Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/D7B5D4AA3F8A11F0815BE886DAE4EC9C.roa
File: D7B5D4AA3F8A11F0815BE886DAE4EC9C.roa (raw, json)
Hash identifier: t5z1XEoM68YeibkOYXPg25COwviOQ/1nhyVvYwVcLc0=
Subject key identifier: 69:61:87:A7:7B:C3:CD:A5:9C:B3:BD:70:69:9D:F2:12:E8:5B:BE:B0
Certificate issuer: /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial: 02FC
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/D7B5D4AA3F8A11F0815BE886DAE4EC9C.roa
Signing time: Mon 02 Jun 2025 08:23:21 +0000
ROA not before: Sat 14 Jun 2025 08:23:16 +0000
ROA not after: Fri 31 May 2030 08:23:16 +0000
asID: 36959
IP address blocks: 197.220.0.0/19 maxlen: 19
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A8FAF, serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Validity
Not Before: Jun 14 08:23:16 2025 GMT
Not After : May 31 08:23:16 2030 GMT
Subject: CN=683d5f79-aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:c0:28:54:6f:f9:e6:78:ff:96:cd:db:c9:
2e:e7:a1:57:1a:fb:b3:c9:81:7a:3e:3d:cf:09:b7:
32:dc:e3:f1:a4:29:97:9e:9b:fa:24:4b:f2:b3:ae:
8b:ac:e0:0e:c5:83:60:69:9e:41:f4:e3:e4:6a:ae:
35:6e:86:3f:8e:7d:af:1f:78:c8:90:9d:b9:ba:8a:
3a:77:87:00:8b:75:61:2d:8d:49:84:b4:63:1b:97:
ed:b3:b0:fd:ba:68:3e:c4:f8:bd:43:1f:86:a5:c3:
bf:dd:be:68:3a:bb:80:8f:84:27:12:9e:1e:ce:40:
e7:0c:43:d9:95:67:a5:a6:7b:d6:e2:b6:82:94:be:
92:12:02:04:91:66:a2:84:af:b6:fc:1d:16:a4:6e:
3b:c8:05:8b:b3:10:87:9b:de:6d:b3:82:2c:b8:38:
ca:42:1e:0d:6a:ad:9e:af:58:57:a0:87:24:db:84:
65:64:2b:23:03:9b:c3:e2:54:7b:4e:6d:fb:a2:5d:
ca:aa:ca:26:3d:6a:8b:2b:1a:96:da:7f:51:44:f4:
0c:d6:26:28:5b:72:8c:ea:56:cc:dc:50:4b:1f:df:
d0:0c:8f:4d:95:57:e6:6f:d9:54:e4:ae:c5:0c:09:
d0:db:58:7a:89:c9:5c:9a:b4:01:fc:22:f5:5a:b5:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:87:A7:7B:C3:CD:A5:9C:B3:BD:70:69:9D:F2:12:E8:5B:BE:B0
X509v3 Authority Key Identifier:
keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/D7B5D4AA3F8A11F0815BE886DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.220.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:25:b8:1b:50:28:e8:3e:84:d3:29:6f:41:8e:5c:1b:19:cd:
a4:78:52:19:ae:43:4e:20:00:6e:fb:ab:6a:b9:fd:94:8d:66:
1a:c4:55:97:42:7a:17:0f:12:c2:42:7a:73:4d:65:4e:6d:0e:
75:82:9e:87:c4:95:cf:a5:5f:6f:a1:f7:9c:bb:e4:fd:37:e2:
e8:19:32:b2:93:c4:ae:06:3c:2a:21:f2:40:60:34:9a:9d:a5:
d6:aa:ef:94:45:a9:91:42:c7:bb:e1:f4:85:d9:f6:b5:6d:1c:
1b:cd:2c:d4:d8:91:d4:58:5a:b5:e2:8e:7c:09:6a:15:c1:a7:
02:56:65:e4:1e:ac:a1:10:ac:b4:a5:a8:eb:97:a4:31:e6:72:
ac:a6:d0:61:3b:21:a3:82:f2:d5:18:45:a0:52:a7:c6:f9:6f:
47:77:c4:62:11:8a:9b:80:ac:a8:e1:23:d4:b3:51:10:3d:f5:
a0:cd:62:1c:3e:44:8b:69:b8:7d:d5:92:f7:43:41:2c:79:f5:
bf:20:ad:4b:93:30:d2:ab:ea:c2:c9:5c:55:4c:bf:02:bc:c6:
4f:3a:06:d4:cc:3f:b1:d4:76:7d:8f:9e:22:5f:d1:df:5c:6c:
14:36:6f:69:8e:c5:e6:35:e3:67:26:b4:91:be:3c:1b:3a:bc:
ee:24:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:38 2025 by rpki-client