Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A26B786E50FF11F0A2C5BBA3DAE4EC9C.roa
File: A26B786E50FF11F0A2C5BBA3DAE4EC9C.roa (raw, json)
Hash identifier: dok5vZp0IbNoEhzXpMbnh3FaP3VE8lBgjKIii1hhNo8=
Subject key identifier: E2:90:97:1F:B8:4D:25:35:B4:E7:29:52:A6:8B:15:1E:AD:62:E5:B1
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BCE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A26B786E50FF11F0A2C5BBA3DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:32:12 +0000
ROA not before: Tue 24 Jun 2025 13:32:08 +0000
ROA not after: Wed 24 Jun 2026 13:32:08 +0000
asID: 2914
IP address blocks: 196.251.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:32:08 2025 GMT
Not After : Jun 24 13:32:08 2026 GMT
Subject: CN=685aa8dc-6abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:1f:6b:2d:6e:bd:07:ac:20:e4:74:50:3a:
7a:d2:df:d3:37:68:e6:b3:96:35:a8:bc:a4:fa:9c:
8f:e4:24:38:58:41:14:eb:a8:f6:a9:3b:f5:10:81:
a9:48:0f:3e:93:db:c2:c2:93:fa:dc:f6:a2:47:eb:
7b:8a:e5:64:4c:8e:eb:05:13:b6:5a:96:18:24:7a:
26:e7:0c:7d:11:17:26:a5:67:51:20:24:2a:81:38:
2d:72:67:b0:ae:7f:5e:8b:30:32:24:28:38:d0:2d:
39:c8:9b:74:9a:dd:49:e0:73:e1:4f:00:6c:e8:7c:
d0:51:98:f5:cd:97:c8:2f:ef:e6:f4:ee:b0:99:22:
a4:35:9d:36:d6:b7:ca:c9:cb:29:74:92:52:1a:34:
4c:c9:71:04:29:7a:22:bd:0a:cf:b8:4f:82:8e:45:
66:e7:b2:6b:12:db:de:67:f1:44:ff:35:1e:f1:c7:
d4:f4:86:b6:67:27:dd:94:98:0c:00:12:fe:a2:0e:
8b:2a:78:e0:66:37:51:6b:6b:7b:81:ad:c4:6a:30:
75:a1:80:8b:68:e9:79:b8:5d:97:fc:88:db:5f:8d:
5f:48:f3:b8:71:24:9d:7b:54:11:30:80:ee:43:e4:
11:0f:17:b4:ce:19:9c:35:3b:fa:f1:0d:f6:cd:a6:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:97:1F:B8:4D:25:35:B4:E7:29:52:A6:8B:15:1E:AD:62:E5:B1
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A26B786E50FF11F0A2C5BBA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.110.0/24
Signature Algorithm: sha256WithRSAEncryption
24:39:44:02:08:75:25:92:b4:89:84:7e:6a:ca:d6:56:4b:72:
09:9c:1b:31:d7:6f:e7:1d:68:15:2c:76:55:51:60:56:d5:d7:
b5:54:ba:bb:ed:77:b3:e7:b6:f9:c9:ca:97:57:ff:a4:f5:10:
77:b8:31:67:c2:74:b0:6a:6a:5c:97:75:45:c2:12:93:b2:f2:
d0:81:11:42:b9:39:d7:3b:bc:0f:d7:fa:83:b4:b8:1c:22:00:
a1:77:2e:f7:99:00:a4:8e:21:89:5f:3b:de:75:fa:d2:c2:06:
5f:8e:03:b2:fd:7f:7e:16:a2:55:47:af:56:cb:de:06:81:dc:
0d:78:c7:2e:f9:07:d8:0e:26:d9:df:f0:8d:00:8c:8a:6a:69:
ca:1c:47:ca:c5:b0:34:7e:56:2e:0e:65:ab:74:2b:b6:59:4c:
e4:7c:3f:1b:7c:af:fd:74:89:b8:ca:88:46:b1:02:24:18:14:
20:26:0d:cf:28:b0:b4:a2:67:5a:b6:65:a6:57:08:2a:48:54:
b0:67:7a:d2:e9:6d:61:a1:4e:27:0b:4a:62:73:cb:ee:e2:d2:
f8:5c:4f:90:88:aa:1a:1f:bb:39:26:b0:59:86:38:ad:26:ef:
c9:c5:df:55:e4:8a:ff:9e:12:53:0c:72:20:95:e5:6d:fa:09:
41:cc:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:52:27 2025 by rpki-client