Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D6800/D214E11EDDCE11EDA01175EB2F6D8C1D/B39FA538DDCF11ED845310EE2F6D8C1D.roa
File: B39FA538DDCF11ED845310EE2F6D8C1D.roa (raw, json)
Hash identifier: zFuNdUX/2iA5nItFZ2+wESEa13EVWa9J/zDf9YQb8n8=
Subject key identifier: 18:6B:A8:9B:6A:CD:58:76:CC:9B:AB:64:DC:93:9D:2A:D9:FD:A7:4C
Certificate issuer: /CN=F36D6800AF/serialNumber=AC7BF851BF079991844E688240FAA02153B1412A
Certificate serial: 02
Authority key identifier: AC:7B:F8:51:BF:07:99:91:84:4E:68:82:40:FA:A0:21:53:B1:41:2A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rHv4Ub8HmZGETmiCQPqgIVOxQSo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D6800/D214E11EDDCE11EDA01175EB2F6D8C1D/B39FA538DDCF11ED845310EE2F6D8C1D.roa
Signing time: Tue 18 Apr 2023 09:59:26 +0000
ROA not before: Tue 18 Apr 2023 09:59:22 +0000
ROA not after: Mon 18 Apr 2033 09:59:22 +0000
asID: 10803
IP address blocks: 196.2.160.0/19 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D6800AF/serialNumber=AC7BF851BF079991844E688240FAA02153B1412A
Validity
Not Before: Apr 18 09:59:22 2023 GMT
Not After : Apr 18 09:59:22 2033 GMT
Subject: CN=643e69fe-ab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:28:a8:bf:fc:47:c5:4d:bc:c1:69:be:21:
2e:8d:5e:f1:07:bd:a2:be:0f:38:8f:e8:7f:ce:f2:
a0:7f:6e:be:cc:b1:57:24:f6:f0:37:4b:45:66:bf:
db:68:60:da:e9:e5:70:83:88:e3:19:68:60:4e:b6:
18:05:22:89:3f:9a:db:ed:6c:4c:46:fc:2c:a4:31:
d6:83:36:b3:fd:a7:8d:e6:43:d5:20:df:2d:a5:bf:
f8:b5:7a:d7:23:cb:12:08:bb:69:be:d6:c5:b5:c5:
a7:0f:9c:5a:ee:00:91:ac:74:ee:c5:11:5f:1d:94:
db:4f:62:e3:51:00:b0:28:33:6c:16:8a:db:da:fe:
1e:ba:c2:60:74:fc:cb:54:9f:12:51:4c:83:4d:9d:
81:ad:ef:81:e3:91:57:81:cf:de:54:17:b5:94:e1:
45:60:11:3f:b8:c1:d7:46:43:04:ce:05:0b:10:96:
e3:56:63:61:e4:8b:98:35:fd:42:8a:a1:37:71:12:
f8:8a:2c:0e:14:6d:94:b9:85:49:37:5c:dd:ed:fa:
49:d8:c3:fc:8d:7a:e4:54:e9:f2:c7:63:00:c7:24:
df:df:c2:c2:3b:a4:7a:3f:93:c5:d3:ef:ef:9b:98:
5c:f6:ee:90:b8:e8:91:cf:a3:01:12:90:56:77:b0:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:A8:9B:6A:CD:58:76:CC:9B:AB:64:DC:93:9D:2A:D9:FD:A7:4C
X509v3 Authority Key Identifier:
keyid:AC:7B:F8:51:BF:07:99:91:84:4E:68:82:40:FA:A0:21:53:B1:41:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6800/D214E11EDDCE11EDA01175EB2F6D8C1D/rHv4Ub8HmZGETmiCQPqgIVOxQSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rHv4Ub8HmZGETmiCQPqgIVOxQSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6800/D214E11EDDCE11EDA01175EB2F6D8C1D/B39FA538DDCF11ED845310EE2F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.160.0/19
Signature Algorithm: sha256WithRSAEncryption
52:d2:62:11:f9:b0:40:b1:ad:3b:7a:d0:1f:6e:c5:18:6d:ba:
24:04:d2:db:38:bd:de:c0:c0:b8:fe:cf:91:66:bf:05:c9:63:
0d:b9:25:68:a6:e2:77:e7:83:35:9f:26:11:c1:85:f7:70:dd:
9f:65:cb:d2:8c:e5:68:47:48:c0:32:53:5a:72:5e:f6:fd:0e:
43:ea:91:db:63:4b:8a:f5:45:5f:a9:96:87:f4:96:bd:94:19:
24:78:f4:ca:e2:c5:09:dc:db:15:7c:99:d2:ed:07:fc:da:24:
86:3c:d1:ff:7d:5e:bb:57:05:d3:cd:c6:fa:ee:ec:89:20:c4:
9e:17:0c:38:1c:57:d9:70:4f:a0:f0:e4:50:05:01:59:22:0e:
94:58:6b:ad:2f:50:c7:4e:64:cd:6c:f5:d3:12:9b:a6:34:87:
a5:4e:fe:64:44:fa:09:ac:23:03:49:41:c8:7f:de:a4:e3:b5:
ed:7c:ad:1e:93:58:09:dd:46:9a:97:6f:bc:b8:7d:d0:e6:05:
b1:22:13:49:b3:e3:66:e6:45:e1:27:9e:7d:bf:fa:b3:c9:c1:
e7:75:f0:25:b3:ea:62:eb:73:c9:3b:67:0e:0c:0c:2b:c1:df:
1c:16:2f:9a:27:09:6b:0b:5d:ab:e2:13:80:61:28:db:86:52:
d7:6d:a8:8f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZE
NjgwMEFGMTEwLwYDVQQFEyhBQzdCRjg1MUJGMDc5OTkxODQ0RTY4ODI0MEZBQTAy
MTUzQjE0MTJBMB4XDTIzMDQxODA5NTkyMloXDTMzMDQxODA5NTkyMlowGDEWMBQG
A1UEAwwNNjQzZTY5ZmUtYWI1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALAUKKi//EfFTbzBab4hLo1e8Qe9or4POI/of87yoH9uvsyxVyT28DdLRWa/
22hg2unlcIOI4xloYE62GAUiiT+a2+1sTEb8LKQx1oM2s/2njeZD1SDfLaW/+LV6
1yPLEgi7ab7WxbXFpw+cWu4Akax07sURXx2U209i41EAsCgzbBaK29r+HrrCYHT8
y1SfElFMg02dga3vgeORV4HP3lQXtZThRWARP7jB10ZDBM4FCxCW41ZjYeSLmDX9
QoqhN3ES+IosDhRtlLmFSTdc3e36SdjD/I165FTp8sdjAMck39/Cwjukej+TxdPv
75uYXPbukLjokc+jARKQVnewGcsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQYa6ib
as1Ydsybq2Tck50q2f2nTDAfBgNVHSMEGDAWgBSse/hRvweZkYROaIJA+qAhU7FB
KjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDY4MDAvRDIxNEUxMUVERENFMTFFREEwMTE3NUVCMkY2RDhDMUQvckh2NFVi
OEhtWkdFVG1pQ1FQcWdJVk94UVNvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvckh2NFViOEhtWkdFVG1pQ1FQcWdJVk94UVNvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDY4MDAvRDIxNEUxMUVERENFMTFFREEwMTE3NUVCMkY2
RDhDMUQvQjM5RkE1MzhERENGMTFFRDg0NTMxMEVFMkY2RDhDMUQucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcQCoDANBgkqhkiG9w0BAQsF
AAOCAQEAUtJiEfmwQLGtO3rQH27FGG26JATS2zi93sDAuP7PkWa/BcljDbklaKbi
d+eDNZ8mEcGF93Ddn2XL0ozlaEdIwDJTWnJe9v0OQ+qR22NLivVFX6mWh/SWvZQZ
JHj0yuLFCdzbFXyZ0u0H/NokhjzR/31eu1cF083G+u7siSDEnhcMOBxX2XBPoPDk
UAUBWSIOlFhrrS9Qx05kzWz10xKbpjSHpU7+ZET6CawjA0lByH/epOO17XytHpNY
Cd1GmpdvvLh90OYFsSITSbPjZuZF4Seefb/6s8nB53XwJbPqYutzyTtnDgwMK8Hf
HBYvmicJawtdq+ITgGEo24ZS122ojw==
-----END CERTIFICATE-----
Generated at Thu Aug 22 17:02:48 2024 by rpki-client on console-fra.rpki-client.org