Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D78D0670C69E11EF8C7B0198762E951A.roa
File: D78D0670C69E11EF8C7B0198762E951A.roa (raw, json)
Hash identifier: /s6dbX1q578U7OPhOXPM6OW4o0tzcKmDj+tGYy5Y8DA=
Subject key identifier: 39:12:22:6B:FF:BA:FB:DB:B3:FA:6B:D7:62:F2:5B:1B:83:9B:9B:15
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0489
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D78D0670C69E11EF8C7B0198762E951A.roa
Signing time: Mon 30 Dec 2024 11:11:40 +0000
ROA not before: Mon 30 Dec 2024 11:11:36 +0000
ROA not after: Wed 24 Dec 2025 11:11:36 +0000
asID: 329007
IP address blocks: 196.251.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 06:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Dec 30 11:11:36 2024 GMT
Not After : Dec 24 11:11:36 2025 GMT
Subject: CN=67727fec-85a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:16:3b:0a:ab:df:83:ea:12:ad:2f:11:4a:
0b:d8:2a:e9:e8:1f:80:6c:60:98:31:7b:fb:94:0d:
8f:82:76:6a:b0:a2:8c:93:4f:52:a3:81:9e:0a:81:
15:6b:90:83:30:b7:c4:82:a0:7a:cd:4c:7c:06:74:
f7:f1:93:dc:a6:a0:8b:55:87:d7:4a:bb:65:48:2d:
2c:a0:29:ed:1f:4e:a1:9d:f1:53:8a:ed:fc:16:0d:
3b:25:65:50:80:52:98:63:bb:03:af:31:74:16:b2:
51:b2:4f:ce:8f:15:3b:1f:4e:98:e3:08:9b:d9:57:
77:ac:e0:ae:e7:b8:03:dc:dd:9b:7f:c4:d8:6a:62:
33:c9:2b:13:d9:58:a8:f7:04:f4:9a:1f:90:3a:0c:
31:54:00:d1:63:60:f4:61:47:90:ec:c2:17:d8:5f:
e7:25:34:ed:58:c4:26:ae:77:1c:78:29:b8:5b:9d:
f8:24:8a:ed:f4:64:a0:90:aa:4c:77:63:3a:d4:f8:
6d:b3:9b:ff:0f:1c:2b:94:93:0e:b1:73:d7:12:14:
85:e1:4f:c8:32:c8:f7:cf:3b:b2:38:f6:8c:8c:34:
29:6a:c4:b3:02:ec:17:d7:c2:83:7a:c9:63:9b:f6:
9c:53:21:9b:71:3a:ad:92:a2:fc:c7:c2:92:13:df:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:12:22:6B:FF:BA:FB:DB:B3:FA:6B:D7:62:F2:5B:1B:83:9B:9B:15
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D78D0670C69E11EF8C7B0198762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.104.0/24
Signature Algorithm: sha256WithRSAEncryption
12:21:90:9c:25:3f:ce:fc:c3:81:22:8c:cd:e4:00:40:4c:31:
55:f5:74:d3:d4:7d:a0:2d:7c:bc:d5:c9:69:32:63:d4:2c:f8:
fc:e2:51:27:7d:2c:2f:cf:f7:16:47:ca:c9:6a:8e:24:c7:b1:
ae:98:f8:11:db:d6:3f:e6:1d:9e:19:0c:5c:05:b4:e5:5e:ae:
7f:b3:1e:1c:36:9b:3c:ab:77:ef:d6:76:36:79:c4:a3:5d:ba:
c0:3c:0c:7d:05:de:24:a0:25:d0:c8:ee:eb:0f:1c:f0:1d:59:
56:fa:a0:f5:8b:c6:54:19:38:d8:e2:dd:5b:df:63:2a:24:e1:
c1:12:6a:83:c3:cd:c8:66:14:f0:59:44:1a:14:8b:41:dc:4b:
83:84:32:47:03:9a:81:cb:ec:23:a3:d3:3f:73:83:4a:1b:b6:
71:64:89:4c:92:c0:70:f5:d0:73:59:81:d5:ee:2d:88:1f:ab:
e2:a5:5e:06:34:59:12:b1:a3:f3:75:54:66:87:c1:2d:07:62:
72:7c:b5:09:77:e6:18:27:cc:2f:5e:dd:18:70:28:92:bf:47:
6b:ba:a2:35:3a:d2:38:b8:ee:03:24:20:7c:15:5e:11:7a:18:
71:b9:ee:12:2e:9f:31:89:14:c2:29:46:9b:41:c3:55:69:7d:
a6:b1:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:30 2025 by rpki-client