Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf BBE51488C47D11ECB7B36A8BF1222468.roa
File:                     BBE51488C47D11ECB7B36A8BF1222468.roa (download)
Hash identifier:          4GKrYsZtYjmhUTMBHQv+B5z38WfEx5fl1q0bxCirzyQ=
Subject key identifier:   E9:15:1D:CD:DE:69:A2:0A:8E:65:91:C3:A4:7E:C5:77:13:14:6E:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1380
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51488C47D11ECB7B36A8BF1222468.roa
ROA valid until:          Jan 30 09:54:41 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.251.72.0/23 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4992 (0x1380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 25 09:54:41 2022 GMT
            Not After : Jan 30 09:54:41 2023 GMT
        Subject: CN=62666fe4-72fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:59:d7:c2:17:7f:e6:71:6e:6c:14:f6:2d:
                    37:83:91:af:00:c9:b8:7d:d0:4d:ec:63:9b:46:d3:
                    63:6a:c8:5c:bf:3c:95:f5:d0:25:57:68:c6:20:f3:
                    a2:24:56:51:92:ea:7a:76:12:02:fe:7c:b5:8a:f6:
                    af:c5:85:f3:4b:4b:32:e5:3e:4d:30:ce:68:2e:19:
                    d5:77:3f:6f:6c:23:72:96:76:d1:60:32:ba:22:22:
                    0e:12:cf:7b:c3:29:d8:5a:f8:93:61:39:16:cb:9b:
                    1b:2e:ce:21:9a:d3:73:8d:a0:75:c3:2b:c8:b7:c4:
                    70:2a:8b:1d:c8:c5:00:03:56:05:f6:a6:ed:c7:c5:
                    55:49:89:3d:b4:dd:9d:be:69:1c:78:61:70:6d:0f:
                    ac:1c:27:6c:66:13:bf:42:d7:f9:33:db:da:e2:cf:
                    8c:bd:87:34:73:e8:d3:47:b5:e6:fa:4e:bd:76:3d:
                    56:de:c4:fa:38:f7:68:99:4c:59:e5:5d:e8:83:b4:
                    41:1a:ee:bd:8a:4c:df:34:cc:b0:04:b4:04:e6:15:
                    af:a4:8d:16:e7:72:42:f6:3f:4a:f1:7e:2a:16:3c:
                    c4:4c:a1:b3:78:df:95:d6:64:bf:9e:1e:02:f9:87:
                    a7:86:dd:a4:07:4b:0e:23:e9:83:5f:3e:c8:90:8d:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E9:15:1D:CD:DE:69:A2:0A:8E:65:91:C3:A4:7E:C5:77:13:14:6E:91
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51488C47D11ECB7B36A8BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:ff:de:66:b5:19:ac:33:b4:32:0b:3e:61:98:85:40:7f:6e:
         91:c4:7c:10:93:0c:79:c0:d0:9a:d6:5d:c1:e3:73:2d:e6:b4:
         56:7f:16:ee:5a:95:a9:9f:05:cc:f9:8b:28:ff:91:33:a4:8f:
         1d:54:fc:56:1e:8f:64:c4:dc:b8:72:8c:a5:a9:a6:c3:8a:25:
         4b:13:41:fa:4d:c5:87:38:75:09:5f:d4:fe:75:d8:20:9d:02:
         1c:ce:a9:9b:d1:e7:b9:2c:af:98:1d:a3:b1:a6:42:cf:4d:ad:
         05:25:4b:e2:55:c4:d1:72:b2:36:d9:82:c6:66:d4:cf:59:6b:
         aa:4e:28:a6:12:16:78:e1:d0:7a:5f:fb:cb:68:e7:3b:21:10:
         1c:4a:6f:b5:aa:57:1e:5a:47:f8:af:2b:a8:99:87:b6:f4:c1:
         55:63:6c:32:a6:22:b5:6d:9d:2f:75:70:a7:59:df:52:ba:22:
         00:dd:d6:20:a2:83:22:65:a1:e7:89:62:66:8c:3a:c4:cc:51:
         31:41:16:71:37:22:84:5b:71:13:51:6b:99:ac:ba:6f:b3:d9:
         48:6c:3d:30:47:8b:16:c9:34:a9:60:9e:41:77:78:ca:d2:70:
         3b:02:05:17:6a:72:95:81:41:27:9e:8a:a4:a8:02:84:da:e4:
         77:a3:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:11:31 2022 by rpki-client.