4a:8e:70:fe:eb:34:b8:ed:b1:ac:
1f:b8:5a:ac:5f:8a:c2:d9:ef:58:ef:8d:9a:89:e9:
e0:b7:bb:dd:ad:7b:13:1f:b0:75:a0:47:4f:1f:92:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:BE:F2:C7:D9:FE:B4:39:15:02:D5:DE:6D:E4:68:AC:66:58:E8
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/B1D3717646C311F0BC7CC5F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.39.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:0d:08:23:5b:03:c5:c3:70:41:a4:10:a9:66:0e:cb:64:21:
53:98:28:1e:3c:74:49:a0:ef:7c:43:ff:cf:aa:83:bd:16:4d:
d6:61:25:b2:68:84:ef:ca:32:2c:e2:f3:5c:11:9e:88:62:d3:
8e:64:41:2a:62:bc:50:20:30:cb:e7:f9:54:64:db:9d:b3:d1:
f1:a9:b0:c9:99:92:6a:df:0f:b4:d4:66:1a:51:99:bc:76:64:
da:8c:14:92:6e:ce:7f:f3:9f:a2:35:53:7e:7e:ab:2a:b5:31:
69:0f:1a:86:24:30:d1:a3:ec:d9:e1:c4:b3:d2:e2:a7:98:df:
e5:91:d0:a3:2f:ef:e0:0d:4d:a1:a8:44:08:04:69:c5:55:31:
7a:3e:fd:61:8c:90:5b:8b:dc:b1:df:91:5c:c9:95:93:f9:e9:
f8:45:2c:ae:67:60:25:8a:8d:da:56:71:5a:8e:af:ed:71:57:
08:f8:c6:28:c3:85:ab:49:8c:80:be:1a:b1:46:d8:81:af:8a:
fb:2e:6d:98:07:56:69:5d:91:ba:a0:07:5c:ed:be:84:2a:6d:
73:c8:e4:a1:16:47:e2:eb:e3:af:c0:b9:20:1f:99:50:ef:8c:
c2:62:e8:28:c9:81:af:2b:38:bf:55:4a:ab:01:5c:99:33:60:
b7:de:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:22:45 2025 by rpki-client