Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/95FD966074AC11EE88B1284A4AD9E6FC.roa
File: 95FD966074AC11EE88B1284A4AD9E6FC.roa (raw, json)
Hash identifier: pEEwk1yb6l0jzWOFUaIS1UeBZX7G657+FusAbT5LgOw=
Subject key identifier: EB:E5:1D:24:EB:54:33:1E:64:02:95:9E:8B:0B:44:D7:2C:5D:1D:74
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 050B
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/95FD966074AC11EE88B1284A4AD9E6FC.roa
Signing time: Fri 27 Oct 2023 09:38:29 +0000
ROA not before: Fri 27 Oct 2023 09:38:26 +0000
ROA not after: Sun 27 Oct 2024 09:38:26 +0000
asID: 328227
IP address blocks: 156.0.122.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Oct 27 09:38:26 2023 GMT
Not After : Oct 27 09:38:26 2024 GMT
Subject: CN=653b8515-df75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:7c:20:8e:19:b2:95:9e:30:a2:f4:72:42:
4c:bf:2d:51:72:b9:1a:88:b8:f1:00:cd:d6:7e:81:
61:41:d5:fb:aa:6a:41:35:18:b3:df:c0:38:e5:72:
05:99:c8:76:df:f2:d1:eb:90:98:7a:2e:fb:ce:bb:
52:6c:f8:82:8a:b0:ce:c1:b1:de:be:b6:a3:61:21:
a5:5a:5a:ad:50:ba:ae:d5:fc:bd:7d:57:95:84:b5:
36:58:e0:b2:72:34:47:c1:a9:73:23:1e:e2:4a:96:
43:36:b2:c6:37:54:a9:1f:26:7d:68:ea:4b:e2:83:
5b:0e:5c:3d:96:85:89:46:cb:ca:7f:9d:6f:67:ed:
3c:41:43:3a:4e:71:3e:80:49:fc:08:59:e2:44:67:
81:9d:d5:4f:6b:68:bf:fa:98:70:0a:47:26:42:08:
4d:ca:b0:56:2c:29:48:29:d1:eb:be:57:f1:17:ff:
50:25:8c:33:05:e1:fc:d8:ef:b7:e5:1f:ed:30:58:
da:4e:bd:6b:5f:35:43:fb:07:2c:0c:e8:93:dc:b0:
f0:cb:28:e6:78:b1:ec:d4:1c:af:90:41:b0:2d:8a:
92:87:ea:1d:44:89:1f:73:06:94:8c:60:c6:0d:75:
48:90:0b:08:3c:41:15:35:3b:2c:4d:6b:f6:9b:88:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E5:1D:24:EB:54:33:1E:64:02:95:9E:8B:0B:44:D7:2C:5D:1D:74
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/95FD966074AC11EE88B1284A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.122.0/24
Signature Algorithm: sha256WithRSAEncryption
91:77:59:a5:09:00:21:d0:9e:72:1c:8e:70:3b:92:98:9f:c7:
9b:ec:c7:4b:bc:c6:08:ef:86:24:23:04:9a:cb:91:65:0c:0c:
a9:32:ba:09:96:9f:9b:f6:d5:b0:4b:12:bf:af:28:94:8b:d6:
f3:4f:8f:92:dc:0c:e1:bd:0d:03:30:3d:d5:79:db:fe:1c:5b:
22:ee:1f:51:38:7b:69:ae:cc:ce:07:d0:c2:e4:84:a6:7f:19:
28:5b:f8:d6:e9:3c:ce:c5:4d:d6:6b:aa:bb:a0:bf:0b:ce:94:
f0:53:dc:bd:b8:72:42:52:64:89:41:1e:60:5e:e9:56:4c:3a:
03:e1:39:a7:b8:35:dd:ba:b6:24:23:94:6d:6f:54:8a:86:f8:
86:f7:fa:4e:bd:1a:40:6e:c0:9b:92:00:a9:08:56:a3:9b:8c:
81:9b:81:ad:6d:c1:42:85:a7:b3:5a:86:84:66:e9:f6:cb:1d:
dc:03:6c:13:cb:47:91:08:bd:46:fc:a5:0a:6e:ba:02:a0:bf:
56:61:38:76:be:43:33:14:37:b4:1d:c8:3a:87:13:6a:59:eb:
28:21:d8:f2:6a:2a:c2:52:12:58:33:2a:2d:3f:20:15:60:9d:
af:6c:7b:99:e5:ef:6f:09:ef:a3:4b:00:fe:02:ea:94:45:bc:
45:99:43:87
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBQswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yMzEwMjcwOTM4MjZaFw0yNDEwMjcwOTM4MjZaMBgxFjAU
BgNVBAMTDTY1M2I4NTE1LWRmNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpxXwgjhmylZ4wovRyQky/LVFyuRqIuPEAzdZ+gWFB1fuqakE1GLPfwDjl
cgWZyHbf8tHrkJh6LvvOu1Js+IKKsM7Bsd6+tqNhIaVaWq1Quq7V/L19V5WEtTZY
4LJyNEfBqXMjHuJKlkM2ssY3VKkfJn1o6kvig1sOXD2WhYlGy8p/nW9n7TxBQzpO
cT6ASfwIWeJEZ4Gd1U9raL/6mHAKRyZCCE3KsFYsKUgp0eu+V/EX/1AljDMF4fzY
77flH+0wWNpOvWtfNUP7BywM6JPcsPDLKOZ4sezUHK+QQbAtipKH6h1EiR9zBpSM
YMYNdUiQCwg8QRU1OyxNa/abiAVFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU6+Ud
JOtUMx5kApWeiwtE1yxdHXQwHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVB
MjI4Lzk1RkQ5NjYwNzRBQzExRUU4OEIxMjg0QTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcAHowDQYJKoZIhvcNAQELBQAD
ggEBAJF3WaUJACHQnnIcjnA7kpifx5vsx0u8xgjvhiQjBJrLkWUMDKkyugmWn5v2
1bBLEr+vKJSL1vNPj5LcDOG9DQMwPdV52/4cWyLuH1E4e2muzM4H0MLkhKZ/GShb
+NbpPM7FTdZrqrugvwvOlPBT3L24ckJSZIlBHmBe6VZMOgPhOae4Nd26tiQjlG1v
VIqG+Ib3+k69GkBuwJuSAKkIVqObjIGbga1twUKFp7NahoRm6fbLHdwDbBPLR5EI
vUb8pQpuugKgv1ZhOHa+QzMUN7QdyDqHE2pZ6ygh2PJqKsJSElgzKi0/IBVgna9s
e5nl728J76NLAP4C6pRFvEWZQ4c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org