Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/AAFC7F38899711EC8B6754755A40D577.roa
File: AAFC7F38899711EC8B6754755A40D577.roa (raw, json)
Hash identifier: 3K7zCrtGdvxq4xXpTGost6KWx9rox0cmKHjlHzSMaHw=
Subject key identifier: 91:4C:65:62:87:24:1A:47:E6:C7:9B:3B:8D:4D:C7:EC:39:35:41:35
Certificate issuer: /CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
Certificate serial: 07
Authority key identifier: F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/AAFC7F38899711EC8B6754755A40D577.roa
Signing time: Wed 09 Feb 2022 11:01:45 +0000
ROA not before: Wed 09 Feb 2022 11:01:41 +0000
ROA not after: Wed 18 Feb 2026 11:01:41 +0000
asID: 0
IP address blocks: 102.177.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
Validity
Not Before: Feb 9 11:01:41 2022 GMT
Not After : Feb 18 11:01:41 2026 GMT
Subject: CN=62039f18-d417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:2b:ab:0c:b3:85:f6:c3:32:c4:7d:8b:84:
0f:04:62:75:10:7b:fa:d5:36:4b:bf:da:6e:0b:c4:
2e:57:8d:1f:5c:92:18:90:9c:9c:2d:c9:c2:37:1a:
35:7e:af:4b:e6:a9:5f:cc:a7:50:96:ca:b1:6a:c6:
08:f2:91:29:1b:63:5c:92:71:fe:3a:f9:46:3e:fa:
5d:c3:64:fb:6a:a1:bf:b8:8e:c8:3a:01:23:ed:1b:
f1:fd:a7:15:84:1a:7c:86:20:e2:04:9a:3d:2c:ff:
52:8c:c2:d4:7d:9b:85:fe:3f:2c:09:bf:93:5f:f9:
b0:77:78:38:9b:f1:0b:f9:ce:78:16:46:36:0c:86:
ee:a4:f0:e2:a0:53:63:ca:b8:27:a4:c9:a7:6e:69:
d2:c8:8f:ca:4c:98:30:73:ec:38:02:58:50:50:59:
16:a4:8e:72:62:38:dc:39:96:d6:0f:c7:a9:b8:ef:
b8:5e:8c:17:1c:0e:06:ac:9b:6a:da:57:48:7d:7b:
02:52:0f:22:b8:67:42:25:3c:89:34:ea:4f:79:cb:
b4:50:92:4e:a8:6b:66:e7:68:8e:db:b0:c1:9e:1d:
77:81:18:c6:f5:2d:2d:a8:fc:6d:c4:23:0a:57:1f:
a9:79:8f:1c:d9:bf:20:f7:ad:55:f7:76:51:d0:b1:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:65:62:87:24:1A:47:E6:C7:9B:3B:8D:4D:C7:EC:39:35:41:35
X509v3 Authority Key Identifier:
keyid:F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/AAFC7F38899711EC8B6754755A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.96.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f6:cf:33:bf:5e:cf:77:59:f3:fd:7d:8d:54:3e:e1:71:e5:
4f:55:7f:00:14:44:95:45:c7:21:ce:f3:bd:73:e6:05:89:12:
3e:f4:b7:ae:a7:65:a1:df:e3:4e:a0:06:1b:12:a6:89:18:ef:
e4:3a:df:b9:fb:20:36:00:a8:dd:c5:ff:6c:85:3e:4c:2e:be:
db:48:ff:61:0b:0e:80:21:88:02:a8:ca:18:58:aa:45:3d:28:
a4:89:ac:54:fc:1e:09:10:39:ef:71:f1:85:7f:6d:6c:9f:69:
1f:9a:a7:68:d4:96:e4:e3:0b:00:9f:01:10:b4:f4:02:a6:ff:
98:13:3c:c5:7f:21:2f:d1:d6:b3:88:a0:d5:88:ab:06:68:2c:
44:a2:83:b2:f2:8d:7a:ac:9a:72:b7:e0:fc:e0:8b:15:1f:d6:
00:b3:12:fc:15:e9:73:99:8f:56:2b:f6:69:98:de:e8:b9:a5:
62:82:e6:98:48:2b:a3:fa:61:50:0a:07:43:3e:4e:8a:ae:91:
c7:67:92:b3:ed:b2:2c:a6:fa:34:be:cd:f9:15:06:4d:07:36:
d1:a6:22:ec:08:86:6c:73:6e:f6:c2:42:a8:03:89:25:fa:4f:
d5:3c:5a:c9:66:fe:ff:5d:da:5b:b0:08:4a:fa:4d:98:ee:78:
eb:a7:92:19
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZF
QzQ2MEFGMTEwLwYDVQQFEyhGOUYxNkE4QUY1NjUxRjhBOTg0RjAzMzE0NTY1MEIz
RjlFNUQ4QTg2MB4XDTIyMDIwOTExMDE0MVoXDTI2MDIxODExMDE0MVowGDEWMBQG
A1UEAwwNNjIwMzlmMTgtZDQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALluK6sMs4X2wzLEfYuEDwRidRB7+tU2S7/abgvELleNH1ySGJCcnC3Jwjca
NX6vS+apX8ynUJbKsWrGCPKRKRtjXJJx/jr5Rj76XcNk+2qhv7iOyDoBI+0b8f2n
FYQafIYg4gSaPSz/UozC1H2bhf4/LAm/k1/5sHd4OJvxC/nOeBZGNgyG7qTw4qBT
Y8q4J6TJp25p0siPykyYMHPsOAJYUFBZFqSOcmI43DmW1g/HqbjvuF6MFxwOBqyb
atpXSH17AlIPIrhnQiU8iTTqT3nLtFCSTqhrZudojtuwwZ4dd4EYxvUtLaj8bcQj
ClcfqXmPHNm/IPetVfd2UdCxL9sCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSRTGVi
hyQaR+bHmzuNTcfsOTVBNTAfBgNVHSMEGDAWgBT58WqK9WUfiphPAzFFZQs/nl2K
hjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUM0NjAvQUNFQzJEMjI4OTgxMTFFQzk1RDM1MEI0NUE0MEQ1NzcvLWZGcWl2
VmxINHFZVHdNeFJXVUxQNTVkaW9ZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvLWZGcWl2VmxINHFZVHdNeFJXVUxQNTVkaW9ZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUM0NjAvQUNFQzJEMjI4OTgxMTFFQzk1RDM1MEI0NUE0
MEQ1NzcvQUFGQzdGMzg4OTk3MTFFQzhCNjc1NDc1NUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmaxYDANBgkqhkiG9w0BAQsF
AAOCAQEAEPbPM79ez3dZ8/19jVQ+4XHlT1V/ABRElUXHIc7zvXPmBYkSPvS3rqdl
od/jTqAGGxKmiRjv5DrfufsgNgCo3cX/bIU+TC6+20j/YQsOgCGIAqjKGFiqRT0o
pImsVPweCRA573HxhX9tbJ9pH5qnaNSW5OMLAJ8BELT0Aqb/mBM8xX8hL9HWs4ig
1YirBmgsRKKDsvKNeqyacrfg/OCLFR/WALMS/BXpc5mPViv2aZje6LmlYoLmmEgr
o/phUAoHQz5Oiq6Rx2eSs+2yLKb6NL7N+RUGTQc20aYi7AiGbHNu9sJCqAOJJfpP
1TxayWb+/13aW7AISvpNmO5466eSGQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org