Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/F1B3C332579811F08809BD82DAE4EC9C.roa
File: F1B3C332579811F08809BD82DAE4EC9C.roa (raw, json)
Hash identifier: 34+O2mrUM01X+B/xWivHb8LcGgu1r8wb5reXkKNuSWU=
Subject key identifier: 07:17:C2:57:43:77:89:71:5F:96:BB:4E:2D:0C:D1:A3:33:CB:C9:B2
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0395
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/F1B3C332579811F08809BD82DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 23:04:45 +0000
ROA not before: Thu 03 Jul 2025 23:04:39 +0000
ROA not after: Tue 03 Dec 2030 23:04:39 +0000
asID: 15964
IP address blocks: 41.204.73.0/24 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 3 23:04:39 2025 GMT
Not After : Dec 3 23:04:39 2030 GMT
Subject: CN=6865bb0d-9fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:df:68:18:c1:d8:6d:6b:1d:98:3f:74:db:
9e:da:e8:b6:7c:89:4e:21:a5:8e:46:50:be:74:9f:
d5:21:bd:f8:f6:0b:a0:97:a1:38:cd:f6:84:bd:fc:
f4:a0:92:40:4e:fa:a9:2a:3f:45:2c:d9:1c:8f:1b:
f1:6b:32:22:85:0c:f7:22:a7:a0:a1:fb:13:10:69:
2b:f7:81:31:85:fb:80:cf:7c:cb:90:71:b6:59:51:
c9:df:c9:6f:f4:6d:98:c9:b4:c9:59:cf:9b:1d:2b:
d0:e5:d9:29:92:82:2f:83:a1:f8:f3:cf:9d:dc:49:
56:c9:3e:17:75:b4:3f:08:bf:cc:ae:c4:bf:0e:e2:
d9:d4:52:97:78:24:9b:44:25:c1:b8:c0:79:55:49:
76:0c:a3:10:ba:a4:c0:0b:7c:d1:10:7f:bd:1d:e6:
26:30:ac:a3:99:14:b4:39:38:a7:c1:06:2a:43:e0:
5d:cd:7b:51:9d:99:b3:97:e8:5a:11:72:c3:74:eb:
92:d4:f7:45:39:28:a8:be:79:09:d1:86:12:e1:c5:
40:74:c6:14:d9:0d:d5:8f:d5:99:fe:be:b1:82:28:
c3:e4:67:10:73:90:fa:32:1e:1f:bd:ac:94:89:c1:
8a:b6:74:19:57:0c:ef:88:14:d5:28:69:c9:c1:84:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:C2:57:43:77:89:71:5F:96:BB:4E:2D:0C:D1:A3:33:CB:C9:B2
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/F1B3C332579811F08809BD82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.204.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1f:6d:64:dc:c8:8e:fc:9f:b4:d2:27:f8:30:52:11:41:c4:
4a:6f:48:f2:27:2d:d5:63:c4:93:ba:bf:9c:99:e7:72:c3:1f:
95:e3:19:98:3e:e8:23:30:cf:79:5a:d8:89:54:c6:17:19:31:
7b:ac:f4:33:d7:f1:18:68:ba:bd:02:26:1b:07:2d:a3:e8:73:
6d:a2:e9:91:b3:d6:75:77:67:0e:21:9c:51:4f:c2:cd:b0:a2:
3f:56:eb:cb:3a:9d:da:2b:1c:aa:ce:54:09:43:dd:53:85:ea:
24:51:30:fb:af:22:47:2e:a6:0c:b6:11:0a:b8:7d:22:dc:f2:
cb:a0:a7:ec:33:a7:c6:49:ef:2e:92:3a:fe:3c:8e:8a:d0:bc:
2e:c2:a4:33:e8:b5:ec:48:4b:c6:f0:c6:b7:34:77:4d:44:e6:
33:08:29:6a:da:8a:5b:58:9d:d1:9f:5b:1c:de:eb:c0:52:1a:
91:03:cf:bc:b9:7e:f2:ee:3b:99:be:ac:bc:a5:42:97:83:ed:
93:e7:e8:bc:2b:33:19:09:df:07:ab:5e:14:e1:b2:9b:55:d1:
93:6d:4f:97:63:3a:bf:4c:03:20:74:90:ea:22:53:fd:f0:98:
db:26:d4:ac:2e:98:88:2f:d2:16:c2:6f:a8:38:e7:0b:ad:00:
f2:92:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:15:10 2025 by rpki-client