Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FB8023D850FE11F09F192C9FDAE4EC9C.roa
File: FB8023D850FE11F09F192C9FDAE4EC9C.roa (raw, json)
Hash identifier: fn3BEPzJz9UdhIcbRpH30UAsFNNCaeY1PZ3KWwRA//M=
Subject key identifier: 3C:F9:59:D8:23:F7:97:84:AC:03:81:3B:3F:81:A7:B0:87:26:66:68
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0BC6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FB8023D850FE11F09F192C9FDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 13:27:32 +0000
ROA not before: Tue 24 Jun 2025 13:27:27 +0000
ROA not after: Wed 24 Jun 2026 13:27:27 +0000
asID: 2914
IP address blocks: 196.251.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 07:59:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Jun 24 13:27:27 2025 GMT
Not After : Jun 24 13:27:27 2026 GMT
Subject: CN=685aa7c4-7f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:71:92:84:7d:79:a4:10:6d:e4:93:a5:d9:
8e:00:49:68:31:c6:76:ba:57:46:48:21:9d:aa:3c:
c4:27:c6:5c:0c:f5:70:d1:05:e5:29:3b:f8:a1:47:
20:dd:c6:6d:d4:e1:7f:09:61:30:19:45:20:18:54:
93:88:ee:b1:f2:65:9a:d3:6e:55:cc:13:4d:e8:a4:
c3:12:3a:43:ec:aa:4b:91:21:57:c1:c4:20:7b:de:
9a:3f:59:fc:3f:4c:d5:3c:e3:5d:17:09:60:b9:c6:
62:ec:37:f3:8e:1b:c2:73:8f:20:22:73:2f:3c:d6:
15:59:37:c1:71:09:1b:d2:8b:96:ec:fd:a0:06:b9:
ce:31:91:12:fd:98:d2:e7:48:9b:94:3f:dd:fd:b2:
08:33:8a:c0:71:5f:fa:18:3c:23:e5:6a:0c:28:41:
de:9f:74:1a:1a:64:83:11:9a:22:a7:b6:af:48:91:
34:e2:b4:af:57:dc:c7:9c:9f:ee:5b:c5:b9:64:22:
a7:f5:2e:45:17:de:ef:d1:e9:37:47:c8:97:94:57:
da:1e:71:71:1c:7d:64:ae:7b:88:c0:56:7b:1c:0d:
af:55:a9:89:cc:03:ca:86:2a:a2:78:f5:01:81:30:
d6:81:1c:d1:59:7b:2f:cb:82:d3:b1:5d:d8:e2:73:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:59:D8:23:F7:97:84:AC:03:81:3B:3F:81:A7:B0:87:26:66:68
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FB8023D850FE11F09F192C9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:83:8e:16:82:d5:7b:26:42:7b:fd:77:1f:bd:90:3e:d2:6b:
41:d3:9b:82:5a:7c:cc:7f:5b:c2:d1:71:6a:c7:3a:1d:f5:7b:
e2:69:f5:d0:b5:97:ef:b1:22:4c:4b:22:1b:62:a1:4e:b1:85:
ec:68:72:c5:60:4f:2e:bb:54:ca:64:1e:70:94:6d:4b:e2:24:
3e:58:dd:d9:c7:fa:6e:40:78:85:8d:a9:4e:20:a8:df:86:54:
14:a4:cb:b0:9d:c4:ba:51:a1:08:b1:76:a8:62:57:00:0d:6d:
b3:87:ac:40:de:0b:e6:4a:7b:b4:17:af:51:30:fc:4f:f9:f0:
32:51:1c:6f:90:46:c7:7e:b5:fa:bf:8b:08:c0:39:26:88:da:
75:07:7c:5e:d9:71:a8:f9:c0:cc:df:aa:85:a1:9f:bd:ea:26:
ca:83:d5:98:2e:54:ce:ed:5e:9c:19:bb:4d:4b:27:21:c9:44:
e3:26:63:46:ce:9f:17:51:46:98:85:2b:ea:3c:6d:e9:2a:8e:
d3:a5:dc:8c:cf:87:e3:be:61:52:3b:c3:f0:f1:a6:89:35:d6:
af:c6:10:44:be:47:70:91:b5:dd:3f:5b:dd:fe:c8:e6:74:f6:
a5:8d:e5:22:5e:0d:fd:ca:e8:38:d4:d9:23:9b:c5:62:7a:3a:
88:43:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:51:33 2025 by rpki-client