Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf 2279CD26250C11ED965016EAF1222468.roa
File:                     2279CD26250C11ED965016EAF1222468.roa (download)
Hash identifier:          US6xUs2uXiPVCTnD4NWXHxjOtZhOAfcDpNjFTbBxjDs=
Subject key identifier:   25:EA:0B:4B:3B:11:E3:69:65:E1:2E:4D:AB:78:7B:49:73:CB:29:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1711
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2279CD26250C11ED965016EAF1222468.roa
ROA valid until:          Jan 15 06:55:54 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.225.111.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5905 (0x1711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 06:55:54 2022 GMT
            Not After : Jan 15 06:55:54 2023 GMT
        Subject: CN=63086e7d-a25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:e2:9b:dd:05:9f:65:3e:9e:d4:81:8d:a6:
                    49:03:7a:67:65:9b:8c:40:0d:a7:42:56:41:4b:04:
                    13:43:2e:3f:a1:01:ac:f7:b0:0a:10:19:47:e1:b7:
                    7f:e8:4d:fe:0a:3f:3f:5c:d5:ef:cf:04:c1:52:16:
                    82:ec:28:fc:fc:86:a6:4f:56:f4:73:26:19:00:14:
                    15:ee:33:09:6c:43:bb:29:ba:64:5a:b1:da:3b:4a:
                    d5:e3:53:67:cc:fb:41:71:63:b9:3c:32:bd:89:24:
                    1f:e0:af:c4:05:43:75:94:9a:ef:da:ee:6b:71:b6:
                    61:c4:cb:83:7a:97:1a:81:eb:11:82:e5:12:07:99:
                    ae:83:26:47:c7:2e:cb:6f:44:b9:f2:07:14:6c:d1:
                    89:54:7d:45:10:52:5a:74:3c:0e:cb:be:df:6a:6c:
                    8e:1e:2e:9b:2d:a6:8f:67:59:57:5e:0f:2c:fa:6a:
                    7d:12:fb:4c:8e:a6:6a:3f:e8:15:54:da:29:82:6f:
                    7a:79:a9:a3:6a:6a:d5:06:de:4c:1d:78:34:7b:a1:
                    56:ca:c3:48:c6:5a:5e:2d:4a:e1:43:3a:54:23:ad:
                    04:f0:8c:9d:f6:9e:35:dc:8a:22:0b:61:07:24:1f:
                    31:23:0a:db:be:14:bc:7d:2c:c8:78:00:58:ba:fe:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                25:EA:0B:4B:3B:11:E3:69:65:E1:2E:4D:AB:78:7B:49:73:CB:29:73
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2279CD26250C11ED965016EAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:1d:98:ee:0e:2e:97:12:7f:44:b9:73:00:a6:5e:42:7f:
         13:d2:8a:bf:93:f5:7e:8e:bc:b6:ae:d7:e9:75:d6:e4:a5:0f:
         78:a8:7f:f2:1e:09:71:84:26:bd:1d:94:90:27:18:43:34:d2:
         92:cc:dd:cd:ca:02:dd:0c:d0:c2:11:7b:87:a6:3d:b2:0f:87:
         ce:ad:a6:38:33:09:07:0d:57:d8:83:a1:f4:a1:62:fd:62:8e:
         71:be:50:4f:6a:4c:fc:e6:76:90:78:34:00:6e:e2:2c:ce:6f:
         71:46:af:90:1b:af:70:6d:02:3e:b8:17:ba:10:1b:33:2a:1d:
         9a:3c:69:a7:9b:63:5e:67:e7:0e:1c:2b:9a:eb:32:6d:f1:d9:
         e9:c5:6c:34:fe:66:5f:25:6c:52:83:8c:44:22:e9:3d:df:55:
         61:e0:3c:8c:8d:cb:55:3d:18:cc:6a:f2:3c:c8:14:b7:2d:4f:
         2a:6d:dd:4e:95:b3:9b:2e:c0:d7:56:b8:3b:6f:37:d6:9e:46:
         35:49:ba:8f:65:5d:d0:67:81:2b:20:07:7c:ea:6c:e7:e2:67:
         ec:16:0a:43:93:14:60:e7:7b:a0:f1:ce:78:14:ab:26:e6:64:
         00:31:35:ce:01:d2:b7:00:84:30:fb:b5:4c:a1:e9:44:a7:00:
         fc:57:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:34:22 2022 by rpki-client.