Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/552C204A898D11ECB47F4FD65A40D577.roa
File:                     552C204A898D11ECB47F4FD65A40D577.roa (raw, json)
Hash identifier:          tEEW+SiDPiVwyxfTqEnuTKPnRGUfb4as+YYpgRs4W80=
Subject key identifier:   C8:74:92:36:B2:F5:CD:89:B5:12:AB:4F:6C:67:A2:E1:E2:E8:A8:0C
Certificate issuer:       /CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
Certificate serial:       06
Authority key identifier: 17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/552C204A898D11ECB47F4FD65A40D577.roa
Signing time:             Wed 09 Feb 2022 09:47:45 +0000
ROA not before:           Wed 09 Feb 2022 09:47:42 +0000
ROA not after:            Wed 18 Feb 2026 09:47:42 +0000
asID:                     327789
IP address blocks:        169.255.8.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
        Validity
            Not Before: Feb  9 09:47:42 2022 GMT
            Not After : Feb 18 09:47:42 2026 GMT
        Subject: CN=62038dc1-2ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:e5:0b:fc:86:5c:06:7c:29:c8:e0:ec:f0:
                    8c:ef:36:1e:f5:fb:57:f5:8e:d6:37:4d:aa:c2:ff:
                    ab:41:a3:c3:3e:e5:98:91:8d:ee:6a:b7:87:ff:4a:
                    ef:36:1a:7d:81:f4:93:49:58:0d:32:24:18:b1:9c:
                    af:69:a5:c9:47:1a:39:1d:a4:41:65:4f:2f:cb:77:
                    e6:7b:6e:86:39:4b:b8:f9:87:e4:64:1f:88:c6:33:
                    ac:5b:08:11:ae:d4:a5:29:8a:ff:73:f6:52:ff:c8:
                    b9:ad:f2:69:50:e0:20:f1:15:29:88:26:64:3a:c4:
                    2f:07:44:b5:1f:3c:40:2c:1b:b5:98:6e:5c:3a:4d:
                    cc:97:44:50:01:39:f9:ca:c0:17:3a:ed:3b:a8:16:
                    ee:9a:f7:78:10:cb:7c:b5:e9:72:b7:55:4f:56:8c:
                    16:40:ee:ce:1f:f2:9b:6d:6b:2f:d9:92:65:0f:b9:
                    ae:60:48:0a:39:8c:2d:fc:19:52:85:c0:a8:65:6d:
                    f2:a0:af:72:9f:e3:5b:ac:06:99:4b:d4:d5:2f:b4:
                    02:f2:9f:24:dc:62:d9:d1:af:d4:45:30:37:c2:f7:
                    7e:d5:8a:91:5f:31:d6:cd:bd:a6:10:ff:24:ee:27:
                    2d:55:f6:39:5a:aa:46:ef:89:c9:2c:55:1f:ed:47:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:74:92:36:B2:F5:CD:89:B5:12:AB:4F:6C:67:A2:E1:E2:E8:A8:0C
            X509v3 Authority Key Identifier:
                keyid:17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/552C204A898D11ECB47F4FD65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:26:41:e4:5e:19:00:35:61:2c:37:4c:c0:f9:e6:ad:aa:14:
         14:f9:c8:17:8d:c4:e7:7b:cc:af:92:67:e1:0a:57:97:70:62:
         8d:16:cb:e8:a6:bb:2a:95:03:84:57:32:c0:fb:b0:ef:64:bb:
         cd:50:51:50:b1:2e:80:5c:87:5e:1f:18:ac:8c:a3:fd:53:14:
         68:75:6d:ef:ed:ad:5c:a1:f6:26:34:b8:5f:c8:6a:bd:af:25:
         42:5a:ed:e6:84:a8:c9:13:93:45:de:e5:28:95:46:17:11:54:
         57:c9:e4:0d:52:b2:03:df:de:1f:0c:f0:fd:a7:c9:f0:cf:ed:
         09:af:6f:51:dd:9f:5e:29:e8:76:b1:53:3b:9a:7e:20:e9:c9:
         83:84:02:25:2d:d7:8f:c9:f0:fa:8b:1b:99:bf:d2:42:eb:8c:
         fd:95:b1:f6:27:ac:82:d3:0f:31:0a:29:d1:f7:c3:b3:44:77:
         8c:67:43:84:d5:e4:41:17:8c:85:ea:4c:e0:cc:8c:c0:ae:3f:
         7a:3e:b1:ec:02:07:77:2c:db:bf:cc:7f:ef:d7:34:9b:4d:10:
         31:46:26:33:9a:e5:dc:72:e3:6d:b1:df:07:72:6c:29:67:65:
         02:9a:43:d8:24:3e:a9:37:b2:20:77:be:4c:69:50:dd:d4:76:
         3e:f4:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org