Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/C3C3FC5646C411F0957A397BDAE4EC9C.roa
File: C3C3FC5646C411F0957A397BDAE4EC9C.roa (raw, json)
Hash identifier: 6TBdH95t3nXF10Bz+Ap697yfZQbWnupWY7c4A0SeikU=
Subject key identifier: 87:A6:4B:08:8B:F0:DC:0C:8C:88:83:5C:54:B5:72:AB:C5:F2:07:6B
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D3E
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/C3C3FC5646C411F0957A397BDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:05:37 +0000
ROA not before: Tue 24 Jun 2025 13:05:32 +0000
ROA not after: Fri 18 Oct 2030 13:05:32 +0000
asID: 11845
IP address blocks: 196.3.168.0/21 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:05:32 2025 GMT
Not After : Oct 18 13:05:32 2030 GMT
Subject: CN=68497f20-9686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:ed:2d:f3:3a:a6:48:87:a7:9a:be:d0:a0:
59:c4:f8:df:e9:83:1e:ba:09:b9:d9:d4:13:1c:c5:
b9:7a:0b:26:35:da:e9:77:bf:b5:07:2f:77:a9:fa:
cf:f7:ea:bd:fd:f1:30:b1:17:aa:48:4d:b8:8b:fb:
bd:73:38:5e:f7:6c:da:1f:c5:36:90:bc:83:d4:ca:
84:1e:56:34:8e:21:af:25:07:41:e5:5b:be:4f:5a:
99:b2:35:e8:b6:a3:6c:a0:86:bd:11:95:9d:9b:fb:
66:89:f8:16:af:7d:22:7e:62:6a:0d:fb:c4:98:d8:
07:fc:5f:0a:3c:02:9d:77:c9:4a:b3:a1:61:95:11:
60:0c:8a:09:ce:88:26:6a:9d:b8:5b:1c:de:91:58:
b7:e5:08:02:7c:02:21:2e:8b:4c:35:95:56:77:04:
5d:9b:86:10:64:69:2a:1e:f0:8c:d3:10:61:d0:c7:
c4:bc:9e:e5:3e:96:5c:aa:9a:4b:f2:bc:b3:69:8c:
4c:85:08:3a:7f:d1:41:45:8f:bd:f3:0b:48:35:96:
b2:11:8d:21:a5:ab:49:9a:4f:09:17:d3:8b:f8:a4:
fb:83:b2:d8:7b:21:a4:ff:e3:10:64:34:10:55:ab:
7a:ea:3e:1a:8a:04:37:df:d7:47:d0:8a:fa:cd:60:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A6:4B:08:8B:F0:DC:0C:8C:88:83:5C:54:B5:72:AB:C5:F2:07:6B
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/C3C3FC5646C411F0957A397BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.3.168.0/21
Signature Algorithm: sha256WithRSAEncryption
93:ad:97:05:d0:a8:88:77:bf:33:7a:33:17:07:c4:8f:de:85:
a6:2f:cc:5c:31:83:c8:63:c6:ed:02:de:15:cb:5f:e5:df:fe:
98:47:a2:c6:81:45:81:45:60:3c:c7:7e:bc:e1:ed:18:b1:12:
54:74:51:c4:2b:f0:12:77:52:96:d6:03:90:22:50:b4:7d:5d:
c4:86:04:ed:30:cf:5b:4e:f6:49:63:20:6e:7a:46:28:db:6f:
f5:6d:1f:90:24:11:85:4d:1f:4b:4b:26:72:09:61:11:f2:31:
e5:ce:95:18:33:ec:81:54:a2:f3:fb:69:11:06:0a:c3:23:06:
4a:17:1b:61:45:ea:9f:03:df:dd:ef:1a:eb:c4:5e:f4:4b:19:
99:82:cf:67:53:2e:74:3b:d4:81:88:72:56:c8:20:53:29:67:
09:18:5b:1c:76:42:2e:b3:e5:e7:c4:f4:a4:ea:cf:40:aa:75:
c2:b0:6f:da:3f:32:04:fc:ed:5d:2c:74:85:72:2a:ad:2a:16:
b7:c4:4e:58:73:36:7d:1c:43:96:15:ed:8c:e8:dd:ff:d6:36:
a0:0c:b1:be:f2:1e:bc:df:dc:d7:34:17:3e:cc:2c:96:95:93:
16:70:c1:76:f8:ac:e3:ad:4c:18:e5:12:72:a0:0e:e9:40:bb:
43:ef:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:12:23 2025 by rpki-client