Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E724DC17C711ED934BECBDF1222468.roa
File:                     A3E724DC17C711ED934BECBDF1222468.roa (download)
Hash identifier:          gtb7S06QhfKNh3iDFMljwT6UfJBEPiIeYdcNTFjR8qA=
Subject key identifier:   41:95:AB:11:3B:CA:D8:BC:78:6F:CC:E1:E8:67:7C:9D:11:95:BB:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       183A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E724DC17C711ED934BECBDF1222468.roa
ROA valid until:          Jun 25 09:42:50 2023 GMT
asID:                     1239
IP address blocks:
    1: 154.194.4.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6202 (0x183a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 14 09:42:50 2022 GMT
            Not After : Jun 25 09:42:50 2023 GMT
        Subject: CN=62f22c1d-72b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:21:94:6e:18:0c:7e:59:8b:e0:09:6a:54:
                    25:99:70:e9:95:4c:7e:89:68:38:60:38:4b:ea:1f:
                    ef:97:b4:b3:3c:11:b3:c2:8c:b3:3f:4b:eb:1f:ac:
                    41:1c:69:5a:91:86:5b:8b:0a:d9:bb:4b:8c:d9:67:
                    71:23:bf:4f:2b:48:6a:e9:16:20:ad:76:31:41:13:
                    44:28:d6:04:7c:e7:be:bd:86:eb:17:16:f4:df:50:
                    11:23:15:a6:4a:94:95:7e:31:c3:af:49:f5:89:8d:
                    77:1b:ba:fb:ec:fc:c9:66:60:0a:33:eb:ee:c4:95:
                    be:0f:a9:3a:91:eb:08:7f:6d:35:81:c7:11:e9:1e:
                    ee:da:e6:01:f9:27:61:2e:ed:05:2a:09:62:33:96:
                    92:e5:22:7e:a8:8f:24:22:c3:d9:7c:dd:3f:d1:8d:
                    e6:b3:6b:7a:ca:c7:68:6f:1b:78:33:e3:5f:c4:28:
                    26:14:d3:0f:56:fb:71:23:8c:f0:0c:be:60:1e:96:
                    37:bf:99:7f:af:1c:19:e3:ff:25:16:0c:61:80:ab:
                    4d:07:7c:79:bf:62:cd:73:22:8f:b0:1f:a1:d6:99:
                    e8:cf:d3:9c:4d:46:d0:34:d3:04:6f:aa:3a:ad:71:
                    04:88:3f:20:8b:cc:8a:c7:ee:2b:0d:a0:1a:15:66:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                41:95:AB:11:3B:CA:D8:BC:78:6F:CC:E1:E8:67:7C:9D:11:95:BB:7A
            X509v3 Authority Key Identifier: 
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E724DC17C711ED934BECBDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:a0:0b:99:3f:5a:e2:e7:6d:c0:7c:5f:98:1f:d5:73:50:
         65:fc:db:77:84:b7:44:91:e9:32:65:3b:40:c5:a7:59:fa:bd:
         92:7f:8d:ca:4c:b2:13:18:34:8d:3b:8f:55:b3:95:6a:92:d8:
         57:7c:ee:b0:6d:05:6f:76:a8:fb:b0:34:f9:e1:21:41:43:60:
         02:0b:ea:9c:0d:58:57:88:13:66:d3:b7:0e:03:25:16:d5:f7:
         8a:10:43:14:57:60:a3:73:9b:91:0e:0c:7f:ba:6e:95:d0:fa:
         b9:90:e1:61:37:4b:01:19:c4:96:0f:19:20:7b:94:41:fe:71:
         27:22:82:fe:21:58:6a:5d:74:78:ee:03:b4:1e:54:11:42:f2:
         84:91:b1:8e:ba:42:23:94:c1:69:31:8c:bf:51:2e:27:d0:95:
         2a:a8:eb:0f:12:ce:21:a3:7a:ec:2e:8b:6e:0f:f7:36:b5:32:
         5c:22:98:10:e3:6c:43:34:76:5b:b6:f3:03:d1:dd:a2:26:b4:
         3b:31:25:06:0b:12:92:40:8d:bc:54:0a:63:0b:3c:c7:dc:64:
         79:0d:03:58:fa:d0:60:16:69:02:c5:51:dc:f3:d6:bc:65:60:
         a2:92:e4:f2:c0:4b:10:45:6d:df:5d:96:72:3d:36:1d:fc:08:
         13:15:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 10:24:00 2022 by rpki-client.