Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/93FCCCDCD21E11EC90C90BE5F1222468.roa
File: 93FCCCDCD21E11EC90C90BE5F1222468.roa (raw, json)
Hash identifier: tkAoJ/S1711KlEroWZYV1Qt79wgwrTb6AwK3FBM1r3w=
Subject key identifier: 1F:F7:B3:34:42:E6:0F:29:C9:41:3E:5B:7B:3C:A1:36:49:8A:72:F2
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 013F
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/93FCCCDCD21E11EC90C90BE5F1222468.roa
Signing time: Thu 12 May 2022 18:08:51 +0000
ROA not before: Thu 12 May 2022 18:08:47 +0000
ROA not after: Fri 12 Aug 2022 18:08:47 +0000
asID: 1239
IP address blocks: 154.65.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: May 12 18:08:47 2022 GMT
Not After : Aug 12 18:08:47 2022 GMT
Subject: CN=627d4d33-e638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:b1:ae:6a:ba:43:63:f8:19:4b:20:47:ad:
5b:8d:a7:97:83:87:32:b0:12:1c:d7:95:0e:41:a3:
af:b4:01:f4:ca:c2:1b:25:65:0e:e4:ed:d7:c2:8b:
c4:9f:21:5b:19:3c:b0:8e:91:ca:c9:35:20:a7:3e:
84:3b:f5:aa:a9:20:4e:d6:8f:29:75:db:88:8b:4c:
c0:6d:61:c0:5f:e7:31:c3:85:7d:1e:92:93:7c:6f:
13:9e:87:39:72:93:bc:21:43:58:e4:ae:67:91:54:
5f:7c:a7:df:83:02:ec:28:c9:40:3c:90:c9:a2:be:
cc:ec:d4:7f:05:7b:af:ba:2f:e8:4c:86:13:ab:ef:
fa:cf:ff:4b:02:8a:e7:c0:87:2d:12:3f:ee:e3:06:
92:42:9c:f5:87:a7:42:d2:57:cf:3d:07:7e:1b:28:
16:1a:66:b3:99:79:2f:90:58:1e:74:88:cf:72:cf:
3b:ef:fe:4a:2a:ea:a1:a2:cc:99:7b:48:7a:bf:82:
14:90:41:69:79:89:77:31:24:f2:27:a6:7a:b9:59:
15:a1:3f:ea:06:da:3c:3e:c2:ea:6e:d9:46:40:ee:
82:b3:6e:ae:04:40:13:ce:de:e6:74:67:e6:42:4a:
af:53:49:cd:a3:17:f3:e8:07:8b:c7:36:88:ed:cb:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:B3:34:42:E6:0F:29:C9:41:3E:5B:7B:3C:A1:36:49:8A:72:F2
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/93FCCCDCD21E11EC90C90BE5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.104.0/22
Signature Algorithm: sha256WithRSAEncryption
37:3f:c0:c0:7c:d4:8a:bf:a9:dc:d0:b0:87:0c:29:d9:ec:48:
84:4d:63:71:71:b5:77:b2:47:88:3a:c1:f0:d7:40:28:a9:35:
49:be:80:72:21:fb:57:b0:a7:6c:85:91:e9:20:e5:76:13:49:
ec:e1:2a:8e:e0:a1:55:3c:b9:52:c0:ad:99:f6:a5:7f:85:96:
e6:91:4a:89:94:e9:9b:00:33:18:bb:e3:6c:5e:f9:97:54:f1:
2a:f2:cf:6d:2a:87:f8:ca:7e:a5:85:62:e0:c0:63:33:b7:21:
7c:9f:79:73:66:f5:e9:de:73:66:45:37:e2:1d:3f:1f:d4:39:
53:87:9a:3d:2e:28:05:a3:d6:73:4e:4b:e4:a0:e9:79:ce:23:
b5:18:08:2c:ad:cb:9b:2d:2d:c1:9e:39:68:52:8f:23:d9:0c:
59:8f:e0:ff:c8:67:60:e9:f8:b0:0d:11:3d:89:2c:74:8c:29:
11:34:01:90:37:22:64:13:d7:51:2f:5d:54:dc:80:5b:cd:b3:
16:f2:7a:85:34:de:ce:09:0f:4f:ec:7f:22:df:57:22:ce:44:
55:72:63:01:6a:32:62:44:96:a8:60:a3:eb:40:3e:e8:62:31:
05:e5:48:e7:40:99:fb:04:c4:82:85:40:0b:0d:09:e1:6d:cc:
f4:4e:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org