Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/

$ rpki-client -vvf 8101D9BAD7DD11EBB50B192BF8AEA228.roa
File:                     8101D9BAD7DD11EBB50B192BF8AEA228.roa (download)
Hash identifier:          3mV+Z2bAtAXaDI2wmMWaoce5N4l8lC7c1s0CUusMi6E=
Subject key identifier:   C9:EB:DF:94:6B:A5:F4:45:42:A0:A2:4F:A0:C4:46:02:37:77:09:1C
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       031B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8101D9BAD7DD11EBB50B192BF8AEA228.roa
ROA valid until:          Jun 26 06:53:08 2023 GMT
asID:                     1239
IP address blocks:
    1: 192.142.135.0/24 maxlen: 24
    2: 192.142.169.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Jun 28 06:53:08 2021 GMT
            Not After : Jun 26 06:53:08 2023 GMT
        Subject: CN=60d971d8-ca42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:36:1f:6c:db:c7:e6:bc:40:51:4c:f7:1e:
                    7f:07:c0:11:22:9f:c1:c0:2e:24:66:7e:28:f9:b9:
                    db:e0:12:28:bd:79:e8:5a:34:f0:49:54:49:bd:8e:
                    ba:57:a3:12:13:7f:93:d5:1b:31:25:95:4a:7a:85:
                    1e:02:23:83:4c:44:37:29:6b:58:be:1c:82:5d:81:
                    ea:00:29:c5:23:26:01:eb:ee:76:b7:e3:fc:7a:31:
                    39:c0:d8:65:e0:94:38:d9:74:b4:88:73:31:f0:bf:
                    8a:9f:46:95:ff:ed:d9:1e:b8:00:00:1f:b8:36:9d:
                    84:c3:f8:89:2a:49:50:b3:db:dc:76:d3:e9:fb:67:
                    6a:9a:af:0d:ee:63:42:4d:b7:a6:6f:cd:46:4a:02:
                    2e:05:1e:89:f1:9e:bb:99:12:56:62:05:31:24:77:
                    6b:95:06:a9:68:2e:b3:9f:da:fd:57:39:f8:f8:7a:
                    3a:1f:ba:bb:f0:f1:10:f0:ce:02:fa:85:7d:21:51:
                    4a:2c:29:de:a8:74:3f:94:79:33:04:0c:6c:d7:02:
                    8e:83:14:8e:5e:21:3f:68:a8:aa:ff:3a:66:bc:1e:
                    e6:85:e2:27:1b:b9:b3:8b:4b:83:98:b9:a4:68:03:
                    3a:23:9c:96:af:72:8e:c9:d2:de:bc:24:b1:10:4d:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C9:EB:DF:94:6B:A5:F4:45:42:A0:A2:4F:A0:C4:46:02:37:77:09:1C
            X509v3 Authority Key Identifier: 
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8101D9BAD7DD11EBB50B192BF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.135.0/24
                  192.142.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:97:7f:20:ff:74:92:20:ad:1c:0a:30:a0:ae:1e:44:aa:36:
         30:39:cb:09:82:46:72:6c:06:fd:86:60:b2:9e:0d:77:3a:5a:
         39:c2:aa:66:37:b5:60:e5:f8:f3:3c:31:3d:d3:1a:bd:78:c7:
         5e:a0:cb:c1:a9:9d:f2:26:be:1c:e9:b7:b9:4c:46:f4:b8:fa:
         f9:b0:bc:88:e1:a4:92:3f:ff:4b:0f:33:02:88:74:7c:97:96:
         6a:f9:87:b8:1d:ce:44:ff:79:41:59:00:5c:9d:84:84:0e:55:
         09:70:23:c1:d5:bf:b5:d1:32:ca:92:1f:b4:0b:99:99:30:d8:
         d1:47:87:52:80:2e:7d:e9:f3:da:e7:23:fd:72:04:74:a2:55:
         b9:5b:82:6f:8c:ab:84:c3:f5:8b:75:47:27:4a:73:3c:6f:8f:
         51:b5:ff:e6:bd:88:02:3e:20:d2:7d:58:de:55:18:9d:a5:4e:
         a4:0d:02:8e:96:7b:19:f3:50:8f:c2:ca:79:ab:a4:6d:95:3f:
         48:36:31:8c:cf:56:dc:17:da:dd:dc:09:4b:90:ff:2a:1f:6f:
         1b:d3:3d:79:b9:aa:6f:fc:42:c8:81:38:9f:2c:16:fc:3d:7e:
         ca:63:98:17:8a:25:f1:e6:1c:6a:73:90:df:d8:ca:9a:af:0e:
         0e:4c:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:27:18 2022 by rpki-client.