Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/06392D96808111EFACB35A67762E951A.roa
File: 06392D96808111EFACB35A67762E951A.roa (raw, json)
Hash identifier: owpJQ133udBSSOce7prYm8YhowuNrXIyS2eThdaFM+Y=
Subject key identifier: 4B:A1:36:22:0C:47:B9:22:3F:8C:88:DF:26:D4:FC:ED:5B:F1:99:8F
Certificate issuer: /CN=F36C06CBAF/serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
Certificate serial: 038E
Authority key identifier: DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/06392D96808111EFACB35A67762E951A.roa
Signing time: Wed 02 Oct 2024 05:41:51 +0000
ROA not before: Thu 01 Jan 2026 05:41:48 +0000
ROA not after: Sun 31 Dec 2028 05:41:48 +0000
asID: 329012
IP address blocks: 102.218.18.0/23 maxlen: 23
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C06CBAF/serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
Validity
Not Before: Jan 1 05:41:48 2026 GMT
Not After : Dec 31 05:41:48 2028 GMT
Subject: CN=66fcdd1f-28a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:dc:c0:02:bc:15:1c:55:e6:e8:b0:33:d6:
01:12:e8:da:46:d1:a8:58:1d:ee:f2:4d:09:72:c4:
e7:ea:5b:eb:28:a6:e8:df:bb:92:ec:d0:07:02:12:
a7:d8:a6:54:38:95:26:26:e3:34:cf:e8:e3:c7:d6:
05:bd:04:67:11:9a:bb:8c:d8:bf:85:69:a6:5f:d5:
ef:1d:20:41:ef:cc:1a:af:71:b8:b3:41:e7:41:f7:
07:59:34:7c:24:41:58:04:5a:7b:67:66:76:8e:6b:
bf:94:14:3a:95:66:45:45:7f:50:69:63:bd:c0:30:
42:bb:c8:41:e6:40:f1:db:02:31:14:25:ba:e0:10:
55:e8:1d:05:6d:68:77:b4:7a:0c:5c:94:ed:7e:80:
93:25:d6:55:df:b6:fe:b6:e4:a9:06:64:c3:5a:9c:
4e:08:47:c5:be:40:b9:12:c6:0e:fb:23:68:10:f7:
99:bc:86:59:81:63:6d:de:ec:6e:01:50:5b:ed:1e:
63:a4:31:cf:0d:f0:85:07:46:4b:84:83:38:86:46:
03:d7:92:2a:54:c7:33:51:5e:a4:13:6c:40:d8:bb:
7a:6c:c4:0a:13:55:d2:40:b6:99:d7:95:bc:0d:d5:
e3:67:dc:d1:ce:cd:90:f2:68:6a:ef:f8:f8:0f:71:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:36:22:0C:47:B9:22:3F:8C:88:DF:26:D4:FC:ED:5B:F1:99:8F
X509v3 Authority Key Identifier:
keyid:DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/06392D96808111EFACB35A67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.18.0/23
Signature Algorithm: sha256WithRSAEncryption
76:21:9a:28:64:bf:6a:d1:e5:60:56:be:c2:47:ab:96:9e:ca:
d9:26:01:3a:c9:f1:1a:75:33:e9:85:78:ab:e7:e7:ea:e3:59:
5b:cd:39:00:64:d7:6c:79:1e:56:6b:5d:16:78:a1:2c:56:94:
2d:76:05:69:ca:83:f9:bd:a3:89:02:dd:9f:ae:4d:42:e5:ad:
c5:23:20:14:e2:65:22:e1:a1:1e:3a:3c:31:46:26:7d:d1:8c:
ab:47:f9:a0:f9:e4:ab:0e:18:af:c2:09:a6:55:2d:cc:97:cf:
1a:45:c4:af:2f:4f:5a:5a:29:7d:90:8d:8b:dd:99:a7:be:7f:
d7:13:43:89:51:ae:a9:fd:a3:47:2c:ca:04:f0:ad:3a:7d:fe:
ed:ed:c5:83:b0:5e:a6:38:a6:46:d3:77:b6:7b:c1:59:1f:04:
b2:9d:0b:ef:d1:91:98:87:fb:03:3c:65:c0:7a:a0:42:9c:39:
3d:90:c4:73:99:c3:fc:2c:30:43:25:e0:e7:10:a1:8e:f7:c9:
70:7c:d6:0e:d0:0e:c4:1f:5d:15:02:74:1b:a6:2b:81:80:a6:
75:85:25:ec:b6:c3:15:51:3a:d5:21:03:2e:1f:fb:25:00:69:
5e:3b:ab:02:af:85:d1:c4:6f:77:f4:b9:f6:60:d0:02:cb:23:
69:96:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org