Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/F29DDC26209311EE90A0F6674AD9E6FC.roa
File: F29DDC26209311EE90A0F6674AD9E6FC.roa (raw, json)
Hash identifier: bBVR6AebsbGynhS6QIqnvdV6ODwrjKhJ0uJoFKKo0Ng=
Subject key identifier: 53:18:85:3B:66:8D:42:DB:38:46:8F:29:2C:41:3B:3E:90:53:EE:2B
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 042B
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/F29DDC26209311EE90A0F6674AD9E6FC.roa
Signing time: Wed 12 Jul 2023 09:10:30 +0000
ROA not before: Wed 12 Jul 2023 09:10:26 +0000
ROA not after: Fri 12 Jul 2024 09:10:26 +0000
asID: 17941
IP address blocks: 156.0.123.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jul 12 09:10:26 2023 GMT
Not After : Jul 12 09:10:26 2024 GMT
Subject: CN=64ae6e06-f1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:dd:22:f7:aa:96:fe:41:29:7b:bc:34:54:
34:3a:d5:09:98:94:19:74:15:7c:9b:9e:e3:a7:01:
a3:b0:d3:4c:d5:f0:70:3a:e1:45:ff:cc:2c:40:07:
19:03:12:f4:7c:ec:46:8a:c8:5b:d2:e1:8d:ac:0b:
86:46:78:c9:09:35:e1:18:63:2e:c4:9a:8d:cc:17:
94:34:7b:da:c1:dc:a4:ff:06:ee:4f:f9:ce:a9:ff:
81:68:8a:63:8b:df:06:20:ce:76:a0:ca:a7:21:76:
65:17:34:e5:12:66:77:8c:e5:99:8f:6a:1c:fe:4b:
ef:4f:bb:d3:50:4e:1b:b5:80:39:65:4c:06:69:99:
10:7d:e1:75:78:df:26:08:f5:b4:fd:2e:62:7b:e2:
e2:a5:d6:a5:f4:ae:68:07:16:ec:47:ec:51:0b:2c:
7a:03:ac:2c:af:36:c9:6f:77:e9:eb:64:87:7a:aa:
88:a0:6c:53:bd:53:36:aa:f2:83:7d:1d:d8:b8:bb:
61:ff:01:b3:a9:fc:b1:02:5d:22:6e:88:a9:a9:d1:
66:b7:0a:7f:07:a2:1a:e2:0c:b9:47:13:80:cd:c4:
b9:aa:7d:ce:32:3d:52:11:2e:0c:bf:e7:b0:0a:4d:
a1:e9:ab:6e:4d:04:68:86:fd:2c:ed:f9:67:fb:0f:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:85:3B:66:8D:42:DB:38:46:8F:29:2C:41:3B:3E:90:53:EE:2B
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/F29DDC26209311EE90A0F6674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0d:d0:64:06:c0:94:ed:be:8c:f7:a5:66:df:5b:df:78:2b:
0c:10:38:c1:15:fb:f6:ef:bb:da:38:ab:e7:e1:d6:2d:3a:e2:
7e:9a:df:a4:fa:1e:7c:7d:85:6d:3b:dc:e4:f8:53:ad:8e:a5:
c0:70:30:94:24:94:99:ce:ea:d4:57:88:36:76:2c:75:cf:1d:
6d:09:6a:d1:62:91:ae:dc:78:50:70:fc:5e:7e:eb:75:c8:0e:
15:1e:a0:9c:2e:f8:c0:b3:f6:da:25:d3:f0:04:37:fb:8b:ba:
87:43:ca:ed:e2:4b:e9:d7:2c:7f:58:cd:8a:d8:bc:83:95:a8:
a0:b1:78:23:ae:02:93:ed:e9:0a:92:c0:61:a9:97:0a:c3:f8:
f3:ac:24:a9:86:30:5b:da:b0:c6:23:fa:53:d9:9b:e6:25:e2:
2c:fe:00:12:9e:92:ef:0e:02:8f:ad:fc:43:79:d3:02:02:79:
4a:b7:b0:1c:05:93:2a:68:cb:c7:24:e4:e0:24:6e:6d:b1:07:
76:dc:01:e0:9a:27:c1:2e:ec:d9:8a:95:64:0d:42:66:7c:c1:
46:93:dc:6f:8a:82:25:8c:52:fd:58:47:c5:3d:fa:48:67:7c:
c0:99:96:ec:09:b8:ab:64:cc:d7:3a:da:03:16:ff:76:5a:bd:
06:2a:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org