Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DEEAD0C1E7F11EF8FC832007DDC24C2.roa
File:                     7DEEAD0C1E7F11EF8FC832007DDC24C2.roa (raw, json)
Hash identifier:          nA0DPfOlHvi2UgtQgAHk73knlS/HFOQ4L1eGHXIiZ90=
Subject key identifier:   9D:8B:40:C4:50:C9:F0:43:20:3F:6A:C8:6A:5C:C5:E1:E5:97:B7:FA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       8D94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DEEAD0C1E7F11EF8FC832007DDC24C2.roa
Signing time:             Thu 30 May 2024 12:23:59 +0000
ROA not before:           Thu 30 May 2024 12:23:56 +0000
ROA not after:            Thu 05 Sep 2024 12:23:56 +0000
asID:                     26617
IP address blocks:        45.195.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Jun 2024 00:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36244 (0x8d94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 30 12:23:56 2024 GMT
            Not After : Sep  5 12:23:56 2024 GMT
        Subject: CN=66586fdf-bce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:a7:a0:27:2c:f2:48:e3:94:a8:37:9a:a4:
                    14:76:08:d9:2a:81:83:8e:94:68:8a:a7:d9:24:35:
                    89:9b:b6:b4:6c:25:2f:28:c9:17:3e:44:33:82:de:
                    3d:bc:73:8a:ff:fa:a6:9f:4b:68:07:d1:81:a8:64:
                    74:1f:29:ee:e2:56:fb:81:44:26:d2:e8:2a:f0:58:
                    25:20:9d:9d:83:a3:21:6b:5e:91:b3:a4:98:da:dd:
                    15:a3:b7:8c:1e:24:f8:6d:5a:20:06:a5:ae:14:b3:
                    bb:0b:95:53:6b:51:5f:c0:bc:84:47:8b:e0:e8:06:
                    86:6f:b8:d6:e4:ce:b8:dc:95:fe:cc:37:a8:5f:f6:
                    5f:be:73:78:56:18:cb:4a:e1:32:e5:f2:e5:3e:bf:
                    0e:d9:da:35:37:db:72:0e:d8:1c:3f:4b:d4:0e:cb:
                    63:73:d3:c1:13:ac:e6:7e:46:fe:9c:3d:f1:92:27:
                    33:2d:4c:4c:a0:75:b4:8e:ed:8e:96:2b:94:93:df:
                    8a:5c:5e:c6:1a:55:3d:12:30:7f:fe:61:ff:66:29:
                    00:b0:3f:9e:13:42:52:52:26:38:b2:07:77:88:35:
                    05:82:2e:d5:b4:15:7c:8d:fa:6a:9d:92:68:4e:6a:
                    dd:59:4b:bc:dc:1f:41:00:1f:d5:88:55:82:0f:b8:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:40:C4:50:C9:F0:43:20:3F:6A:C8:6A:5C:C5:E1:E5:97:B7:FA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DEEAD0C1E7F11EF8FC832007DDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:45:58:e7:cc:f0:d4:ae:e3:e3:79:a9:1e:8c:49:23:97:
         80:6a:49:60:41:e8:1a:2e:a3:fc:e5:d8:60:84:37:5b:cc:e0:
         45:cf:61:f1:b5:50:29:12:76:bd:f1:c8:34:34:ba:1d:80:3d:
         47:9a:89:fa:f3:b6:1b:80:d4:a7:3c:57:ae:db:f4:40:df:eb:
         14:c8:59:8b:33:1e:d9:eb:7c:4c:0e:7a:5b:62:ef:3a:23:c7:
         ee:b6:8c:4a:26:79:28:15:45:b8:cb:2f:ae:b3:40:83:36:db:
         6c:cd:1f:05:71:26:98:94:ff:51:b6:ef:06:6a:c8:10:47:0b:
         b9:3c:80:61:4d:c9:e4:d8:75:d5:25:24:d4:8a:d0:cc:5e:bc:
         0c:93:e3:ad:03:28:ec:ea:88:aa:4e:37:db:43:87:91:57:74:
         af:9a:3c:ea:dc:3c:b0:c8:75:aa:59:8d:70:f5:dc:be:6f:82:
         6d:57:54:69:97:f8:9a:9e:7c:fc:b0:60:f2:b2:c9:fa:4c:c1:
         64:e5:ea:59:65:f1:1b:40:51:1e:fc:8a:b4:ce:42:10:55:12:
         03:b4:1f:d6:5e:bc:62:8b:13:40:4b:9b:25:3e:86:d0:0e:ad:
         93:f2:32:07:18:3f:90:e5:99:c3:9e:75:3d:ed:bf:9e:ce:13:
         9f:5a:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:44:08 2024 by rpki-client on console-ams.rpki-client.org