Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/CB5358B0359711F090359383DAE4EC9C.roa
File: CB5358B0359711F090359383DAE4EC9C.roa (raw, json)
Hash identifier: gjPbjfglKUjvI4lUcRmisJMynSNTghstOdv51RJyIDE=
Subject key identifier: 8E:A3:06:CF:6E:A3:2D:D0:BA:1E:C4:76:86:C1:FE:F4:38:50:E6:A4
Certificate issuer: /CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Certificate serial: 05DE
Authority key identifier: ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/CB5358B0359711F090359383DAE4EC9C.roa
Signing time: Tue 20 May 2025 16:30:52 +0000
ROA not before: Tue 17 Jun 2025 16:30:47 +0000
ROA not after: Thu 18 Jun 2026 16:30:47 +0000
asID: 36943
IP address blocks: 41.61.0.0/16 maxlen: 16
41.185.0.0/16 maxlen: 16
41.185.56.0/24 maxlen: 24
196.43.195.0/24 maxlen: 24
196.220.32.0/19 maxlen: 19
2c0f:fe90::/32 maxlen: 32
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3611BE3AF, serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Validity
Not Before: Jun 17 16:30:47 2025 GMT
Not After : Jun 18 16:30:47 2026 GMT
Subject: CN=682cae3c-2f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:2b:31:57:cf:1d:6e:2d:6b:2f:72:6e:dd:
76:e7:e9:b0:5c:9b:54:a8:e0:2e:4a:e6:af:30:76:
f4:76:12:c0:63:3f:76:d2:3d:98:fb:f0:2c:6e:6d:
14:79:fd:b9:1a:6e:54:7d:f3:79:d1:d5:e6:da:0c:
59:9c:bc:5f:4a:bb:c2:f8:12:fe:a4:10:2d:f6:db:
bb:f8:a2:7d:e1:83:cd:d8:ee:91:ba:9c:3f:6a:26:
13:4d:51:ba:05:8a:5e:ed:b0:0b:d0:05:7e:cf:de:
47:69:e4:05:6f:44:d3:29:66:bf:1f:0f:b9:7f:bf:
e8:77:92:63:4a:fb:5c:30:8b:37:1c:6c:30:29:1d:
13:1d:14:23:99:99:85:67:a3:d1:a9:43:15:c1:03:
54:f2:d0:fa:5f:4d:6b:a5:ba:75:7c:c8:0c:7d:b0:
d1:67:5a:b4:c6:97:8d:3e:54:32:f1:30:6c:76:07:
db:cb:25:7e:d2:64:93:cd:30:27:04:29:d2:0b:0c:
75:cd:27:17:87:ea:bd:45:e7:c5:d5:51:1c:1b:ad:
c5:f7:35:35:c1:d6:d7:bb:3d:d6:af:fd:4d:34:d2:
ee:94:58:93:1b:66:52:9d:62:1a:3e:90:64:46:53:
d2:5a:20:e6:9d:9b:43:24:2f:74:8b:8b:b3:26:30:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:06:CF:6E:A3:2D:D0:BA:1E:C4:76:86:C1:FE:F4:38:50:E6:A4
X509v3 Authority Key Identifier:
keyid:ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/7WycK99282JlWn4Ee5dtsrDQK-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/CB5358B0359711F090359383DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.61.0.0/16
41.185.0.0/16
196.43.195.0/24
196.220.32.0/19
IPv6:
2c0f:fe90::/32
Signature Algorithm: sha256WithRSAEncryption
56:e0:32:21:cc:b3:73:cb:b2:58:dd:b7:01:14:b5:37:dc:9b:
45:57:e8:15:05:7d:25:01:94:34:62:e3:87:5d:bf:d2:e2:76:
86:70:05:32:2f:e4:63:ce:16:2c:f1:8f:db:86:08:a1:ed:b5:
65:8e:1c:58:a7:23:b7:7d:9e:ba:9e:af:b6:39:fb:d9:4f:3b:
61:64:56:74:97:87:09:43:ab:2a:13:97:96:95:9a:fa:0e:cf:
09:f5:3a:d5:a8:ae:be:9f:4f:22:90:3a:09:1c:13:c7:28:bc:
81:7f:fe:a0:ad:97:15:f6:fc:8e:0e:5b:9c:dd:a1:1c:4b:b5:
b1:8a:71:53:38:74:9e:15:90:a4:54:09:86:d5:82:ca:f1:96:
61:e3:c8:17:8b:69:f3:94:65:6a:98:04:96:12:38:bf:64:bf:
a7:44:8d:57:4f:c3:07:ec:7b:64:e0:74:8e:4c:64:3b:a5:6c:
e4:a1:71:a1:54:52:9e:9d:44:f3:f5:f2:d9:e1:d5:e1:2c:9d:
36:bb:3f:0e:a6:6e:eb:95:be:60:0f:fb:f5:71:3d:ab:25:6b:
03:05:6c:cc:45:ff:ea:f2:38:d6:81:67:d4:5d:7c:08:4a:df:
95:6b:ee:4b:9c:6f:aa:ab:21:e6:19:e4:38:7b:6c:44:3d:e0:
e8:aa:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:55:47 2025 by rpki-client