Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf D4ABE020250B11ED9A30F6E8F1222468.roa
File:                     D4ABE020250B11ED9A30F6E8F1222468.roa (download)
Hash identifier:          sXrZuFHA7iQL00X5IWxw1AMT9z9tIo9hT6NoWSCWglE=
Subject key identifier:   83:EB:5F:D9:7C:17:4B:E0:26:83:2D:14:DA:3E:82:13:3F:06:77:BD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1707
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4ABE020250B11ED9A30F6E8F1222468.roa
ROA valid until:          Jan 15 06:53:43 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.225.106.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5895 (0x1707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 06:53:43 2022 GMT
            Not After : Jan 15 06:53:43 2023 GMT
        Subject: CN=63086dfa-093c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:dd:1c:f9:b1:f2:d9:a7:2a:12:f6:86:81:
                    8e:76:85:23:20:d2:f6:0e:8e:4f:0a:31:c7:c7:20:
                    ae:87:0c:1d:92:76:89:6d:59:71:55:e2:de:4d:09:
                    8a:66:0a:0d:b5:ff:8d:8b:3d:94:9b:b5:51:2d:e8:
                    12:2c:e0:87:f0:ee:be:97:c3:e8:12:0c:a3:86:fe:
                    d8:e8:30:c3:ff:10:d3:0b:a7:ec:24:47:25:43:7c:
                    3e:33:f6:9c:04:bc:c6:f9:01:ff:b6:e8:64:57:19:
                    61:49:00:a0:80:56:dd:92:79:00:2a:7f:fc:ba:a4:
                    f6:99:76:ed:00:26:a9:8c:b1:8f:57:0c:ab:cb:80:
                    5f:fd:b7:f8:1e:b1:62:0c:41:92:62:9a:0d:11:1a:
                    7a:60:5a:35:a0:1d:17:f2:d8:cb:7e:14:24:2d:7c:
                    be:6c:73:af:f9:7f:37:c7:84:a7:b2:1d:13:32:ff:
                    f5:c3:9f:e9:0b:77:98:aa:d3:ee:86:9b:af:95:83:
                    6c:7e:5f:50:9c:67:03:35:53:01:e0:c4:3b:87:68:
                    26:a3:e3:64:6d:c8:98:9c:d1:00:e1:4a:47:e7:37:
                    3e:9b:1c:74:0d:0c:76:7a:1d:72:cd:41:5b:f8:0c:
                    f4:6e:80:72:01:97:5c:db:5d:90:e2:3e:69:d0:cd:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                83:EB:5F:D9:7C:17:4B:E0:26:83:2D:14:DA:3E:82:13:3F:06:77:BD
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4ABE020250B11ED9A30F6E8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:b2:c7:74:0f:20:29:f3:0f:0c:dc:0b:0c:8f:41:1a:a3:
         ba:66:b5:49:72:4b:c0:aa:dd:1e:29:ef:fa:90:bb:51:88:78:
         e4:5e:9d:33:3d:a3:bd:b6:48:c2:a9:95:f4:f1:c2:2d:61:4e:
         22:6e:a2:ab:eb:e8:e7:47:8c:97:21:fb:e7:06:cb:ae:e9:9e:
         8c:3f:ab:1d:a1:4f:7d:c9:cd:14:18:3c:39:ce:1d:6c:17:63:
         fe:20:08:e1:12:8a:2b:cf:bf:8e:6c:eb:01:8c:22:79:61:78:
         38:46:0d:0e:97:16:a4:50:56:bf:55:84:17:4f:d0:bb:2d:c4:
         9a:7e:a5:a9:cc:5a:73:b1:f7:9b:66:d5:28:96:4f:5d:55:df:
         84:9e:80:e3:70:eb:02:17:7a:23:ff:cb:91:b8:23:c3:1d:96:
         45:44:dd:44:f8:fc:09:9a:3c:73:e6:b3:72:0d:29:6a:8e:c3:
         b5:a3:ba:9c:53:55:b1:c7:43:6b:ab:86:24:e2:a3:a7:43:d1:
         e5:ba:3b:63:7b:2a:ec:5a:77:b1:f1:19:d0:58:86:dd:3c:b7:
         4a:0e:f1:47:91:41:71:d6:f6:dd:11:22:85:58:1c:d6:be:ab:
         2a:74:44:a1:f6:95:f4:79:86:c2:fe:94:b3:19:d2:85:84:ca:
         27:9a:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:34:27 2022 by rpki-client.