Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6C3BE0D8174711EEAFB80C194AD9E6FC.roa
File: 6C3BE0D8174711EEAFB80C194AD9E6FC.roa (raw, json)
Hash identifier: S8TwgcXhs861gAs67uchBh/yWLKPLICx71ymf4ebM9s=
Subject key identifier: AF:9D:E9:FF:48:B7:72:E8:8A:25:24:CD:9F:AC:22:FD:D4:31:1A:1C
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03EC
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6C3BE0D8174711EEAFB80C194AD9E6FC.roa
Signing time: Fri 30 Jun 2023 13:10:02 +0000
ROA not before: Fri 30 Jun 2023 13:09:59 +0000
ROA not after: Sun 30 Jun 2024 13:09:59 +0000
asID: 21082
IP address blocks: 156.0.110.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 30 13:09:59 2023 GMT
Not After : Jun 30 13:09:59 2024 GMT
Subject: CN=649ed42a-6cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:47:b9:bb:6d:f4:61:60:a2:15:24:ee:40:
2e:b7:2a:2e:0f:da:03:9e:00:4e:7b:67:47:cf:e2:
a4:3d:68:93:f5:a8:a3:6a:1d:d9:cd:f0:52:e1:dd:
ef:ec:2c:ab:92:48:f8:68:bf:4a:2a:6c:0c:a5:b6:
bc:00:ab:8f:78:5c:a1:60:e0:36:98:42:ae:d7:a3:
a0:69:96:6f:b6:ed:b4:cc:da:23:85:da:74:5b:33:
d8:92:a3:d1:cc:b5:f3:b0:49:0b:24:b3:04:00:40:
fb:9a:cc:71:aa:a5:79:45:79:4f:51:9e:78:e2:24:
c4:7c:67:f0:da:dc:a4:ee:02:2b:33:2e:d9:55:e8:
db:24:3a:64:f9:f0:25:60:1c:74:0f:47:55:68:8d:
5b:e5:c1:51:b9:0f:67:50:ef:14:bb:67:97:cb:65:
e2:71:7f:f0:13:2f:32:ba:61:7a:07:ce:7a:f1:da:
82:41:cc:02:58:a6:89:15:f1:70:e8:3d:51:f1:b0:
71:73:88:35:ca:90:10:77:9b:fe:1c:07:6b:68:c4:
a2:88:fd:54:c9:08:29:71:93:e2:45:68:05:f3:b4:
dd:38:03:de:81:a2:75:c5:50:02:6a:d6:26:c7:2f:
85:fb:02:82:ae:3a:9f:82:a4:f7:a6:dd:9b:f5:6e:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:E9:FF:48:B7:72:E8:8A:25:24:CD:9F:AC:22:FD:D4:31:1A:1C
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6C3BE0D8174711EEAFB80C194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.110.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d4:73:b9:a8:98:29:78:05:cf:c3:54:e0:a0:ae:fe:f8:4d:
9f:f4:5e:08:f3:43:d0:97:68:d5:71:cc:10:c0:02:75:62:72:
be:bd:49:b0:b6:ae:33:da:fb:c5:cc:1f:37:f3:80:5d:27:40:
76:77:d5:52:f4:64:d3:4f:3f:42:56:f7:f6:1d:31:1a:8d:39:
8c:b8:84:ad:90:2a:41:5a:1c:5a:08:60:02:96:84:6a:67:63:
74:1c:60:2a:09:51:23:43:1e:ce:be:95:d9:77:fa:08:6d:76:
b4:04:6f:10:9f:79:30:e3:d5:60:86:73:3e:7b:dd:04:fe:ac:
30:07:eb:61:d1:d1:84:59:a2:70:89:95:08:42:a1:55:76:5b:
08:03:be:6d:97:2a:80:0b:53:87:31:b1:f4:50:40:87:c3:de:
2b:24:a9:41:7d:70:de:11:48:10:bb:fb:13:82:5a:ac:b1:ae:
34:91:17:5e:5a:f7:ff:f1:0f:6f:32:6e:dd:c8:4b:d3:07:6d:
e2:68:0b:b3:a2:ca:0b:05:c6:7a:5b:6d:17:7d:0f:60:46:e1:
3b:a7:75:0d:35:78:33:ad:35:94:1d:e0:a7:b2:fe:f3:10:1c:
29:58:44:5c:f4:14:44:e3:46:7d:67:b9:86:d1:f2:ba:7a:6f:
9c:e6:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org