Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/85751D2246C411F0B35CB878DAE4EC9C.roa
File: 85751D2246C411F0B35CB878DAE4EC9C.roa (raw, json)
Hash identifier: 8RnruMpMOyIroRB7WdabR+dI97SGVIprP/OPugvR+SU=
Subject key identifier: BB:63:EB:52:70:B5:94:68:57:DC:6D:E8:3F:D5:AE:87:A4:A0:79:E7
Certificate issuer: /CN=F362E39EAR/serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
Certificate serial: 0CBD
Authority key identifier: 0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52
Authority info access: rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/85751D2246C411F0B35CB878DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 13:03:52 +0000
ROA not before: Tue 24 Jun 2025 13:03:47 +0000
ROA not after: Fri 18 Oct 2030 13:03:47 +0000
asID: 11845
IP address blocks: 209.203.0.0/18 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3261 (0xcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAR, serialNumber=0FE83801306744870D1D06A60CF7F3BA3E542652
Validity
Not Before: Jun 24 13:03:47 2025 GMT
Not After : Oct 18 13:03:47 2030 GMT
Subject: CN=68497eb8-b042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:80:c2:5f:82:ea:9c:c0:86:d5:06:9e:56:
17:9a:53:04:f3:c4:06:c4:b9:1c:25:98:ae:20:81:
93:4b:c7:c7:a5:98:42:64:c6:62:62:cf:58:55:b7:
1c:73:56:1f:1e:2a:0f:1c:a0:f8:0d:eb:61:3c:98:
f3:99:5b:47:ba:85:01:93:40:bf:97:67:a3:14:4a:
69:2c:f4:10:04:19:d8:3f:c5:98:8b:c3:16:e7:d4:
02:15:3d:3f:52:05:90:cd:31:ef:0a:5f:73:51:9b:
a1:2b:92:f1:ae:f8:c5:0a:49:9d:41:20:ec:83:c1:
d2:3a:e8:35:93:85:8a:09:31:63:83:a6:d7:96:d2:
83:84:6e:c6:ce:70:08:5b:c9:68:16:08:86:11:70:
d9:47:01:4a:74:cb:8c:47:20:28:e5:46:3c:67:45:
d4:fb:46:d6:3a:4b:c3:e6:24:b7:94:71:fa:f7:91:
ff:a7:37:cc:68:9a:bd:bb:58:89:f1:ed:d9:40:01:
db:31:e7:88:a0:fb:5e:bb:82:0a:a6:c8:30:2f:91:
10:a6:0a:67:b6:7f:ad:d3:91:99:fe:34:c2:5d:d6:
11:b6:2e:c7:2f:38:63:91:38:c6:d3:89:47:98:d2:
6e:56:73:75:b2:de:4b:bf:a5:60:07:a6:67:16:43:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:EB:52:70:B5:94:68:57:DC:6D:E8:3F:D5:AE:87:A4:A0:79:E7
X509v3 Authority Key Identifier:
keyid:0F:E8:38:01:30:67:44:87:0D:1D:06:A6:0C:F7:F3:BA:3E:54:26:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/D-g4ATBnRIcNHQamDPfzuj5UJlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/D-g4ATBnRIcNHQamDPfzuj5UJlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/399FDFEC80AB11E6BCC9C663F8AEA228/85751D2246C411F0B35CB878DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
209.203.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:4f:e3:f1:6d:e7:e4:f3:fa:7c:bb:37:67:b6:1e:60:be:3d:
70:0a:0c:2f:4f:81:17:65:ef:2b:f5:5b:16:d6:55:10:f3:7b:
07:5a:7e:77:43:d9:89:fe:a1:e6:ed:3c:dd:0c:30:27:1e:7f:
19:f1:0b:b5:77:7e:de:bb:2c:c9:bc:ee:c7:f5:11:f4:60:52:
8c:15:bf:6e:94:82:d1:3b:d1:10:b8:1d:f4:59:06:78:9e:cf:
8b:07:92:a9:cf:60:18:56:05:c0:8f:de:b8:52:04:90:d7:ed:
0f:07:04:7c:aa:8f:1a:44:65:80:d8:f5:26:40:14:87:55:90:
7f:da:36:45:9c:9a:99:5b:13:83:5d:29:43:bd:67:bf:bd:e4:
1e:61:a7:3d:69:b6:99:a6:d5:53:04:56:b2:26:5c:21:9c:9b:
6a:93:46:2c:0e:57:7b:da:aa:1b:bd:a6:9a:0f:f9:21:44:e9:
7c:45:18:1d:86:94:56:96:e9:7a:3d:ba:f2:c5:61:b5:5c:ca:
dd:a2:c6:73:1d:ef:f3:33:7a:8a:16:f0:1a:df:f0:73:cc:9e:
8e:fb:fd:dd:97:71:d3:27:4c:6e:9c:37:2c:79:bd:72:0b:4f:
de:4b:a8:cb:59:54:07:f7:1c:65:37:e9:89:fc:82:4c:cc:44:
9e:17:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:39:41 2025 by rpki-client