Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F007FA664B4611F0861774E3DAE4EC9C.roa
File: F007FA664B4611F0861774E3DAE4EC9C.roa (raw, json)
Hash identifier: K6TCsFG+a3JY+A5djpBK7sJHJVPI3gUMYMm4IxItRc0=
Subject key identifier: F9:07:A3:99:8F:E9:07:10:8E:C6:FD:7F:C4:AF:97:3A:62:B0:58:6F
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0B6C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F007FA664B4611F0861774E3DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 06:47:30 +0000
ROA not before: Tue 17 Jun 2025 06:47:25 +0000
ROA not after: Tue 16 Jun 2026 06:47:25 +0000
asID: 29802
IP address blocks: 102.135.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 18 Jun 2025 11:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 17 06:47:25 2025 GMT
Not After : Jun 16 06:47:25 2026 GMT
Subject: CN=68510f82-2291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:c5:ab:60:b8:87:79:22:67:c7:aa:46:99:
f5:2b:93:04:48:ee:9e:7f:17:f4:8e:de:df:23:7b:
05:8c:d6:2a:4d:79:66:e3:06:15:64:47:7c:05:0d:
5f:83:cd:e6:f9:44:34:dd:f6:32:55:91:72:c7:10:
2b:39:e1:9c:d9:44:fc:6f:e8:2c:17:45:9d:d0:21:
93:ab:cf:87:c6:ff:cb:5d:50:2d:27:43:b0:40:e5:
7b:9c:0f:ab:3f:5a:c9:94:bc:fe:45:91:77:6c:c3:
34:5e:58:e1:55:76:a2:bb:30:9f:8d:e9:5a:ef:e5:
6d:f0:aa:53:d5:7c:ae:14:4d:2f:a0:e1:1a:98:3a:
ea:d9:6a:ef:df:4d:14:61:2d:5c:8f:2c:44:af:5b:
c3:c8:e3:31:bf:27:cb:18:77:1b:82:8d:2b:04:18:
d6:f6:60:9c:0b:e1:e8:81:ad:a4:f5:d9:5f:69:f3:
46:e5:bf:0a:c9:3f:d2:5f:e6:10:86:3d:64:06:ac:
91:49:84:d5:2a:06:8e:8b:85:20:bd:e5:4e:1e:3b:
15:6d:ca:e3:65:07:46:62:f2:01:ba:bc:b2:7f:a4:
cc:58:11:83:92:45:0e:5e:cd:31:51:f0:22:a6:d0:
47:74:ff:a4:01:08:a7:f4:fb:81:40:7e:ba:2e:de:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:A3:99:8F:E9:07:10:8E:C6:FD:7F:C4:AF:97:3A:62:B0:58:6F
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F007FA664B4611F0861774E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.104.0/21
Signature Algorithm: sha256WithRSAEncryption
60:ab:d8:4c:c7:fd:c7:65:e1:56:0d:f7:67:c6:17:74:e5:e7:
fd:27:37:3d:0a:7c:4d:a9:fb:0c:18:75:05:9d:c5:ab:b3:91:
62:ae:97:dd:27:26:db:a8:4a:9e:ed:80:47:43:3d:6b:e2:70:
2c:d4:5e:5b:b3:ee:0e:1d:bd:ba:a3:b7:aa:6b:e5:0c:fe:9b:
f4:63:ac:ae:20:ab:b3:34:6b:c1:e5:f7:74:eb:3e:b8:93:39:
4e:f5:63:b5:6e:34:81:30:91:81:eb:1a:6e:9f:ec:cf:43:52:
38:59:b7:a3:6b:a4:3d:4a:f1:bc:04:6a:c9:96:bf:bc:0d:fa:
01:a5:3f:1b:20:ae:a5:58:50:b8:ea:63:5f:f8:b4:c2:9d:5c:
c4:8e:b6:06:a1:5b:60:c1:93:24:d2:f9:76:eb:e4:85:13:c8:
8d:ae:2c:1d:6d:c2:0e:21:84:b1:11:63:79:e5:07:87:92:a3:
a7:c9:96:ea:dc:41:f7:2a:e0:7d:43:7f:df:ed:6d:d0:0d:cb:
bd:78:bd:51:f9:e4:2a:6e:ed:fe:18:15:69:82:39:7f:0d:38:
6e:18:9a:f6:23:bc:1f:e4:8b:42:7f:f0:c1:10:97:64:6f:65:
64:2e:17:0f:06:9f:79:c5:ba:e4:67:98:04:91:e1:a4:98:fe:
fa:bb:9a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:49:09 2025 by rpki-client