Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DB40C29450FE11F09FD2149FDAE4EC9C.roa
File: DB40C29450FE11F09FD2149FDAE4EC9C.roa (raw, json)
Hash identifier: z8SPITF3+lsq11l9vAW8T9a9nzbxyRKsEx/L54cwkug=
Subject key identifier: C0:08:D8:B8:8C:5A:81:61:93:5D:FD:F9:6B:7D:6F:5D:01:12:2B:28
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BC2
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DB40C29450FE11F09FD2149FDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:26:38 +0000
ROA not before: Tue 24 Jun 2025 13:26:33 +0000
ROA not after: Wed 24 Jun 2026 13:26:33 +0000
asID: 2914
IP address blocks: 196.251.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 08:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:26:33 2025 GMT
Not After : Jun 24 13:26:33 2026 GMT
Subject: CN=685aa78e-d481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:dc:12:03:b4:d0:ca:0a:6f:ba:8b:ca:7a:
48:95:6e:04:66:2b:6b:9e:58:c4:06:01:47:cd:11:
56:1f:61:f9:c8:bd:a5:9e:6c:0a:e9:41:59:9e:7b:
f1:59:df:d8:41:b7:ea:8f:fe:20:c0:b6:63:8a:83:
89:ba:66:ea:70:23:f0:2f:ea:ec:e2:cd:16:05:9a:
99:76:dc:9b:cf:98:84:0a:17:d7:96:1b:93:ec:b7:
34:42:1d:5b:f0:e4:5d:43:27:8d:80:dd:77:7a:89:
49:8d:45:7f:b7:ab:29:fc:8f:d0:fb:69:83:6d:ff:
54:a3:4c:74:3a:0c:df:e4:e5:c3:45:98:4a:43:ff:
29:63:78:92:88:ee:a9:d6:a3:48:3c:3a:f3:d2:6a:
cd:7f:d1:b3:c2:6a:dc:33:83:32:78:aa:99:e0:f5:
a5:f5:07:70:75:f3:97:01:9f:53:e5:60:02:a5:19:
c9:cd:e6:44:8d:fc:86:ee:61:f5:4e:72:84:64:b7:
72:85:47:82:cd:23:f7:78:6b:92:83:92:45:69:69:
c4:d8:af:1e:3f:ea:6d:17:9a:5f:0c:9f:92:d9:f0:
1a:8f:f7:da:d8:cc:29:7c:e1:31:95:5e:36:24:bb:
d3:0d:b1:a9:34:eb:8b:42:0b:c0:c0:3a:48:d1:0c:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:D8:B8:8C:5A:81:61:93:5D:FD:F9:6B:7D:6F:5D:01:12:2B:28
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/DB40C29450FE11F09FD2149FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d1:50:b3:a6:4a:9a:24:13:46:9e:b0:e3:35:d0:b4:4e:0f:
6f:39:b0:3c:e8:63:ae:6b:08:17:01:e1:cb:46:5f:1f:5d:cf:
cf:4d:fb:eb:89:f4:30:2d:29:62:18:33:28:2e:90:eb:fa:f7:
9c:7b:06:07:c8:87:a2:b8:84:3f:d1:e0:7d:76:de:6d:f1:ee:
45:58:d5:30:df:18:12:40:7e:76:f1:be:a8:5e:93:d9:3d:cf:
36:2d:d5:76:b7:16:93:06:94:29:8e:d0:b4:8d:14:76:8c:81:
3e:3c:03:45:f3:ef:0a:38:dc:7f:d7:be:33:b5:67:e2:28:33:
be:3a:ba:d5:80:6a:d5:14:5f:37:09:08:1b:64:2d:30:11:28:
c4:65:61:ba:78:23:a0:7c:80:40:d7:60:16:32:81:3b:a6:a9:
f7:61:74:e3:91:c7:fc:1a:62:03:49:40:5b:d9:46:02:78:dc:
41:7e:a6:7f:91:66:85:be:a2:63:ca:1e:ec:f5:f9:eb:73:ef:
ab:af:77:34:f1:30:8d:41:a5:da:7a:f5:11:f3:8a:9a:0a:e2:
2c:de:b3:db:20:6d:77:70:6e:80:00:5c:4e:1a:a3:01:eb:69:
f2:05:b5:18:38:6b:36:bc:f9:2c:aa:bb:99:27:32:f9:a3:4f:
43:f1:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:47:24 2025 by rpki-client