Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3282E934F96711EDA133C5854AD9E6FC.roa
File: 3282E934F96711EDA133C5854AD9E6FC.roa (raw, json)
Hash identifier: g0r3YDK4CAb/DBKiBxLO/ynDQ55CXhcEDvsizZLje4I=
Subject key identifier: 14:09:DF:63:6C:68:B8:EC:37:DF:8A:12:85:3F:73:0F:CC:8B:47:BC
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03A3
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3282E934F96711EDA133C5854AD9E6FC.roa
Signing time: Tue 23 May 2023 12:41:54 +0000
ROA not before: Tue 23 May 2023 12:41:48 +0000
ROA not after: Thu 23 May 2024 12:41:48 +0000
asID: 207713
IP address blocks: 156.0.127.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: May 23 12:41:48 2023 GMT
Not After : May 23 12:41:48 2024 GMT
Subject: CN=646cb492-0390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:ce:dd:9f:b8:0f:99:53:80:ce:69:f3:e2:
25:af:d2:f9:7c:ef:6e:4b:63:0e:77:58:b6:32:20:
c1:88:be:67:2a:4e:34:c1:a9:02:54:5a:9f:4c:59:
b8:0e:94:d4:35:27:7d:81:99:38:c7:a8:52:72:7b:
5d:22:4d:0e:6e:d9:6c:96:3e:30:e5:96:ee:58:99:
04:6a:91:05:9d:b4:d0:b9:9f:30:00:1d:a1:1b:c1:
b6:61:5e:04:d2:33:b1:c5:10:5e:7d:11:f7:39:33:
9c:d5:55:8f:30:ca:67:43:c6:5e:ea:13:90:93:d4:
36:ef:a8:74:24:85:25:bc:57:b3:e5:b7:3b:4a:00:
b5:00:e9:e3:6e:9d:82:a7:02:62:b6:f5:24:72:4c:
6a:f9:50:9d:d6:41:4b:ae:25:ad:82:9d:1d:f0:0e:
8b:d2:61:44:ea:d5:66:45:aa:bd:74:03:50:3b:83:
d0:67:34:d3:3c:13:e7:8a:b4:a7:87:45:bf:41:19:
fd:f4:5b:68:05:c3:5f:ba:9c:19:3e:6f:3a:e0:2a:
5e:da:d7:f7:8b:30:21:c2:79:7d:e0:d4:78:da:eb:
7f:a0:cd:52:5a:bd:1b:e8:de:20:24:6c:04:6f:ea:
2d:10:0e:c0:34:33:91:fa:3d:a8:06:d8:b1:80:ee:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:09:DF:63:6C:68:B8:EC:37:DF:8A:12:85:3F:73:0F:CC:8B:47:BC
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3282E934F96711EDA133C5854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.127.0/24
Signature Algorithm: sha256WithRSAEncryption
54:40:23:30:77:18:c6:31:48:18:93:19:c5:d8:7e:cd:23:8d:
fd:54:9b:ba:17:55:83:2e:6d:af:0e:4b:17:ab:da:44:e3:56:
70:d9:83:d3:c0:b8:c8:70:c8:ca:f7:8c:55:d0:62:18:8c:43:
cb:72:d8:e4:1d:6e:ea:6a:7e:93:39:4f:e6:1e:6b:a8:ac:73:
b4:48:bf:26:a5:89:2c:f0:79:a0:73:85:dd:7e:4b:d0:a2:d7:
3f:a7:46:c6:6e:29:cf:41:62:0c:fa:e7:9a:fe:2b:dc:8c:48:
2d:48:48:2f:ac:8e:cc:6d:ce:01:f8:1f:8a:cc:16:31:1b:87:
22:34:ed:69:44:b4:89:33:c8:f6:74:96:6c:d8:d4:57:12:dd:
bb:a7:f1:ef:bd:03:8d:3d:ae:9b:46:8d:4a:15:ef:3b:d9:cc:
7f:80:c1:59:e6:1c:c3:27:bd:d9:14:61:e6:35:e4:4d:1b:1a:
55:aa:75:8a:d2:63:4e:76:ec:ac:a9:47:ea:71:f8:cc:34:5e:
bf:5c:1c:6c:96:56:5f:9b:28:b4:d2:f5:f0:92:45:66:4a:82:
06:bb:f2:6b:00:3d:20:32:86:1f:34:4b:a9:05:c4:d0:26:8f:
e5:19:7b:68:89:48:41:4f:3c:e1:ff:8c:f4:60:c2:3f:17:88:
be:6f:75:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org