Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA0768A0B5211EF8E9BFD22017001B1.roa
File:                     0BA0768A0B5211EF8E9BFD22017001B1.roa (raw, json)
Hash identifier:          Ouu4EQ50YdrXXEq4Uldz7rqRrpLq4IPpLHztfst6aAQ=
Subject key identifier:   83:60:22:5E:8F:55:F4:DB:00:69:78:54:8D:BF:73:B1:81:9F:5F:58
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B4AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA0768A0B5211EF8E9BFD22017001B1.roa
Signing time:             Mon 06 May 2024 02:40:48 +0000
ROA not before:           Mon 06 May 2024 02:40:45 +0000
ROA not after:            Tue 11 Jun 2024 02:40:45 +0000
asID:                     138915
IP address blocks:        154.205.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46250 (0xb4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  6 02:40:45 2024 GMT
            Not After : Jun 11 02:40:45 2024 GMT
        Subject: CN=66384330-fe90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:cb:67:08:5b:9c:19:f9:51:6d:ce:56:ee:
                    e0:f4:58:a9:e3:55:2b:54:8a:e3:37:4b:09:e3:14:
                    04:78:dd:03:dd:1f:b9:46:43:c5:99:4d:4d:a7:35:
                    7b:2c:db:2c:38:e2:01:cf:cd:60:6a:e3:d3:f1:ba:
                    4c:18:46:8a:9d:31:6e:f6:67:28:6e:63:c9:88:b6:
                    cb:31:42:0d:05:94:de:b2:bf:32:8f:d5:a9:e8:42:
                    96:5e:90:4a:42:df:68:76:88:f0:e2:11:fc:dd:ab:
                    ac:84:4d:a2:a1:0b:6d:41:98:d4:f6:26:b4:b6:55:
                    c3:00:6d:e9:0c:96:cf:94:bc:7c:9f:a0:95:62:64:
                    21:5d:70:50:84:a1:e6:a9:ca:6b:d5:6c:8b:60:3c:
                    52:be:5f:b0:e4:90:6c:de:5b:7b:fc:f9:17:77:2a:
                    c2:17:74:e4:dd:76:f9:67:86:c5:c2:f2:8c:05:56:
                    ee:49:5f:ee:dc:5c:96:7a:8e:d3:03:b7:54:aa:58:
                    cd:a1:ba:49:06:97:5e:1b:78:67:97:6a:aa:2a:4c:
                    5d:44:07:7d:11:30:4b:49:ba:ec:e9:6e:84:e2:5d:
                    30:3d:8a:08:90:05:b3:0c:4f:3b:57:79:e3:ea:b4:
                    66:40:f5:21:c1:b3:57:29:37:7a:d3:39:b7:6f:ad:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:60:22:5E:8F:55:F4:DB:00:69:78:54:8D:BF:73:B1:81:9F:5F:58
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA0768A0B5211EF8E9BFD22017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:36:72:7b:59:ed:37:02:e7:c0:c3:ba:4c:18:79:08:10:92:
         a8:32:bb:41:e0:2d:a0:51:1d:98:56:cc:fd:e9:6b:8b:a0:bd:
         6d:72:87:f1:4a:16:31:e8:e1:48:59:52:1f:f7:b2:60:fd:8b:
         a6:33:68:10:2f:0f:79:db:1a:53:48:e4:de:cb:9b:73:8c:f2:
         e6:e8:36:6c:ea:bb:66:00:16:c4:78:a8:ea:09:d3:10:2e:fe:
         8c:77:97:aa:0e:06:02:91:22:a1:e7:32:62:8d:13:3f:2a:ec:
         cc:26:3b:31:c1:06:6d:e4:43:8c:26:03:32:30:54:eb:5d:f8:
         ad:bb:51:2a:f8:70:bb:0d:ad:3a:93:f3:de:f7:39:1e:e1:63:
         05:f6:7b:fa:82:19:a9:f3:ce:fa:8f:c1:6b:fb:f3:2b:52:c8:
         df:c2:af:8a:28:24:da:a1:86:4e:c4:a4:bb:66:25:61:0d:7c:
         a9:76:67:94:ba:3b:6f:86:c3:0c:e4:a5:2f:11:ff:1c:81:6d:
         4e:57:79:72:0c:2d:0f:25:6f:9e:ac:bd:68:a5:59:12:8b:36:
         70:53:9d:6e:b4:7c:6b:fa:0e:0b:0a:72:e0:96:8e:05:68:41:
         a0:6d:ba:13:a8:67:e5:41:50:47:03:be:b9:ec:e6:a8:26:95:
         8d:c4:15:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALSqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDI0MDQ1WhcNMjQwNjExMDI0MDQ1WjAYMRYw
FAYDVQQDEw02NjM4NDMzMC1mZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsCjLZwhbnBn5UW3OVu7g9Fip41UrVIrjN0sJ4xQEeN0D3R+5RkPFmU1N
pzV7LNssOOIBz81gauPT8bpMGEaKnTFu9mcobmPJiLbLMUINBZTesr8yj9Wp6EKW
XpBKQt9odojw4hH83aushE2ioQttQZjU9ia0tlXDAG3pDJbPlLx8n6CVYmQhXXBQ
hKHmqcpr1WyLYDxSvl+w5JBs3lt7/PkXdyrCF3Tk3Xb5Z4bFwvKMBVbuSV/u3FyW
eo7TA7dUqljNobpJBpdeG3hnl2qqKkxdRAd9ETBLSbrs6W6E4l0wPYoIkAWzDE87
V3nj6rRmQPUhwbNXKTd60zm3b62uvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFINg
Il6PVfTbAGl4VI2/c7GBn19YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQkEwNzY4QTBCNTIxMUVGOEU5QkZEMjIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2RMA0GCSqGSIb3DQEB
CwUAA4IBAQDFNnJ7We03AufAw7pMGHkIEJKoMrtB4C2gUR2YVsz96WuLoL1tcofx
ShYx6OFIWVIf97Jg/YumM2gQLw952xpTSOTey5tzjPLm6DZs6rtmABbEeKjqCdMQ
Lv6Md5eqDgYCkSKh5zJijRM/KuzMJjsxwQZt5EOMJgMyMFTrXfitu1Eq+HC7Da06
k/Pe9zke4WMF9nv6ghmp8876j8Fr+/MrUsjfwq+KKCTaoYZOxKS7ZiVhDXypdmeU
ujtvhsMM5KUvEf8cgW1OV3lyDC0PJW+erL1opVkSizZwU51utHxr+g4LCnLglo4F
aEGgbboTqGflQVBHA7657OaoJpWNxBU0
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:17 2024 by rpki-client on console-ams.rpki-client.org