Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/01B24F2C227B11F0AB3F3FA7DAE4EC9C.roa
File: 01B24F2C227B11F0AB3F3FA7DAE4EC9C.roa (raw, json)
Hash identifier: EBkQmx4VnUsbnVowK6zpIWaT4ZCD4FMjj6zWwa/x9kM=
Subject key identifier: CD:32:2F:F7:EC:A5:B5:1F:51:20:5A:AF:A1:1B:FA:69:E0:D0:64:5D
Certificate issuer: /CN=F36C6D54AF/serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Certificate serial: 04
Authority key identifier: 40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/01B24F2C227B11F0AB3F3FA7DAE4EC9C.roa
Signing time: Sat 26 Apr 2025 08:46:56 +0000
ROA not before: Sat 26 Apr 2025 08:46:51 +0000
ROA not after: Sat 25 Apr 2026 08:46:51 +0000
asID: 329489
IP address blocks: 102.207.249.0/26 maxlen: 26
Validation: Failed, certificate revoked on Tue 29 Apr 2025 09:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6D54AF, serialNumber=408958881B94E35681EDC1D1DF0859F77136A0A5
Validity
Not Before: Apr 26 08:46:51 2025 GMT
Not After : Apr 25 08:46:51 2026 GMT
Subject: CN=680c9d80-d34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:ab:5b:0d:a1:c5:8c:6a:54:3a:15:69:43:
4f:c1:ba:6e:4b:ca:3a:40:d7:13:d5:05:bd:2d:e0:
e6:91:82:65:54:62:0e:df:ad:e9:e1:fa:cf:31:30:
97:ff:b3:cb:eb:3a:b1:3c:fa:bb:8d:74:7d:f0:74:
15:16:d8:2c:aa:47:c6:f9:9d:ef:21:59:d1:21:d3:
6a:3c:62:3f:b1:94:87:7d:10:08:1b:3a:21:f0:23:
9e:00:29:81:4e:8c:ca:b6:08:9f:43:d8:8b:68:18:
3f:d4:45:59:5b:48:18:d9:e3:ad:ad:d1:21:81:05:
0d:b6:e5:02:3a:6d:d4:19:f3:39:44:65:6b:81:5d:
3c:9a:80:b0:3a:5c:ed:39:4a:22:ac:40:b0:54:19:
82:77:45:04:3b:13:ab:74:1f:9e:d0:08:3e:b8:ac:
04:b1:6b:36:2e:ba:6a:a2:65:d2:b9:d5:ec:9b:3d:
85:89:70:86:d2:97:35:30:5e:8b:58:5a:14:88:35:
2c:00:6c:e7:79:80:1e:1b:9e:7c:56:4a:a2:4d:f7:
80:8f:93:10:0a:07:2a:31:34:26:df:58:25:a9:52:
4e:5f:a7:91:a5:65:c2:8c:c2:8d:1d:a5:42:ba:0a:
aa:bd:bf:38:f6:cd:6f:a6:64:6e:7b:4d:ad:eb:e9:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:2F:F7:EC:A5:B5:1F:51:20:5A:AF:A1:1B:FA:69:E0:D0:64:5D
X509v3 Authority Key Identifier:
keyid:40:89:58:88:1B:94:E3:56:81:ED:C1:D1:DF:08:59:F7:71:36:A0:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/QIlYiBuU41aB7cHR3whZ93E2oKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QIlYiBuU41aB7cHR3whZ93E2oKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6D54/F46D1186227411F0A0FDF27EDAE4EC9C/01B24F2C227B11F0AB3F3FA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.249.0/26
Signature Algorithm: sha256WithRSAEncryption
0a:0d:cd:6a:50:b8:23:13:2b:b3:f9:a9:5a:90:14:a3:3b:f0:
a0:82:d9:fa:24:f4:30:40:24:d0:b4:57:14:e0:8c:be:31:98:
94:77:1e:c8:ce:68:7a:8e:3a:55:70:4b:dd:12:6c:b2:03:cd:
c1:90:d9:e5:a1:1f:9b:18:9f:3c:14:77:6e:84:0c:99:5b:7f:
8f:5c:aa:60:ec:14:f7:c7:48:0f:2b:e4:07:c0:f2:00:8f:e0:
3e:0c:62:39:8e:43:d0:d8:71:4f:3c:4a:27:89:1b:45:91:a2:
ab:51:b4:b6:29:38:c1:9e:9c:b1:ad:95:9b:7a:44:6c:df:3b:
3d:4c:6a:78:33:20:f1:f8:a9:ec:fc:25:77:52:02:50:c5:88:
6e:17:86:ee:ba:bb:e3:3a:89:46:a1:9f:10:81:bd:75:ff:0f:
72:c5:8a:6e:74:53:9d:26:f0:f9:f3:d3:6d:b5:03:12:0b:ca:
79:56:e8:25:c6:11:ff:32:17:7a:17:34:2c:45:11:37:c3:61:
99:cf:18:e0:de:d9:4f:2e:4c:35:e8:bc:52:8d:d2:4c:06:9c:
0b:b8:72:bf:e8:69:fb:a5:d2:0c:0b:5a:0e:31:f2:9d:eb:f2:
e8:ba:0c:57:92:20:da:51:38:ce:12:55:07:15:3e:4b:60:e6:
b8:4f:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:33 2025 by rpki-client