Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/C65962C8174411EEBA311D114AD9E6FC.roa
File: C65962C8174411EEBA311D114AD9E6FC.roa (raw, json)
Hash identifier: qp6dJ2slkEPV9IsvH8tgflCAU2GO4IhJYpzpZoY+24c=
Subject key identifier: 4B:73:98:35:B5:ED:04:24:BC:6B:1C:EF:B6:1E:0D:96:D4:E0:5F:13
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03DC
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/C65962C8174411EEBA311D114AD9E6FC.roa
Signing time: Fri 30 Jun 2023 12:51:05 +0000
ROA not before: Fri 30 Jun 2023 12:51:01 +0000
ROA not after: Sun 30 Jun 2024 12:51:01 +0000
asID: 328227
IP address blocks: 156.0.101.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR, serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 30 12:51:01 2023 GMT
Not After : Jun 30 12:51:01 2024 GMT
Subject: CN=649ecfb9-707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:c1:79:72:a7:5a:55:7b:73:d6:28:d9:36:
cf:82:f3:3d:df:d0:0a:08:47:09:07:5f:1f:4f:f9:
78:a7:d4:80:0a:61:bb:bb:87:69:61:37:e4:db:29:
0d:b8:20:33:0e:8e:29:a9:c4:f2:f0:99:a9:17:14:
27:a3:4e:35:c6:bb:4b:7a:0d:74:26:a8:62:c5:2c:
da:05:14:43:ad:50:05:64:a5:c9:1d:b3:52:af:ad:
bf:0c:87:0e:26:f4:df:35:07:cd:7e:72:4b:89:c8:
d0:46:d0:74:15:d2:64:09:97:59:ad:40:cf:2f:2f:
e2:bb:d6:25:db:3a:fb:d6:46:dc:64:cf:05:da:a1:
44:0b:9b:be:bf:97:e3:5d:9e:c6:62:eb:f0:2c:65:
5b:7b:45:2a:1e:df:23:ab:f1:9b:6e:77:5b:a1:3a:
f1:97:14:24:e7:b1:5f:e5:0d:b6:e7:a8:d7:e1:24:
43:8e:cb:5f:1e:fe:03:3a:e4:6e:35:ce:48:5c:4f:
2a:ab:8e:1c:2b:b9:7c:f5:86:92:3c:4d:97:ba:e7:
70:29:8e:08:aa:72:65:33:c6:e3:6a:87:2a:37:cd:
b5:91:15:ec:28:cc:2b:c4:fd:de:2a:5e:25:f5:0b:
2e:14:cd:2a:d2:4e:78:91:3b:a9:87:d3:98:ec:ff:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:98:35:B5:ED:04:24:BC:6B:1C:EF:B6:1E:0D:96:D4:E0:5F:13
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/C65962C8174411EEBA311D114AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.101.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fc:18:cd:c4:e5:92:ca:96:e7:9d:15:9b:a6:7d:ee:d4:08:
43:c2:e9:3e:29:e4:7c:37:d4:b5:e4:ff:e7:c0:66:37:8c:9b:
f3:d5:8f:cf:94:d7:d2:25:ca:1c:38:f3:db:2f:d1:13:f1:f1:
8b:a9:85:dd:ed:27:72:a6:4f:ea:49:ce:9d:70:25:05:5b:85:
06:16:1b:70:9e:22:95:1f:9f:1c:ab:cb:80:ab:be:ea:5e:d2:
e7:a7:50:dc:c2:f8:24:88:62:7f:37:1d:c4:c2:89:a1:40:cc:
ad:bf:9d:d5:6e:02:b0:04:ce:48:0f:fd:b9:41:1f:08:b2:4c:
7b:ac:ca:f4:9f:3c:3d:1e:ad:c8:9c:83:8e:37:75:f7:77:b8:
38:df:2a:4a:af:b4:7c:55:be:e5:02:58:0b:25:90:3c:59:3c:
c5:27:7c:04:8e:41:6d:d9:be:00:8e:38:a3:95:db:81:2d:59:
04:0e:8d:2e:d4:2e:48:04:fa:48:6d:ef:c2:f9:64:fa:53:04:
88:04:60:10:db:ca:e4:9a:2e:ce:84:b2:07:82:a2:f2:dc:91:
9e:6f:ce:f2:4d:da:2a:65:34:f2:10:0e:98:d0:43:73:88:b1:
c6:5c:de:fa:1a:75:4e:e1:d7:52:14:92:c4:3d:e1:40:86:95:
19:0a:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:29:21 2025 by rpki-client