Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf 9483799A250B11EDB91025E8F1222468.roa
File:                     9483799A250B11EDB91025E8F1222468.roa (download)
Hash identifier:          Ea/h9YLC3zB3Fiw3BRLvV0FcqpiHmytGpE/Ppgpa2hU=
Subject key identifier:   B2:60:21:99:2E:99:C0:37:6E:57:F4:19:92:D1:E2:D5:7C:8D:A7:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9483799A250B11EDB91025E8F1222468.roa
ROA valid until:          Jan 15 06:51:55 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.225.101.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5885 (0x16fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 06:51:55 2022 GMT
            Not After : Jan 15 06:51:55 2023 GMT
        Subject: CN=63086d8e-cf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:dc:3c:ab:c8:00:e5:fc:7c:b9:8e:5f:ee:
                    62:17:72:d6:b0:4b:c9:bf:44:57:17:d1:03:cf:8c:
                    58:80:49:6d:d6:4d:5d:ea:99:3c:b8:99:1d:b3:a9:
                    29:64:35:91:a6:b2:02:81:10:6a:5a:1e:cd:42:c1:
                    c5:5a:b1:b4:d4:2a:83:5d:1c:2d:48:50:db:89:91:
                    eb:48:4e:2a:16:dc:1e:bd:3d:27:a4:7c:40:c3:cd:
                    4a:da:79:0c:e2:da:d3:51:86:57:03:83:52:29:cd:
                    f8:b1:79:c5:87:7d:62:a7:48:97:9f:13:cd:df:f2:
                    49:0c:27:17:2f:e2:fb:c0:12:ea:0a:4d:fe:40:7c:
                    45:90:f0:fd:85:3c:e4:b5:a9:81:5d:4c:30:7f:cd:
                    ba:4f:5f:ea:88:74:e4:a2:4a:56:56:dc:87:dc:62:
                    01:96:52:3e:38:a3:21:74:65:9e:fc:91:68:f5:45:
                    69:0b:e2:e1:16:d1:df:71:6f:e7:37:19:6c:0b:4e:
                    dd:65:b1:06:6b:dd:6f:33:58:82:f6:31:5e:5f:57:
                    e0:61:3c:c6:af:a9:3d:c1:ee:fa:aa:0d:0a:9f:41:
                    15:7c:bf:1b:11:e5:eb:2f:8d:f8:7f:b5:76:6c:1e:
                    b1:56:f1:30:2a:f5:ad:f4:21:cd:5f:ef:9c:e0:47:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B2:60:21:99:2E:99:C0:37:6E:57:F4:19:92:D1:E2:D5:7C:8D:A7:2F
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9483799A250B11EDB91025E8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:84:42:60:ab:ca:1f:a2:f5:20:21:92:75:62:c4:2f:d5:2e:
         8e:bb:dc:d7:7a:c4:b2:e9:f7:68:10:e8:38:2c:e7:74:c3:47:
         f4:63:70:de:fc:a6:45:fe:69:98:0b:70:9f:c8:25:31:1f:85:
         8c:16:32:ba:6a:77:19:14:8a:7c:29:06:34:f3:c7:cc:9d:0e:
         45:e4:5b:f1:b2:32:49:08:80:71:69:33:56:ee:5c:2e:35:dd:
         93:4f:85:da:72:7e:05:15:42:6a:66:20:97:06:b8:91:66:40:
         d2:73:6a:97:08:ac:bd:68:ca:ff:86:bd:5c:bb:21:51:f2:e2:
         89:83:a9:79:06:f1:6a:f6:e3:5d:c3:94:cb:c0:5d:7e:49:4f:
         01:b9:25:1c:ad:c2:e0:c1:e6:cb:c8:a4:57:dd:3b:a4:a5:48:
         96:c2:10:99:3a:c3:1d:5b:3d:54:1b:b9:53:ac:1a:ec:3f:77:
         82:e8:06:d5:18:a6:a1:1f:7f:02:bc:df:71:db:a2:cd:37:e0:
         f4:b3:5d:fc:47:83:63:db:43:fc:e7:ce:3e:bb:f2:e1:0b:f3:
         93:5e:65:8c:1a:fd:64:90:aa:10:8c:43:2d:34:35:4f:61:c7:
         75:33:a4:03:e3:8e:ff:33:97:aa:21:99:20:7a:f9:ac:5f:76:
         9e:7c:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:48:34 2022 by rpki-client.