Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf C9F84A92250B11ED93D5DBE8F1222468.roa
File:                     C9F84A92250B11ED93D5DBE8F1222468.roa (download)
Hash identifier:          2ZSruYWvnAbYTwU/bfv99gtx3iijJJWCTjbZVsC5ryw=
Subject key identifier:   1D:EF:A7:B5:0B:53:5D:B5:AF:19:86:FE:0B:86:3D:E3:37:08:ED:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1705
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9F84A92250B11ED93D5DBE8F1222468.roa
ROA valid until:          Jan 15 06:53:25 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.225.105.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5893 (0x1705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 06:53:25 2022 GMT
            Not After : Jan 15 06:53:25 2023 GMT
        Subject: CN=63086de8-c138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:89:71:da:3f:bb:2a:52:52:49:19:c6:da:
                    65:ea:dd:e1:c4:60:d6:15:20:05:b2:50:ef:d7:41:
                    f2:c5:da:2a:1a:20:bb:1b:de:e4:5c:80:71:5f:93:
                    f9:8f:aa:13:59:84:8e:7b:11:0a:78:dc:67:e1:da:
                    c6:5b:8a:a1:6d:09:e7:2f:83:81:59:0e:ac:b8:41:
                    c8:27:dc:86:d6:67:7f:d1:45:8e:6d:0c:d8:16:1f:
                    ed:11:56:ef:87:87:1a:81:cd:14:53:1e:5e:a1:e6:
                    22:7f:26:97:d5:88:30:a6:e6:1d:dc:af:f6:54:4f:
                    77:97:2d:43:ea:5c:88:9b:3e:b7:91:fa:47:52:54:
                    ff:52:53:86:00:43:f9:3a:05:6b:1d:7c:63:7f:6d:
                    60:9b:dd:a6:5d:68:e9:b7:d9:89:f7:a7:de:ac:c7:
                    94:89:25:16:61:7f:3d:f0:23:86:ea:1d:c6:7e:c3:
                    2b:68:e7:5d:3c:4b:4e:5d:d9:22:23:9c:c9:d0:aa:
                    4d:6e:d0:79:c9:d0:91:8a:f4:9e:7b:2f:13:cd:72:
                    01:a6:05:5c:ee:23:09:c2:51:5e:d0:67:04:67:b6:
                    41:b9:16:b4:c7:c1:68:5d:9f:aa:0f:5b:36:4e:e0:
                    6d:ce:f3:6b:cb:f5:68:b3:e7:a8:38:53:e1:2b:46:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1D:EF:A7:B5:0B:53:5D:B5:AF:19:86:FE:0B:86:3D:E3:37:08:ED:41
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9F84A92250B11ED93D5DBE8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:61:95:3d:1a:7d:18:dc:9f:67:0c:dc:16:83:82:84:a3:3d:
         72:f4:86:17:67:ec:b0:1a:b2:56:0e:1c:34:53:3a:bf:b2:3e:
         a0:e5:bd:70:3d:04:6b:3f:48:21:fd:36:4e:a9:65:c6:49:b3:
         f8:2c:a1:11:1c:9a:36:18:da:96:32:80:70:7a:0f:13:91:2b:
         57:dc:3c:2c:69:5d:91:b0:2b:b2:2b:2a:ec:28:6b:80:b1:ac:
         50:5e:2e:20:c0:f2:59:90:ea:8a:76:6a:da:76:f3:47:5d:6b:
         0e:e7:91:65:92:d2:03:00:23:82:30:5a:ab:a5:1f:29:3f:c7:
         ae:29:2c:63:a2:25:b8:9e:52:74:aa:68:6b:fc:c8:e3:fc:f9:
         22:cc:2a:6c:3d:f3:44:e8:39:34:a6:82:0c:9e:74:db:37:75:
         e1:59:c3:c7:3a:39:5c:86:6b:bd:31:4e:0a:a4:59:71:40:9b:
         72:03:b1:57:b6:4f:69:76:ab:8d:d1:07:dc:7c:7f:6e:21:9e:
         92:72:06:b7:b5:a4:57:73:9f:19:09:85:8f:47:6a:9d:5f:3a:
         04:b3:ab:00:b0:15:f8:64:20:d6:84:c1:5a:a5:e2:4c:b1:ed:
         3e:08:89:aa:ce:02:01:af:1a:34:55:7d:34:7c:e6:e3:96:ab:
         7c:85:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:11:32 2022 by rpki-client.