Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C082BFEE0B4411EF9053C927017001B1.roa
File:                     C082BFEE0B4411EF9053C927017001B1.roa (raw, json)
Hash identifier:          S4bvMTrL25DjUrYLy5kYnWx1BlfgOcHJihq+1tN0h90=
Subject key identifier:   3E:37:3E:83:9A:B9:71:CC:77:1B:54:30:AF:6D:5C:2A:9C:DC:90:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B434
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C082BFEE0B4411EF9053C927017001B1.roa
Signing time:             Mon 06 May 2024 01:05:39 +0000
ROA not before:           Mon 06 May 2024 01:05:35 +0000
ROA not after:            Sat 08 Jun 2024 01:05:35 +0000
asID:                     209242
IP address blocks:        154.197.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46132 (0xb434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  6 01:05:35 2024 GMT
            Not After : Jun  8 01:05:35 2024 GMT
        Subject: CN=66382ce3-210d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:59:b2:3a:18:d9:7b:cf:1f:c9:57:f7:ad:
                    e8:1a:43:75:3f:83:0b:27:7e:53:6a:2a:81:48:13:
                    90:01:50:56:16:1d:1d:2c:f6:6f:2e:84:c8:4f:c7:
                    08:31:b1:17:9a:93:fd:fb:65:ea:ab:d2:fd:7e:b5:
                    d9:0d:8b:57:d2:92:f2:3c:db:b0:52:9a:4b:11:a4:
                    ca:ad:ad:3a:48:dc:2f:6f:2d:e4:92:4d:0f:11:63:
                    7a:c3:e1:3a:e7:fe:75:65:3f:cf:03:be:48:4c:a6:
                    6c:f6:67:cf:7a:08:4c:bc:96:81:9c:e0:f4:c0:b3:
                    8f:4c:37:5e:40:ce:91:53:6c:59:84:fe:aa:72:a2:
                    40:c1:08:c0:d4:7e:af:dc:a4:0d:e1:f3:08:b3:98:
                    63:e3:21:c1:8f:67:ac:f3:c6:67:50:8b:be:36:ef:
                    91:4e:92:0a:29:38:44:ae:6f:68:5c:cc:13:51:5b:
                    f1:a6:9e:7c:ea:35:fa:1b:05:8a:4c:88:5f:d2:fc:
                    fa:16:47:4d:59:4f:14:f8:b0:2c:ed:26:f0:d1:0a:
                    da:1e:69:c9:e6:a8:3d:e6:d6:65:c5:30:ef:1b:fb:
                    4b:5e:db:8d:2b:fc:69:84:1f:83:c7:41:91:6a:a0:
                    c7:79:b6:6d:57:c3:a6:3f:84:aa:76:a4:d0:5d:0f:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:37:3E:83:9A:B9:71:CC:77:1B:54:30:AF:6D:5C:2A:9C:DC:90:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C082BFEE0B4411EF9053C927017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:52:7d:93:c4:3d:d6:49:f9:2a:26:27:4c:50:ee:91:b6:
         6b:0a:07:ad:49:2f:94:e3:8a:93:0e:4d:4f:48:0d:19:55:86:
         8c:32:24:ed:6b:54:4f:0d:81:e6:5e:f3:d4:66:71:1f:2f:b9:
         dd:98:19:53:2b:66:df:ce:ee:e6:3b:17:e4:55:8a:bb:6d:40:
         2d:b6:7b:cb:6f:59:6e:51:d9:ec:96:1a:b0:4c:e8:e7:8b:c9:
         4b:64:4c:89:f6:2f:3c:79:a7:44:11:ce:6b:13:45:40:f3:74:
         fa:e5:69:0e:5c:23:0f:56:4f:35:71:99:9c:a8:22:f1:87:b2:
         1e:99:aa:1a:bf:ca:10:2f:f9:48:a5:b7:28:0f:7e:bc:18:d7:
         65:45:53:91:cf:9d:92:52:e5:3d:9d:6b:6c:d4:9b:e1:2a:42:
         ac:b1:13:55:d7:08:41:0d:f6:73:08:f2:77:65:97:1a:c8:13:
         c3:69:e5:90:4c:b0:ba:83:0b:7f:98:5d:14:6e:12:64:60:ef:
         7d:6a:c5:f1:a6:6a:12:07:66:93:0b:d7:70:10:b3:04:3d:82:
         d7:2b:ee:df:2f:f8:d7:5a:16:c5:21:9e:c4:6b:60:a3:c8:34:
         42:5d:6e:0e:10:8c:89:69:2f:4c:3e:b4:54:cc:f5:c6:c2:4c:
         cd:52:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:23 2024 by rpki-client on console-fra.rpki-client.org