Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E931058846C411F0A1757E7BDAE4EC9C.roa
File: E931058846C411F0A1757E7BDAE4EC9C.roa (raw, json)
Hash identifier: EayQcb/gQt7YJ6Dhe3VUfGA8I0JKQX96b3m2dF4aJWU=
Subject key identifier: ED:C6:6E:36:E1:B4:ED:AF:86:6E:7C:BB:E0:53:61:F7:7A:F6:28:7F
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0D40
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E931058846C411F0A1757E7BDAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:06:39 +0000
ROA not before: Tue 24 Jun 2025 13:06:34 +0000
ROA not after: Fri 18 Oct 2030 13:06:34 +0000
asID: 11845
IP address blocks: 41.193.0.0/16 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3392 (0xd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 24 13:06:34 2025 GMT
Not After : Oct 18 13:06:34 2030 GMT
Subject: CN=68497f5f-96ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:66:2b:7e:a0:20:1a:1c:37:6c:a9:0f:4c:
d3:32:e2:4d:97:e4:d3:cd:40:52:39:72:04:da:cf:
7d:7c:76:8f:83:48:7f:3e:59:4e:b0:4c:5e:6f:8a:
4f:21:d3:d1:5f:aa:e4:86:68:b2:3b:4a:67:08:aa:
34:6b:23:72:92:89:22:c7:2f:68:28:d7:28:86:88:
fb:bf:ee:f9:3a:14:1b:ea:c2:ff:1a:9f:61:94:2b:
6a:67:83:ee:39:06:8d:5c:98:db:3d:1a:8f:d0:38:
d7:37:78:b7:d7:ab:6f:f8:27:80:b5:74:c0:fb:e0:
b7:29:d5:71:37:8a:2c:f4:65:11:f3:6b:a4:19:f1:
3f:0b:2d:2d:8a:57:80:48:ee:2e:10:00:ab:ab:73:
f3:56:a0:80:e2:bf:e3:68:5c:bf:80:d3:3f:6e:f6:
1c:a7:76:b9:9a:00:7d:a1:ca:60:aa:7e:d2:55:66:
bf:75:af:33:04:12:12:5f:6a:91:01:79:e1:6d:88:
16:ca:e3:0b:5c:05:a1:c1:31:4a:3c:8a:f8:96:1e:
c6:a2:36:60:20:98:af:00:e1:ef:15:f1:75:dc:1e:
98:4f:c1:a9:34:34:33:5b:66:fb:2b:b1:dd:7d:1d:
e8:15:d7:28:91:7d:a6:05:2a:ba:90:51:67:20:5d:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C6:6E:36:E1:B4:ED:AF:86:6E:7C:BB:E0:53:61:F7:7A:F6:28:7F
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E931058846C411F0A1757E7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:02:d0:75:a6:1f:9d:f7:19:10:09:2b:f7:17:ec:86:56:20:
1d:33:17:90:0d:4e:c6:cd:af:12:0c:1d:31:2e:0f:cd:77:69:
8b:00:e0:af:46:53:27:84:44:b4:19:b4:36:1e:05:95:99:c1:
c8:50:68:5a:6e:ae:2c:c6:88:cb:3a:6c:e1:06:d2:b4:36:c4:
45:bd:5a:b9:33:84:58:f3:43:a4:62:a8:8b:3a:b5:2d:60:da:
a3:be:cb:82:41:5f:4d:f0:15:26:08:9a:74:e4:5e:93:83:21:
54:f4:b7:9d:e2:27:fe:12:44:45:76:b4:53:01:6e:35:48:31:
f8:1e:77:33:82:3b:66:2a:a3:8a:a9:58:91:f8:f7:80:ac:de:
17:55:80:bc:a1:72:f7:31:b8:7d:b4:3d:b0:c0:a2:23:b1:19:
69:62:ed:6a:10:2c:10:b6:bd:17:b2:dc:bb:36:7c:87:40:c8:
05:b7:7a:11:ed:65:10:89:1a:0f:39:5f:35:62:97:e4:0c:fc:
c6:ac:19:eb:5b:18:0a:db:ce:24:e8:96:bd:fd:52:3e:d2:02:
99:86:9b:57:0f:72:99:6c:4d:d6:98:d5:7b:7e:ba:1b:9d:14:
5b:7a:4a:49:dd:07:00:63:4a:81:63:20:2d:84:e6:fe:fd:a5:
38:90:97:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:20:17 2025 by rpki-client