Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/

$ rpki-client -vvf D89181D8139811EDB3EA50F1F1222468.roa
File:                     D89181D8139811EDB3EA50F1F1222468.roa (download)
Hash identifier:          iEdE702U0iBkl2RyivFXa4eVkKp4sP6w35uN9GktcUg=
Subject key identifier:   62:18:DD:11:0B:2A:3B:BD:04:37:CA:E9:8A:E7:C2:F5:99:81:0C:82
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       1810
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89181D8139811EDB3EA50F1F1222468.roa
ROA valid until:          Dec 25 01:57:48 2022 GMT
asID:                     1239
IP address blocks:
    1: 154.84.160.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6160 (0x1810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  4 01:57:48 2022 GMT
            Not After : Dec 25 01:57:48 2022 GMT
        Subject: CN=62eb279f-379f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:98:60:9a:6c:57:6c:43:a5:dc:04:17:52:8b:
                    5a:37:98:66:5e:99:6b:8d:4e:40:71:b1:f9:b5:bc:
                    45:6f:86:dc:fc:c9:ea:2c:51:ba:be:68:3b:98:8b:
                    84:c2:ac:67:a4:c6:69:87:35:7c:cb:81:55:55:ea:
                    3e:41:23:dc:1c:58:49:fb:60:b8:99:11:d6:c5:d7:
                    3f:03:00:ad:e8:07:a4:a1:ce:4f:b4:2a:e5:f6:33:
                    c6:58:3c:8a:04:d8:1f:30:18:38:12:ef:8a:0b:fa:
                    11:77:64:9f:91:1d:8b:15:e0:39:31:64:58:fd:a8:
                    99:c1:72:94:b1:df:03:84:83:a7:e9:ba:c8:3c:0f:
                    32:5b:3f:1d:a0:53:3f:2a:60:d0:21:28:04:00:98:
                    8a:32:9f:bb:39:57:70:f1:bb:f6:4a:ee:fc:a9:51:
                    dd:8e:ca:82:43:46:9b:81:e4:9e:a7:12:16:d5:a9:
                    da:e9:4c:50:b7:06:24:30:c1:de:6c:00:55:36:5b:
                    15:62:f9:db:e8:9e:18:9a:a9:f8:21:9b:6f:5e:ef:
                    d9:13:1b:2e:f7:45:1e:88:78:22:43:b8:3b:2f:df:
                    15:d3:1f:92:1a:1e:52:dc:82:ba:d4:f7:4d:94:f7:
                    13:d3:ff:c4:df:75:15:f5:b5:96:6b:eb:29:55:3c:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                62:18:DD:11:0B:2A:3B:BD:04:37:CA:E9:8A:E7:C2:F5:99:81:0C:82
            X509v3 Authority Key Identifier: 
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89181D8139811EDB3EA50F1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:15:db:99:c7:80:31:fe:e4:3b:c8:c2:89:17:0a:08:7a:
         5c:b9:87:e9:f2:4a:8c:54:7f:df:07:fa:81:79:5c:f7:e3:cd:
         e5:1e:49:71:7c:4b:48:62:ab:6a:2d:cf:0a:91:75:c6:d9:7b:
         f6:b4:d2:13:d5:ed:f1:e0:7b:a0:b3:85:24:1a:e9:32:da:60:
         d2:f5:31:24:61:a8:81:3a:88:92:7c:00:8f:e4:81:36:86:a2:
         8d:02:ba:e0:f9:d3:a3:3f:bc:68:9a:d8:9b:31:5e:4d:c2:dc:
         b9:72:6f:c1:68:01:88:2d:72:4e:d6:ef:98:1b:a1:8f:11:58:
         68:b5:03:15:ca:b8:a9:6b:d7:17:14:ce:b7:03:9b:98:64:58:
         e2:3a:f2:a5:9d:ce:f3:df:7c:d6:15:24:23:34:0b:ca:17:69:
         ef:f6:ad:07:25:2f:69:94:c8:39:ba:84:ef:13:eb:88:97:e2:
         65:30:3d:9d:a6:a8:0b:5a:db:25:98:ae:77:43:92:eb:fd:2a:
         cf:8b:56:ae:ce:79:8c:01:7e:cf:16:ba:f5:3a:f6:ee:39:82:
         31:87:82:50:6a:7a:0c:18:db:f3:4a:47:a3:02:36:f1:fe:ff:
         09:e6:d5:c2:0e:69:fb:65:28:35:25:30:91:9c:73:cf:85:0c:
         cc:73:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 12:17:15 2022 by rpki-client.