Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/914A867E174511EEB2BA61134AD9E6FC.roa
File: 914A867E174511EEB2BA61134AD9E6FC.roa (raw, json)
Hash identifier: aJx7p0pl8SANteiog9EH+t5yh6nzu2HT9v0K7N6MnBs=
Subject key identifier: F8:95:06:AD:A6:87:3C:9B:2C:20:F9:85:CC:CE:C8:27:02:B4:DB:DE
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03E0
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/914A867E174511EEB2BA61134AD9E6FC.roa
Signing time: Fri 30 Jun 2023 12:56:45 +0000
ROA not before: Fri 30 Jun 2023 12:56:42 +0000
ROA not after: Sun 30 Jun 2024 12:56:42 +0000
asID: 328227
IP address blocks: 156.0.103.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR, serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 30 12:56:42 2023 GMT
Not After : Jun 30 12:56:42 2024 GMT
Subject: CN=649ed10d-fcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:2c:6b:25:e5:4a:36:14:56:f7:99:c3:2f:
74:c3:1c:85:ef:14:67:64:55:4e:c7:cd:f1:c0:a7:
f9:a4:70:29:5c:3d:97:ab:ae:3d:7a:a5:46:29:54:
b7:d2:5d:38:41:13:39:a6:cf:5a:fd:3c:7c:04:59:
a1:38:44:ef:3f:4a:d1:03:e2:12:56:de:1e:98:4b:
88:1a:64:ab:79:07:f6:d1:4b:4c:c2:47:77:48:8d:
64:e7:52:ad:79:32:35:3a:18:c0:d8:83:ac:d0:6b:
44:4c:57:d6:4e:dc:ff:6c:ab:c0:de:73:5e:a8:48:
93:1d:70:f6:78:f3:d4:4c:cc:b3:c8:dd:a6:ab:70:
56:1d:33:1c:0a:6c:79:e4:74:57:c4:81:8c:73:7f:
8a:67:a6:a4:8e:95:9f:aa:bc:f0:64:8a:f7:60:d8:
4f:44:e8:63:73:92:0b:6f:5d:f1:6d:88:93:47:05:
c8:2d:3b:d8:b8:03:7d:b2:5f:de:16:d1:e4:0d:d8:
13:25:21:2e:ce:80:f9:b8:44:15:e9:a2:bd:16:a2:
7a:d4:db:19:43:6a:9a:5c:99:4f:d6:0c:69:d9:e9:
52:3f:28:01:7d:05:c0:c6:46:82:46:f5:86:95:ab:
00:30:11:28:20:bf:02:12:d3:a0:d8:84:d3:2f:3b:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:06:AD:A6:87:3C:9B:2C:20:F9:85:CC:CE:C8:27:02:B4:DB:DE
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/914A867E174511EEB2BA61134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.103.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6e:2d:e9:97:09:27:8c:a7:38:5a:99:f0:0c:a3:04:44:54:
30:1e:2e:38:3d:ff:b2:7b:50:13:fc:eb:34:e7:c9:6b:05:f3:
3f:e7:16:74:10:48:49:1d:4f:56:b1:4d:0f:74:a0:ae:d8:7a:
c7:4c:2a:f5:22:c6:e9:38:b2:b1:d4:e6:36:38:c6:e2:57:85:
4a:20:8a:c2:e0:8a:a1:2c:b3:fc:89:8e:d6:9f:14:c3:c5:93:
c6:18:c5:f2:2f:52:84:dd:d0:f8:99:7f:40:9b:76:e9:b5:29:
dc:5c:e5:3d:41:77:39:b8:41:be:89:38:bf:6f:3c:33:d3:27:
a7:52:bf:e7:c4:43:81:d3:09:b4:a0:c1:d0:c1:5e:54:ec:d3:
2f:4d:40:a2:6d:9a:a0:3f:e2:40:9e:b5:c0:ac:4c:c8:4d:e7:
76:40:9a:02:e4:a5:8d:8e:3e:0a:a3:2a:0d:56:96:6f:ba:97:
60:06:79:32:7d:ec:b8:f5:a8:95:b7:42:ba:72:38:ef:29:ae:
81:ca:d1:54:c9:0d:2c:25:96:7a:e5:00:10:38:cd:b1:d0:67:
f6:e6:b6:9d:2e:07:33:50:0b:53:41:b9:70:17:89:2e:72:c0:
6b:ba:cd:78:8e:09:69:7d:d1:13:28:5c:be:be:61:45:b8:56:
c3:55:14:01
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yMzA2MzAxMjU2NDJaFw0yNDA2MzAxMjU2NDJaMBgxFjAU
BgNVBAMTDTY0OWVkMTBkLWZjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLSixrJeVKNhRW95nDL3TDHIXvFGdkVU7HzfHAp/mkcClcPZerrj16pUYp
VLfSXThBEzmmz1r9PHwEWaE4RO8/StED4hJW3h6YS4gaZKt5B/bRS0zCR3dIjWTn
Uq15MjU6GMDYg6zQa0RMV9ZO3P9sq8Dec16oSJMdcPZ489RMzLPI3aarcFYdMxwK
bHnkdFfEgYxzf4pnpqSOlZ+qvPBkivdg2E9E6GNzkgtvXfFtiJNHBcgtO9i4A32y
X94W0eQN2BMlIS7OgPm4RBXpor0WonrU2xlDappcmU/WDGnZ6VI/KAF9BcDGRoJG
9YaVqwAwESggvwIS06DYhNMvOwsfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+JUG
raaHPJssIPmFzM7IJwK0294wHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVB
MjI4LzkxNEE4NjdFMTc0NTExRUVCMkJBNjExMzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcAGcwDQYJKoZIhvcNAQELBQAD
ggEBAGJuLemXCSeMpzhamfAMowREVDAeLjg9/7J7UBP86zTnyWsF8z/nFnQQSEkd
T1axTQ90oK7YesdMKvUixuk4srHU5jY4xuJXhUogisLgiqEss/yJjtafFMPFk8YY
xfIvUoTd0PiZf0Cbdum1Kdxc5T1Bdzm4Qb6JOL9vPDPTJ6dSv+fEQ4HTCbSgwdDB
XlTs0y9NQKJtmqA/4kCetcCsTMhN53ZAmgLkpY2OPgqjKg1Wlm+6l2AGeTJ97Lj1
qJW3QrpyOO8proHK0VTJDSwllnrlABA4zbHQZ/bmtp0uBzNQC1NBuXAXiS5ywGu6
zXiOCWl90RMoXL6+YUW4VsNVFAE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:47:54 2025 by rpki-client