Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/7333B27E078111EE8BB7C55D4AD9E6FC.roa
File: 7333B27E078111EE8BB7C55D4AD9E6FC.roa (raw, json)
Hash identifier: hfj4Z30zqyBzqYvmS4i8EWcL4Gb4PicKLmi6N9hH1aw=
Subject key identifier: 44:35:2A:3A:55:03:AD:CF:B5:B0:3F:3F:42:98:CE:7E:89:16:10:DA
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03BA
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/7333B27E078111EE8BB7C55D4AD9E6FC.roa
Signing time: Sat 10 Jun 2023 11:25:06 +0000
ROA not before: Sat 10 Jun 2023 11:25:02 +0000
ROA not after: Mon 10 Jun 2024 11:25:02 +0000
asID: 207084
IP address blocks: 156.0.109.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 10 11:25:02 2023 GMT
Not After : Jun 10 11:25:02 2024 GMT
Subject: CN=64845d92-33ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:1c:e4:36:3f:d3:c6:c3:72:cd:5e:02:fa:
ea:61:99:40:13:a4:7e:43:2f:38:6a:3d:eb:92:38:
4d:ef:44:29:7c:8f:09:a3:85:94:fe:f6:4b:ba:81:
32:52:49:40:7c:97:57:16:84:54:ff:ba:aa:6f:bf:
4c:f9:8d:a1:a8:41:a2:e6:93:a6:68:5a:71:88:01:
18:b0:8e:25:1d:e0:cb:21:e3:fb:f6:22:59:21:78:
e8:2e:31:28:85:9e:4c:59:80:eb:e6:b5:78:62:1a:
28:31:f8:5d:74:09:89:6d:e9:3a:9e:9a:a6:d6:f9:
e2:5f:4f:82:f2:bc:35:06:46:10:3b:f0:b5:71:57:
5c:68:ba:20:1a:f7:a1:df:97:89:1e:b0:70:cd:ca:
c0:f6:6e:ca:6e:e4:bf:33:4f:bd:26:da:39:3f:8d:
b8:41:2e:e2:31:6d:9d:73:04:22:82:6c:07:aa:c8:
09:6c:ca:77:4b:5e:25:01:7f:59:1c:d3:cb:6c:52:
72:16:e0:1e:a1:d7:a2:2b:20:9e:c3:a5:44:d7:92:
55:55:c3:7c:36:5d:45:b4:90:91:2c:a1:43:f4:54:
d9:5f:f4:86:16:05:9d:61:f3:26:dd:35:f2:41:f4:
fe:a1:a2:19:80:00:0c:9b:4b:be:fd:ad:e6:eb:d1:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:2A:3A:55:03:AD:CF:B5:B0:3F:3F:42:98:CE:7E:89:16:10:DA
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/7333B27E078111EE8BB7C55D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.109.0/24
Signature Algorithm: sha256WithRSAEncryption
83:96:7c:8c:c8:8b:92:96:2a:41:6b:9b:06:9f:c9:21:03:9a:
40:d2:eb:25:78:e4:a3:2b:0c:5d:4e:6d:4f:ba:f7:fe:57:71:
a8:31:25:eb:c4:76:73:f8:e1:2c:01:19:5c:48:5c:2d:59:7a:
14:bf:a3:68:d4:c9:c4:c0:e9:e9:85:d5:83:28:fc:0c:57:83:
32:df:d6:92:81:dd:ea:a4:1b:2f:eb:76:b0:35:ab:a0:55:a7:
36:11:35:a1:8e:ac:d5:fb:c9:3a:cc:96:0b:fc:7e:d3:d7:13:
2c:83:e9:27:ef:0c:41:20:8b:45:92:03:7a:44:76:2d:1f:06:
df:c7:f2:b3:b9:09:f6:35:e4:65:c5:2f:8d:21:04:d7:ff:c5:
fd:f2:57:bf:f9:2b:be:19:74:f0:0a:0c:ab:d6:a6:fa:f2:42:
8f:80:e9:eb:70:37:bf:17:79:0a:cf:fe:92:8e:57:09:1f:89:
7f:bc:50:b1:b2:e7:48:a9:b9:75:9e:9e:6f:f4:46:42:00:84:
59:8f:cb:bf:64:1c:0c:1b:62:90:33:3d:05:26:82:4f:06:3d:
9e:71:5d:54:a6:6a:0d:e7:ed:7e:16:e3:15:7c:0b:6c:6a:70:
15:ce:e3:f1:51:c2:ab:f4:f8:88:88:2f:32:77:e5:5e:6c:70:
8b:5a:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org