Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF1340AF13511EC9C5E54A8F1222468.roa
File:                     6AF1340AF13511EC9C5E54A8F1222468.roa (download)
Hash identifier:          FZ/TXIZDXCvchIDx0Yp0PI9el2NdSiNiAOY39Ihe7wE=
Subject key identifier:   C4:E6:9B:CF:66:C4:7E:77:A2:14:36:D9:4D:92:37:A5:16:6B:E3:C0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       16EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF1340AF13511EC9C5E54A8F1222468.roa
ROA valid until:          Jun 30 07:40:24 2023 GMT
asID:                     138995
IP address blocks:
    1: 154.196.2.0/23 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5867 (0x16eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 21 07:40:24 2022 GMT
            Not After : Jun 30 07:40:24 2023 GMT
        Subject: CN=62b175eb-565e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:35:0b:89:3b:39:ba:d7:46:d3:ea:62:5a:
                    da:3d:74:c8:dd:1a:47:8f:b9:6d:bb:a8:42:59:a7:
                    8d:bb:52:20:7f:96:b3:59:f5:42:21:29:31:55:9f:
                    54:94:14:44:77:d0:c4:5c:a1:8e:2c:b6:3e:49:63:
                    19:df:f8:a5:23:99:3d:c8:2a:ff:a1:9a:a0:d0:67:
                    3b:73:65:66:27:bb:7c:b8:fe:d7:ad:d5:d5:4a:57:
                    89:db:d2:82:c3:9b:f1:99:1f:2b:1d:fc:db:7f:cd:
                    95:9f:88:3d:49:33:2d:5b:b5:17:a5:7e:ee:da:6b:
                    af:c1:aa:57:02:dc:c2:c4:b2:cd:87:c3:dd:ad:71:
                    91:24:79:e1:72:4a:4e:44:6d:aa:70:8f:f3:bd:9b:
                    8f:21:76:c0:26:10:c1:1c:2b:84:46:84:42:71:87:
                    81:48:e3:ce:18:9f:ec:6d:f1:c8:5f:1a:4a:8e:05:
                    eb:37:60:9c:ee:cd:4e:a0:b1:71:5e:04:0a:e1:d4:
                    1e:0b:4c:68:28:02:4c:a8:8c:fa:2c:8b:60:ef:81:
                    1e:33:14:0d:26:14:05:4c:de:11:a5:21:b1:e0:3e:
                    2a:d2:71:75:cc:b7:65:cb:e2:8c:bb:f1:35:7d:ad:
                    b0:79:22:6b:38:66:1a:fa:4d:85:77:36:ba:e1:0f:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C4:E6:9B:CF:66:C4:7E:77:A2:14:36:D9:4D:92:37:A5:16:6B:E3:C0
            X509v3 Authority Key Identifier: 
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF1340AF13511EC9C5E54A8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:18:27:a5:26:80:54:76:21:54:88:fb:ff:e1:37:1c:52:
         99:c2:c2:3c:ce:ec:36:5e:27:63:c9:85:94:95:9c:32:54:97:
         b2:6a:d5:43:76:66:2b:0a:e8:48:fa:bf:e2:27:39:59:c8:37:
         b8:4c:30:57:c8:0c:1d:15:a4:6c:67:29:e6:2e:97:5f:05:38:
         ec:b2:3f:63:c0:42:65:dd:b3:e0:9e:26:c9:8a:ad:35:2f:36:
         18:35:84:f2:04:ca:fc:78:ab:6f:89:f3:14:86:00:93:33:8b:
         97:aa:46:0e:d9:20:57:ce:d6:fa:93:7e:3d:fe:e8:f6:4a:27:
         c9:72:18:f4:c8:d2:c0:27:c3:7c:fb:1e:de:eb:73:5d:28:36:
         e1:2d:0d:b8:c7:94:83:75:06:a1:d0:85:af:65:84:70:3a:e0:
         9e:1e:4d:ae:13:55:68:9e:95:60:fb:c0:86:1e:0f:49:9a:15:
         9c:2e:99:ef:df:df:c4:1a:87:66:5f:46:cd:8d:e8:db:43:ff:
         f0:c7:87:14:6b:8e:4d:b4:dd:90:1b:8d:d5:78:c5:a4:e2:94:
         05:25:dc:7f:43:8d:e3:fb:3e:de:9c:8b:4b:f2:8d:f1:5b:66:
         04:c8:2b:4b:29:81:5f:af:99:7e:a0:c5:9a:66:a2:1f:e1:cb:
         64:2e:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 16:06:02 2022 by rpki-client.