Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/1B786B4E3F8B11F0B8041489DAE4EC9C.roa
File: 1B786B4E3F8B11F0B8041489DAE4EC9C.roa (raw, json)
Hash identifier: /bgUPlrvnEdfkbyRwQFx/0fTSHi+6eLubObaEe1n4WY=
Subject key identifier: BA:5A:F6:48:26:3A:C4:27:33:CE:81:F0:9A:8F:3A:09:2D:EB:87:15
Certificate issuer: /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial: 02FE
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/1B786B4E3F8B11F0B8041489DAE4EC9C.roa
Signing time: Mon 02 Jun 2025 08:25:15 +0000
ROA not before: Sat 14 Jun 2025 08:25:10 +0000
ROA not after: Fri 31 May 2030 08:25:10 +0000
asID: 36959
IP address blocks: 2c0f:feb8::/32 maxlen: 32
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A8FAF, serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Validity
Not Before: Jun 14 08:25:10 2025 GMT
Not After : May 31 08:25:10 2030 GMT
Subject: CN=683d5fea-79f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1c:70:8d:05:d3:dd:04:59:9b:fb:94:93:3a:
ed:7a:18:60:ef:0b:2d:6d:fe:db:78:cb:44:f0:f5:
6f:47:77:6d:0a:31:1b:b8:19:9e:b5:7f:08:34:69:
51:78:6e:dc:76:86:a0:f1:2a:6a:6c:b7:39:07:d6:
bd:51:d1:e2:0f:a9:d5:77:da:e8:2b:83:59:01:2f:
b4:53:5f:6d:10:3d:28:ad:ce:ca:f0:98:82:54:70:
fd:87:b0:c2:4d:e1:00:c9:7e:5b:bb:0d:a2:3c:7a:
49:a5:09:fc:c9:71:f3:17:0f:12:41:da:ae:8a:86:
52:16:d7:1c:bd:6b:2d:75:c2:a1:20:35:b4:e6:a5:
e9:8a:d9:49:32:6d:a0:b3:55:1a:65:b1:94:72:23:
17:22:d3:58:4b:eb:43:bd:76:da:f1:62:61:01:5e:
25:c0:f5:21:cf:3a:6f:da:38:56:4a:7b:4a:be:93:
c7:30:6e:3d:e1:75:37:3e:32:ed:85:9a:b5:13:f6:
64:9e:5f:e6:6a:2d:e3:f0:51:f0:79:7d:54:cb:f5:
a5:41:55:fd:08:d3:a2:c8:5b:71:b6:4e:df:b3:ca:
97:3a:2e:a4:c8:fc:90:61:8a:14:b0:6e:81:d3:6d:
95:e7:1f:1a:ed:30:0f:b6:73:d5:62:7f:9d:e8:9f:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:F6:48:26:3A:C4:27:33:CE:81:F0:9A:8F:3A:09:2D:EB:87:15
X509v3 Authority Key Identifier:
keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/1B786B4E3F8B11F0B8041489DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:feb8::/32
Signature Algorithm: sha256WithRSAEncryption
02:18:e4:82:15:77:c7:b2:3f:07:d4:c7:2a:1a:fd:7c:a1:1b:
12:ae:da:f0:3f:5d:b3:34:8e:7d:5a:d6:53:cf:33:82:a7:78:
00:2a:15:78:b1:24:28:72:b5:6a:0b:cd:65:64:8e:37:be:26:
5b:56:81:68:72:43:85:4a:c8:58:f4:d3:b5:c1:eb:67:7f:be:
6e:8e:39:22:b6:fd:2b:5d:f8:5f:da:8c:e2:bb:61:e5:5b:3f:
42:d3:79:0f:21:8b:ac:a2:86:24:eb:4f:ff:a5:20:88:27:ed:
78:58:b4:34:33:43:15:be:16:1e:3a:bc:cc:04:87:28:8a:51:
d6:57:5b:fb:84:06:f9:f9:a6:80:13:af:bd:8a:8f:7b:74:2f:
3c:f6:de:c9:87:95:5c:1e:c4:80:16:8c:30:7e:05:b9:0b:2d:
94:a7:cd:7f:35:bf:e2:bd:8d:4c:33:29:e6:22:66:e2:41:15:
a2:0e:b9:6a:a1:b5:86:86:7e:47:db:a4:66:8c:aa:a9:e4:e0:
18:ee:fd:23:eb:60:62:d2:53:cd:5f:06:33:2c:4d:33:22:16:
d8:17:b1:c3:34:e4:6e:90:c1:9e:ef:f3:c4:8e:d2:3e:ac:19:
72:81:b9:5b:36:fd:d3:83:6d:c1:8e:64:1f:cf:53:52:af:f2:
0f:32:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:19 2025 by rpki-client