Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5ED7B93CED2211EFABFB8875762E951A.roa
File: 5ED7B93CED2211EFABFB8875762E951A.roa (raw, json)
Hash identifier: dcUopk6/d6Z84WTognaiVrdh5266YI2l4KjYqBEkzq8=
Subject key identifier: 97:5C:68:18:BE:18:9F:C1:78:04:D6:DA:D0:94:3D:68:57:F2:82:2D
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 066D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5ED7B93CED2211EFABFB8875762E951A.roa
Signing time: Mon 17 Feb 2025 11:28:55 +0000
ROA not before: Mon 17 Feb 2025 11:28:51 +0000
ROA not after: Tue 17 Feb 2026 11:28:51 +0000
asID: 208485
IP address blocks: 196.251.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 11:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Feb 17 11:28:51 2025 GMT
Not After : Feb 17 11:28:51 2026 GMT
Subject: CN=67b31d77-6a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:99:85:67:a8:70:00:06:d4:3e:b7:94:99:
25:83:69:50:43:03:54:43:9f:3a:3d:de:21:e7:23:
a9:b6:65:6b:ba:b5:01:90:fd:75:01:28:1f:f0:c4:
67:b9:b0:e4:f6:68:06:03:cf:13:c1:ca:f1:14:a7:
66:01:0a:51:6e:8d:be:41:df:f3:fb:00:47:a8:d4:
61:3f:7a:58:50:7c:3e:91:51:31:38:cb:de:a3:c7:
79:d7:43:c0:12:b4:02:83:3c:ba:2e:7a:af:35:73:
f4:17:ce:f4:1a:e1:ec:5c:e5:12:f4:18:ee:e1:3b:
82:c9:63:0f:04:42:64:3e:f4:54:5e:4f:4c:0e:35:
81:3d:31:97:b7:bd:e2:76:67:df:15:54:c5:a0:39:
69:0b:50:aa:af:57:bb:08:2c:7e:b5:36:15:d9:fd:
18:fd:53:26:7a:5e:e8:e6:fa:ed:46:08:c3:45:d4:
09:99:5c:34:d0:06:c2:4b:54:50:4f:fc:3f:09:ae:
3a:c3:4f:ad:e5:d9:1c:56:71:d7:62:a6:45:62:29:
71:98:bd:7c:0d:e6:7c:7c:bf:e8:4e:be:88:92:fe:
25:bb:0e:6e:3c:47:1f:ee:8f:ad:33:d6:ae:de:18:
60:c8:9f:51:38:b5:fb:bf:08:3f:a4:78:93:8e:fc:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:68:18:BE:18:9F:C1:78:04:D6:DA:D0:94:3D:68:57:F2:82:2D
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5ED7B93CED2211EFABFB8875762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c3:33:c8:ec:f7:47:72:ff:cc:87:ef:fc:a7:3e:e5:4a:0a:
14:02:44:84:b9:27:37:5e:95:49:c3:af:48:2d:82:43:6f:5d:
f8:dd:56:c3:41:99:7f:ab:a5:d0:6a:d3:55:3f:4b:21:46:cf:
ca:07:89:b8:8d:e1:94:bd:ab:00:23:ed:36:4d:e3:1c:10:c1:
de:36:18:10:af:49:09:5f:de:e7:4a:2d:93:bd:ea:43:7b:b0:
ee:07:83:13:ab:73:49:a2:06:4a:60:e3:3c:c4:9e:be:c8:cb:
5d:30:42:f5:48:fa:08:ad:25:c9:02:ee:20:09:01:47:f9:17:
8f:0a:bb:0b:1d:79:11:42:87:9d:e6:06:dd:f8:cb:90:85:e4:
4f:97:06:68:0f:26:0d:d9:70:00:25:0b:8e:42:d8:86:74:52:
4e:0e:d5:df:6b:34:ae:e7:e0:4c:dd:e7:8c:48:29:79:80:3c:
1f:11:17:06:5d:c5:1c:6d:f7:c7:e3:32:bd:b9:4e:00:4b:e6:
15:8f:42:ca:02:11:35:d6:11:cd:c7:6d:e9:75:8a:7b:c2:75:
19:af:20:ae:c8:fb:de:29:eb:bb:a0:09:fd:20:83:6c:51:c7:
0b:b3:32:3c:ed:96:9c:4e:0d:97:4b:6d:e0:6e:9c:fc:72:86:
f8:f6:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:36:14 2025 by rpki-client