Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3DF5314412B311EF9876EF4F017001B1.roa
File:                     3DF5314412B311EF9876EF4F017001B1.roa (raw, json)
Hash identifier:          vOY85f1nUHU7+/StNr8tt8wqPCc89GnTMffQ/oM3LJk=
Subject key identifier:   0B:8A:E1:48:CF:5A:A9:6D:27:01:C7:6F:23:35:FC:5B:98:87:55:04
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0460
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3DF5314412B311EF9876EF4F017001B1.roa
Signing time:             Wed 15 May 2024 12:04:12 +0000
ROA not before:           Wed 15 May 2024 12:04:08 +0000
ROA not after:            Wed 15 May 2030 12:04:08 +0000
asID:                     50917
IP address blocks:        102.217.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 03 Jun 2024 00:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 15 12:04:08 2024 GMT
            Not After : May 15 12:04:08 2030 GMT
        Subject: CN=6644a4bc-d307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:94:cb:32:51:87:12:98:fc:a6:95:93:e0:
                    a4:a6:d3:7d:a5:50:84:68:dd:9e:64:0a:03:cf:50:
                    23:a8:a8:14:10:e6:c8:c9:1a:3e:f3:dc:cc:d3:b1:
                    55:7f:4d:5f:e2:1d:53:aa:e1:d5:3a:b3:93:2e:e7:
                    80:cb:64:39:fc:63:8b:4d:dd:54:66:0e:bd:2b:bc:
                    8d:96:89:33:0f:4b:60:03:b5:c5:86:64:7d:d7:9d:
                    f9:c2:0f:03:80:9f:ca:3e:87:5b:92:4c:8f:89:93:
                    95:85:d4:4d:cc:9f:fd:f4:0f:13:84:53:6b:c3:94:
                    62:e6:bf:28:53:c0:83:e1:d0:68:1d:9c:5b:58:65:
                    f9:e3:f4:d2:69:3c:5a:a8:44:d2:6b:d1:48:53:ff:
                    1a:2b:6d:d8:54:37:5e:d7:d6:79:79:83:ea:a5:1c:
                    44:51:59:19:6b:bc:78:c6:91:91:d0:71:3f:63:b5:
                    1b:fc:1b:85:85:0e:34:76:56:86:49:10:16:c1:fc:
                    45:76:e8:9a:91:1b:8b:87:c5:96:b7:14:a6:66:b2:
                    1e:e4:16:f9:25:2c:c2:1d:72:88:cd:cd:86:ae:78:
                    49:a1:ba:10:8b:69:3c:fa:62:59:e2:2b:4e:20:e7:
                    be:34:32:d0:ee:79:81:6d:5e:88:0a:77:ab:29:5b:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:E1:48:CF:5A:A9:6D:27:01:C7:6F:23:35:FC:5B:98:87:55:04
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3DF5314412B311EF9876EF4F017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:93:cb:e8:a6:32:09:ed:14:33:81:10:58:20:e6:51:2b:3f:
         0d:cf:76:88:8f:92:56:80:cc:29:da:7a:e7:5e:7a:b7:f4:ce:
         9d:1f:e7:9c:26:9b:4d:da:bb:38:ab:8d:5b:28:fb:9e:a7:a2:
         af:25:38:54:90:e2:f1:71:18:4d:d5:e4:62:27:23:13:29:83:
         3d:a0:d1:ff:6d:40:f4:c2:1a:f4:87:3c:6d:5c:e3:cf:26:93:
         a0:4e:28:bd:7a:ad:d2:1a:d9:15:cd:55:9a:ee:b6:06:99:e5:
         fc:35:bd:20:32:ed:19:4f:91:53:5d:a1:09:15:b2:08:7a:fa:
         11:e4:32:42:64:c0:18:9a:70:4d:0c:a9:1c:f8:28:e3:1a:1a:
         a7:b3:fd:ca:7e:b1:31:ac:0a:3f:3e:42:76:7b:eb:9f:42:16:
         1c:b5:fb:51:29:44:df:df:c9:35:70:e4:82:58:fe:9a:99:f6:
         52:28:98:0f:ed:d5:aa:3b:a7:31:8a:6d:ff:05:fa:25:02:67:
         1b:90:fa:f1:41:cf:3c:47:2c:4c:93:bc:18:0f:59:99:55:87:
         00:26:d7:47:cd:bd:b6:96:b6:e1:69:e2:ac:b9:33:5b:68:90:
         a7:01:64:52:91:17:e0:6e:07:7d:43:2a:ec:83:5d:ae:f8:a8:
         52:21:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:11 2024 by rpki-client on console-ams.rpki-client.org