Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/06A95068899811ECAECD6D765A40D577.roa
File: 06A95068899811ECAECD6D765A40D577.roa (raw, json)
Hash identifier: +j41QXFFPR1ECQ74QHPM/peqoJPEjE3LtlbBYuUnqNY=
Subject key identifier: 74:FC:ED:8F:F8:FE:B4:1F:BA:03:C2:33:14:25:C2:85:65:5A:E8:C2
Certificate issuer: /CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
Certificate serial: 0B
Authority key identifier: 17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Authority info access: rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/06A95068899811ECAECD6D765A40D577.roa
Signing time: Wed 09 Feb 2022 11:04:18 +0000
ROA not before: Wed 09 Feb 2022 11:04:15 +0000
ROA not after: Wed 18 Feb 2026 11:04:15 +0000
asID: 0
IP address blocks: 169.255.8.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
Validity
Not Before: Feb 9 11:04:15 2022 GMT
Not After : Feb 18 11:04:15 2026 GMT
Subject: CN=62039fb2-e685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:b9:09:66:db:db:0f:c7:5d:cd:97:19:4c:
b8:bc:cf:d0:5b:66:4a:88:ff:f2:59:5d:9b:95:a3:
31:ed:e3:32:c3:9d:2e:d6:a8:57:e8:b9:67:b1:03:
d0:68:ae:f2:05:f9:36:3b:27:5d:8e:40:a4:18:bf:
0a:f5:8f:39:2f:45:d9:e3:5c:d7:09:bc:d6:be:65:
fb:9c:83:5d:3e:65:71:fe:49:e6:d4:74:bb:14:10:
c8:e7:f8:e6:21:4a:b1:e5:68:78:f3:b7:7f:ee:6f:
1a:dd:8d:50:2c:f6:55:26:92:df:53:dd:79:33:87:
22:d6:a4:0d:6c:24:45:21:f9:7e:ae:37:af:fd:0c:
f8:be:89:f2:80:5a:29:2a:3e:1a:5b:42:e0:0f:70:
82:53:75:c7:e4:f2:f6:90:89:e3:e2:95:ef:be:98:
cd:ad:32:98:cf:a2:67:58:52:13:47:9b:88:f9:46:
6f:68:57:09:69:d2:c3:4b:26:69:fd:e4:f9:33:cc:
0f:f0:eb:b7:f3:26:c4:75:a3:0a:cf:d0:26:33:a6:
dd:ce:c7:9c:f0:0e:5a:13:56:4b:52:7a:3f:59:4a:
72:4d:1e:e1:07:b0:9f:76:9f:7e:72:be:38:4b:3b:
07:3c:a7:c3:ec:2b:32:21:41:d3:9a:ce:ae:1c:72:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:ED:8F:F8:FE:B4:1F:BA:03:C2:33:14:25:C2:85:65:5A:E8:C2
X509v3 Authority Key Identifier:
keyid:17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/06A95068899811ECAECD6D765A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.8.0/22
Signature Algorithm: sha256WithRSAEncryption
00:14:3c:2b:d4:ff:41:20:50:70:52:3b:02:cf:06:3c:dc:d1:
9c:a9:2c:81:09:94:a1:17:89:80:52:35:1b:6b:2c:aa:7d:d7:
34:d5:33:83:fe:37:34:e2:ff:64:0e:5c:fa:e0:22:5e:7d:60:
5a:5d:75:3b:c7:1b:cb:25:ce:07:8a:1c:32:4d:be:25:10:dc:
4d:63:df:19:71:f2:02:07:dc:5b:e6:e0:87:97:42:e9:b5:cb:
20:00:35:de:17:d4:4a:73:97:51:53:7e:59:cf:61:ab:ba:20:
05:ee:c1:29:42:c1:77:73:61:da:9a:7d:db:d4:32:18:44:cf:
cd:c3:68:75:6c:ac:29:a3:85:4d:fb:7e:16:bd:ba:bf:c6:eb:
c9:8b:1b:1f:bc:f7:e2:6c:15:5a:dc:2e:98:88:24:de:f3:fa:
ee:1f:80:b1:ff:07:a3:e1:9a:b1:4c:02:cc:c6:50:98:e2:cc:
a7:b2:a8:de:31:e5:8d:dc:15:74:67:d4:98:5e:81:4a:6d:aa:
d4:22:81:93:0d:f2:40:43:40:61:4f:39:d3:9c:3e:fa:70:b5:
89:fe:9b:0c:f6:02:e5:9a:3e:6a:fb:57:62:87:fc:d2:5e:1f:
a1:f5:2f:9a:d4:47:93:25:3d:a3:0f:ff:1f:dc:b0:fb:78:8b:
b8:ab:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org