Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf 4A678E44C47D11ECB462F089F1222468.roa
File:                     4A678E44C47D11ECB462F089F1222468.roa (download)
Hash identifier:          hJwlpcj9Q6Aa8rTM2fR4w6SQ74dj6VFopUmNl6PB6nI=
Subject key identifier:   E3:EE:59:DC:4E:2C:6E:6E:0E:65:FC:AC:35:98:0C:89:FB:0C:77:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1374
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A678E44C47D11ECB462F089F1222468.roa
ROA valid until:          Jan 30 09:51:30 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.251.68.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4980 (0x1374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 25 09:51:30 2022 GMT
            Not After : Jan 30 09:51:30 2023 GMT
        Subject: CN=62666f26-73d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:8b:14:df:d9:45:07:05:e8:5e:ef:4b:59:
                    22:e6:7d:0c:93:54:f5:12:46:f2:0c:38:70:c6:46:
                    32:20:61:dc:a5:d8:a7:64:d4:c4:97:47:56:bd:92:
                    cf:89:d5:7e:6d:28:8a:aa:86:a3:6b:a9:e7:d0:9e:
                    30:cb:24:e5:3e:37:e2:92:f0:01:85:90:62:84:76:
                    c2:ff:41:e5:7f:d4:3a:52:0c:e0:2d:a6:c4:15:c4:
                    ee:33:f4:07:ce:7f:a5:1a:01:50:bb:e8:f6:2e:8b:
                    93:f7:c0:10:bd:26:ca:8d:fc:76:26:9b:5d:39:78:
                    bf:f7:13:98:43:39:c7:6b:82:e9:4a:5e:63:b7:2f:
                    0f:65:37:ec:2d:d1:58:26:af:a8:0b:5a:af:9e:7d:
                    4c:b0:e7:98:42:b9:98:79:5b:34:1b:85:65:ac:21:
                    72:6a:fc:c1:7e:cb:ce:4f:ac:61:9f:d4:e9:af:fd:
                    66:dd:f3:2f:f5:26:8b:f4:7a:6e:4f:ef:12:ce:f1:
                    2f:63:a9:27:ab:67:dc:8f:d2:92:6c:37:54:d9:98:
                    1c:63:e6:92:27:1b:8c:6b:a3:31:f1:40:c8:d2:4d:
                    ba:a0:46:81:ce:0d:6a:3d:0b:04:f0:0e:6d:18:2e:
                    4e:0e:84:a8:f8:7c:2a:2a:11:40:d7:14:0f:1b:9a:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E3:EE:59:DC:4E:2C:6E:6E:0E:65:FC:AC:35:98:0C:89:FB:0C:77:84
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A678E44C47D11ECB462F089F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:21:40:27:11:ea:31:17:c3:62:a7:75:bf:ed:c2:23:97:
         90:d3:3d:9a:12:29:68:dd:f8:ee:9a:eb:ec:38:6b:53:0b:f3:
         c9:a2:49:56:7e:af:e1:b6:d8:f1:e3:18:68:94:45:b5:20:f1:
         b1:f1:3a:61:0a:81:cb:22:82:a7:d5:db:d5:b7:ae:f7:9c:fb:
         ab:2d:9a:12:53:11:37:93:4e:f4:cb:02:c8:3a:a6:d5:6c:c9:
         f5:8e:80:c6:f1:93:d6:93:53:61:06:2e:60:da:f7:9e:cc:45:
         d0:04:1f:3d:92:02:2a:a7:6e:81:82:77:a3:67:db:df:a3:8e:
         a2:18:56:b0:6d:08:6b:d4:34:7a:82:0b:0d:a4:50:09:6e:35:
         c1:dc:c2:37:83:72:e5:b7:0a:09:4b:72:4c:12:ef:96:62:47:
         c3:b8:b0:ed:0b:44:a0:91:6e:57:ac:9d:66:41:d4:ed:25:09:
         88:63:1b:6f:45:d5:44:aa:90:de:81:78:5b:b9:5d:f4:45:6d:
         82:42:02:99:6c:4c:15:6b:65:09:7f:40:97:0b:5a:07:cf:8c:
         3d:97:95:ff:e0:28:bf:cf:36:5f:7b:b1:88:22:c6:ab:10:de:
         a2:09:45:d1:cf:45:ca:e3:d3:85:0f:ff:b6:6a:10:e6:53:31:
         b8:e9:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:48:34 2022 by rpki-client.