Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf AE55461CC47D11EC9D62438BF1222468.roa
File:                     AE55461CC47D11EC9D62438BF1222468.roa (download)
Hash identifier:          ZwUe1oubT6aGeZXaGs8UvQKSz5si1SAkxjHbVrGwPng=
Subject key identifier:   BA:8F:CB:F1:86:40:10:F8:F9:7D:91:B5:45:C0:6E:D1:C1:AA:E1:48
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       137E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE55461CC47D11EC9D62438BF1222468.roa
ROA valid until:          Jan 30 09:54:18 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.251.76.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4990 (0x137e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 25 09:54:18 2022 GMT
            Not After : Jan 30 09:54:18 2023 GMT
        Subject: CN=62666fce-eb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:d4:ab:f5:9b:f5:37:2a:4b:19:8f:f1:de:
                    83:94:68:4b:a0:bc:d9:63:bd:e1:0b:47:1f:33:e5:
                    87:2d:bf:e7:f1:30:67:77:2d:c7:0f:99:5a:5b:b7:
                    3d:06:e0:41:7d:51:e3:e8:ae:fd:b6:43:15:65:49:
                    b2:fa:30:8a:46:e5:2d:e6:f4:73:46:55:a7:a6:ba:
                    b8:2c:a8:ea:b0:4c:11:16:f5:a4:48:78:34:4e:bf:
                    55:86:44:28:73:fc:2a:69:12:ef:c9:28:7b:0a:b1:
                    87:12:c7:72:05:f0:1b:ff:6b:bf:e1:fb:ce:d4:63:
                    b1:86:a9:d0:5a:c7:f0:c2:c3:fc:c9:6e:73:f8:2b:
                    c3:c9:15:fa:df:68:e6:98:df:b0:d3:34:b6:99:8a:
                    47:98:01:55:08:dd:e8:0a:e9:20:dc:e7:de:d0:b1:
                    09:80:e8:30:07:31:53:e3:a0:7e:1e:45:5f:e9:7a:
                    81:af:b7:6d:14:78:65:b7:0f:4d:fd:16:4a:6a:2e:
                    6a:40:a3:ec:1b:da:43:86:ef:9a:f9:16:bb:66:91:
                    e7:39:e5:08:a4:b9:e4:f5:64:4c:ea:84:0d:ae:bc:
                    b5:78:1d:15:68:90:2a:24:de:c2:94:bc:57:22:eb:
                    b9:ac:2d:a3:21:d8:d5:14:56:b9:0f:98:7b:e5:55:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BA:8F:CB:F1:86:40:10:F8:F9:7D:91:B5:45:C0:6E:D1:C1:AA:E1:48
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE55461CC47D11EC9D62438BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:2b:d0:66:64:13:92:d4:42:00:28:c1:ff:73:ee:56:50:
         d1:b0:87:b4:e6:4b:e6:51:b5:b2:7e:d7:78:5b:5a:00:ce:be:
         5e:9a:38:41:e2:31:6b:f6:f9:f1:7a:9c:bb:9c:95:b7:c1:21:
         ae:f7:83:86:02:0d:2f:0d:e3:58:86:f0:96:e3:11:cc:c3:cc:
         75:bf:9d:1a:05:66:d1:ed:6a:4f:37:86:da:8d:4a:d4:6c:f5:
         13:96:98:6e:65:c0:49:b1:68:3e:81:21:59:b0:dc:fc:db:aa:
         17:c8:f9:9c:f9:32:c8:53:42:8a:5e:3d:4a:f4:f4:82:19:4c:
         8b:74:10:41:a2:14:a8:ca:25:32:37:e3:5c:d3:d0:25:80:bf:
         14:8d:83:cf:97:26:54:94:5d:d7:82:71:eb:e5:99:3a:2b:f3:
         be:f9:1b:eb:b2:e3:66:c8:40:9d:76:60:ab:52:ed:fa:a8:b4:
         6e:be:72:8f:07:6f:07:23:55:30:ad:8d:d7:6f:82:34:c2:e4:
         df:27:33:32:85:d0:fe:be:bc:d5:dd:80:51:9e:4f:c6:71:66:
         52:99:bc:41:6f:66:73:49:3f:68:97:f4:59:19:97:c3:94:04:
         c6:5e:2a:f8:ca:50:46:30:2f:a5:91:07:e8:20:12:35:fb:64:
         4b:7c:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:11:32 2022 by rpki-client.