Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7D862E061211EFB5E01A64017001B1.roa
File:                     2E7D862E061211EFB5E01A64017001B1.roa (raw, json)
Hash identifier:          6Nd8R6vqSj1tob+Qh2Z1s7nt204r/6tb7jqdBEhZ+0A=
Subject key identifier:   DA:6E:88:55:71:B1:90:E9:58:9D:76:63:C2:30:1A:17:C8:C7:A4:4A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B242
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7D862E061211EFB5E01A64017001B1.roa
Signing time:             Mon 29 Apr 2024 10:21:03 +0000
ROA not before:           Mon 29 Apr 2024 10:20:59 +0000
ROA not after:            Fri 07 Jun 2024 10:20:59 +0000
asID:                     63139
IP address blocks:        154.223.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45634 (0xb242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 29 10:20:59 2024 GMT
            Not After : Jun  7 10:20:59 2024 GMT
        Subject: CN=662f748f-b6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:af:2d:1c:f6:2a:dd:75:9a:20:ec:2a:0f:67:
                    e3:8c:30:1d:32:7c:21:9b:19:4e:29:6d:57:dd:ed:
                    10:50:11:d3:9d:ac:97:0f:35:58:27:13:04:b0:cb:
                    9c:35:6f:63:d0:45:f4:2c:33:92:03:07:81:99:01:
                    4b:4a:b6:5c:65:89:fd:2e:2e:ae:75:9a:37:91:64:
                    33:97:58:b5:4e:a5:e8:f1:32:e0:75:82:90:01:1d:
                    b1:4c:6c:c0:fe:03:3d:62:25:6a:ff:a5:82:ab:48:
                    f5:21:f6:0b:64:c3:08:aa:0b:41:72:2e:7f:4a:52:
                    57:6f:8e:a6:55:b8:d7:a2:89:18:15:29:cc:e3:cc:
                    43:99:fb:3e:50:19:cc:ec:75:95:8b:6c:0d:f1:d1:
                    e2:58:5f:e5:29:da:ef:c8:2d:e6:b1:30:e1:e3:f3:
                    d6:89:ad:32:ea:b3:d7:a9:c3:b3:06:c5:c4:3b:58:
                    39:5a:1c:92:fc:93:b8:fb:a3:d7:0e:9e:be:7f:bd:
                    17:ed:3a:8a:55:43:8c:78:58:c6:97:ba:93:4f:60:
                    83:7c:90:75:d7:9e:2c:75:c2:12:b0:7d:7a:a6:48:
                    98:88:4f:ad:56:d9:be:40:f8:84:26:fb:ed:6e:f6:
                    5b:12:31:66:eb:03:fa:5b:bc:7c:53:e5:78:89:7e:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:88:55:71:B1:90:E9:58:9D:76:63:C2:30:1A:17:C8:C7:A4:4A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7D862E061211EFB5E01A64017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f8:70:13:60:57:27:10:2c:61:52:21:f5:c2:9e:78:b6:f3:
         76:da:17:5d:e7:e5:1b:c1:0c:c4:8f:2d:1a:ee:84:28:f1:18:
         ec:34:61:f1:ec:88:49:50:1a:d7:a9:88:65:52:bc:54:6e:10:
         40:aa:cb:8d:9a:f3:80:d6:b7:ea:8a:70:a0:ff:b0:3b:06:68:
         83:5a:fd:33:28:60:f1:50:54:ae:2e:5f:be:cc:4c:27:11:27:
         69:70:57:9c:fc:8b:52:e8:e8:fc:e0:dd:88:f6:49:cf:75:45:
         e4:dd:80:8a:4b:8c:2d:24:ff:8c:65:20:03:92:3e:1e:44:4f:
         59:22:b6:c7:44:2a:89:ce:4c:e2:6f:4a:23:79:87:cb:5b:bf:
         bc:90:12:b9:06:5f:71:54:71:11:f5:1b:da:53:76:95:87:64:
         92:47:df:f9:cf:6a:78:54:9a:55:7c:34:c3:d4:66:f4:a5:60:
         19:75:d8:b0:9a:17:0e:36:2b:c0:88:30:9f:87:93:b6:2d:ff:
         75:cd:ea:d9:e7:21:ca:75:c7:ba:7a:03:81:e1:f5:74:04:f0:
         20:61:9b:ec:9f:28:3c:84:57:46:5c:95:c8:6f:9d:46:ec:70:
         28:eb:4e:3c:b0:f8:b0:e4:1e:54:ff:27:c7:4a:2e:86:ca:ea:
         09:87:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:19 2024 by rpki-client on console-ams.rpki-client.org