Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/016DB26474AC11EEA10A86484AD9E6FC.roa
File: 016DB26474AC11EEA10A86484AD9E6FC.roa (raw, json)
Hash identifier: BICbXSTRBPxi/e9xKo3a3qPE1vb7MEShTjZTicB6C0g=
Subject key identifier: DD:11:5D:08:23:93:6C:3A:4F:8D:43:8E:4E:9B:C3:D8:3F:95:F8:2A
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0505
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/016DB26474AC11EEA10A86484AD9E6FC.roa
Signing time: Fri 27 Oct 2023 09:34:20 +0000
ROA not before: Fri 27 Oct 2023 09:34:17 +0000
ROA not after: Sun 27 Oct 2024 09:34:17 +0000
asID: 328227
IP address blocks: 156.0.121.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Oct 27 09:34:17 2023 GMT
Not After : Oct 27 09:34:17 2024 GMT
Subject: CN=653b841c-dc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2e:8d:0e:97:ea:81:33:a2:80:80:0b:9c:e8:
ac:86:fb:a3:05:01:d4:d9:b8:91:6f:db:7f:f3:7a:
86:10:61:dc:0a:92:56:a4:8a:90:78:9c:1e:d0:bc:
e0:1a:fe:19:4d:da:67:11:c4:9b:b7:3f:bd:b3:76:
e5:7d:4e:3e:df:0e:2e:42:52:49:e1:00:cd:92:45:
32:c7:e3:e1:1d:a2:91:ed:98:c1:58:04:8e:a6:f5:
97:56:e8:e6:a5:56:f5:63:94:65:7c:8f:95:72:d2:
86:30:11:3d:4c:10:04:4e:ca:5d:64:4b:d4:8b:5b:
b3:8e:42:79:70:9e:9a:af:b9:a9:13:43:53:59:11:
cd:f4:73:6c:c4:90:51:7f:7a:4d:9e:13:db:2e:bc:
88:76:0c:82:ac:2c:1e:0f:74:7c:61:28:d3:ee:40:
17:5d:62:73:1a:9b:49:38:e1:67:e7:9f:2a:91:23:
dd:42:94:0a:da:82:d9:bb:f6:27:5d:9c:93:0a:74:
47:e1:8d:30:88:18:8b:f7:7f:e7:79:db:72:e9:94:
1e:5d:8d:0e:ba:29:62:be:ad:20:e2:57:ca:6b:59:
be:41:8f:3a:24:97:7a:6e:47:45:f6:f4:d6:18:96:
db:50:8d:f5:fb:8a:09:46:59:cd:03:93:b7:4d:e6:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:11:5D:08:23:93:6C:3A:4F:8D:43:8E:4E:9B:C3:D8:3F:95:F8:2A
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/016DB26474AC11EEA10A86484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.121.0/24
Signature Algorithm: sha256WithRSAEncryption
51:52:a5:a0:8f:29:94:e8:0d:3f:75:57:c7:86:77:7a:c1:3b:
33:ac:39:87:04:86:19:55:13:66:67:e8:6f:90:af:a7:56:07:
6d:a0:1d:ba:00:f5:a3:4f:ef:71:ca:d5:40:6c:33:22:53:52:
44:0e:82:ee:22:f6:cb:a8:15:69:4b:c7:40:1e:ff:61:d0:85:
c6:3f:7a:80:f4:d3:eb:89:fe:34:ec:a2:ef:97:39:14:62:13:
ff:36:1b:42:91:71:72:62:18:79:d9:e6:38:d3:5f:57:7e:cb:
a5:a3:5e:fe:74:dd:52:07:53:4b:91:4c:1e:54:18:63:dc:5f:
c5:ad:d7:b3:29:df:58:a7:b2:e4:00:bc:b7:d9:50:cf:c0:2d:
5f:4a:e5:27:80:86:1f:d6:92:d4:f9:6b:08:37:08:62:db:86:
dd:1e:79:b4:26:8c:c4:8c:cb:ab:ef:97:25:2e:05:80:f0:b5:
dc:48:1b:1c:c4:fc:3c:a7:08:c7:67:58:9f:81:26:66:58:51:
0a:14:8d:b3:8b:c2:89:10:b6:5c:e2:6f:90:fa:fb:18:c4:48:
bf:e0:d5:68:57:81:26:1a:42:f6:10:5e:59:0d:d9:e1:61:19:
9d:52:24:9b:0d:4a:1a:19:f2:cc:1e:26:07:08:41:0e:b0:23:
1b:3c:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org