Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8C8B73E4C6A011EFB5E3C9A3762E951A.roa
File: 8C8B73E4C6A011EFB5E3C9A3762E951A.roa (raw, json)
Hash identifier: Sd3IIC+bCN+pY1Rk0lyhLYgsblzsSreHrLqJ3v/Qfgg=
Subject key identifier: 26:EA:5B:C1:41:9A:EC:22:A4:BE:97:65:22:1E:27:37:58:83:58:5E
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04B0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8C8B73E4C6A011EFB5E3C9A3762E951A.roa
Signing time: Mon 30 Dec 2024 11:23:53 +0000
ROA not before: Mon 30 Dec 2024 11:23:49 +0000
ROA not after: Wed 24 Dec 2025 11:23:49 +0000
asID: 329007
IP address blocks: 196.251.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 13:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1200 (0x4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:23:49 2024 GMT
Not After : Dec 24 11:23:49 2025 GMT
Subject: CN=677282c9-a3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:ae:f1:29:2c:7d:e7:02:c3:fc:db:9a:88:
9b:07:95:1a:b1:cb:ba:61:90:c9:25:20:aa:b4:ba:
d1:19:cf:58:e2:02:21:d6:74:7a:44:53:6a:34:fc:
0b:d2:c6:ea:bf:96:27:d2:03:14:9b:08:4d:2d:c0:
8c:e2:7d:f7:4e:3b:1f:47:ca:0d:99:dc:b4:d0:c9:
58:f7:10:06:d4:92:94:22:fd:ea:fa:71:17:b6:63:
13:17:c6:27:44:af:27:d8:24:52:3a:5f:58:8f:de:
bf:dd:c4:f6:10:32:70:6b:4e:b4:2c:0b:6a:93:21:
b8:5d:09:3f:ff:79:3b:ce:7f:ba:fa:0a:57:f9:87:
ef:11:cd:6b:a6:ba:87:e0:13:09:b3:c6:e3:6a:48:
9a:64:2d:ce:6c:4f:af:45:16:9b:3c:89:3d:02:ea:
c6:ee:f0:aa:43:39:da:1e:f8:70:88:61:24:f2:c5:
a4:d7:e7:56:52:b1:d1:b4:3e:42:74:26:6a:27:f4:
93:62:3c:9d:39:31:63:41:c3:00:b2:db:e9:4a:76:
20:7b:79:eb:d1:85:70:9b:c6:c7:a5:6c:62:be:b0:
2a:90:dd:d7:87:79:ef:29:12:e8:e2:c0:11:0a:03:
84:cd:37:b9:31:0d:c3:52:29:b6:04:19:ff:6a:73:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:5B:C1:41:9A:EC:22:A4:BE:97:65:22:1E:27:37:58:83:58:5E
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/8C8B73E4C6A011EFB5E3C9A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:bd:89:fe:2b:e7:1b:0d:67:e7:40:91:ac:25:f1:48:52:bc:
09:81:4b:08:25:24:1f:c9:46:0e:63:15:2b:ac:6e:74:1f:57:
bd:42:46:3e:39:5b:2a:cc:8f:da:51:1b:fb:c1:91:f1:4d:38:
1f:16:0d:15:20:1b:cd:91:42:5e:78:94:a0:91:28:c5:ae:23:
d2:39:9c:1e:26:91:3c:2f:a5:3e:33:86:b8:47:f3:b0:bc:a4:
31:b4:b6:91:11:cb:57:d0:55:69:ea:d7:f2:e8:3f:b2:43:79:
ca:18:ec:5e:67:6e:97:8e:12:45:1d:4a:7a:f3:d6:c1:59:4e:
14:7a:3e:e7:da:4a:0e:c9:64:5b:4f:8f:0e:4d:ac:d0:b7:dd:
6e:94:61:2a:c5:b8:83:05:07:f8:89:85:66:ef:22:02:3b:82:
09:a1:96:f4:d4:a0:ca:f6:7b:d7:66:66:e5:f8:4b:44:ba:2d:
1e:86:ae:ec:11:36:9c:2c:c5:83:e3:82:2c:9f:92:c5:32:c2:
41:32:4b:e5:20:aa:d7:62:cf:34:38:1d:64:84:db:28:c9:21:
8d:94:30:be:a1:1b:0c:50:37:26:30:02:65:97:34:22:30:80:
2f:6f:f2:f1:5f:a5:5d:be:4b:47:c6:9b:84:cc:73:54:2f:67:
b5:95:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:38 2025 by rpki-client