Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D073232B42E11EDBCFFF87CF1222468.roa
File:                     1D073232B42E11EDBCFFF87CF1222468.roa (raw, json)
Hash identifier:          XodcYTfP4djY8qIQZzXSHrTxWqJgr6afA4SThpJ/4pg=
Subject key identifier:   40:F4:51:4A:3A:C6:CB:A2:4B:24:20:A2:C4:7B:1C:92:F8:05:FB:54
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0A76
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D073232B42E11EDBCFFF87CF1222468.roa
Signing time:             Fri 24 Feb 2023 10:29:27 +0000
ROA not before:           Fri 24 Feb 2023 10:29:23 +0000
ROA not after:            Sat 22 Feb 2025 10:29:23 +0000
asID:                     61317
IP address blocks:        102.129.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 24 10:29:23 2023 GMT
            Not After : Feb 22 10:29:23 2025 GMT
        Subject: CN=63f89187-d4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:8b:ec:e3:86:fa:ca:33:bd:52:83:de:bb:
                    bd:0f:e6:90:31:ef:97:6d:21:6d:cf:02:13:fa:0c:
                    43:95:16:c2:38:fc:50:65:55:31:68:0d:ab:59:2d:
                    3d:ae:40:f8:54:57:ba:62:0b:55:a7:42:f9:ce:fe:
                    1c:9c:bf:8c:2c:d4:48:8c:88:d8:9e:71:33:df:00:
                    12:a8:22:77:13:44:d2:e3:36:3d:9a:97:a4:28:b5:
                    02:e6:0e:f2:db:ad:86:49:3e:7e:16:75:cf:60:97:
                    90:21:10:ac:a7:c2:d9:59:b0:75:0e:47:ba:b5:7a:
                    56:05:e0:ae:1e:6c:3e:fd:8a:7f:8d:2d:ef:ae:01:
                    6d:9e:d1:ee:02:33:22:14:cd:34:04:1a:70:27:71:
                    eb:ee:89:c9:c4:38:c0:1e:57:c4:2c:0f:a0:28:7c:
                    0a:87:93:9e:ec:02:2d:74:83:0d:b8:ad:63:72:f9:
                    cb:db:b3:cb:36:75:62:b6:c3:cf:ab:1d:62:be:e4:
                    75:d6:75:62:70:37:ad:77:a3:30:bc:01:54:de:52:
                    6d:63:b0:10:43:48:c1:df:6d:4c:c1:8b:fa:25:e5:
                    41:68:37:f9:fb:fd:4a:6c:5b:a5:c2:22:61:12:01:
                    6c:ce:18:bd:e6:cb:f5:f8:62:e5:50:5d:a7:c0:2e:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:51:4A:3A:C6:CB:A2:4B:24:20:A2:C4:7B:1C:92:F8:05:FB:54
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1D073232B42E11EDBCFFF87CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:24:b3:52:36:d9:71:69:95:37:51:97:52:73:41:61:8f:c4:
         d0:ad:b2:b2:a2:77:e8:45:d0:08:6c:90:65:46:a1:34:50:d7:
         6e:ac:68:e8:d5:af:d0:c5:8e:3c:06:9d:d6:37:66:eb:9d:7f:
         1a:3f:67:66:32:c0:e5:6b:ed:13:26:0a:4b:a5:fb:21:14:6b:
         aa:39:fe:ce:0e:be:5c:5b:6c:45:b7:52:76:4d:d4:50:8b:b6:
         aa:1d:5c:73:15:5a:7f:fc:65:a8:b4:20:da:5f:11:75:fe:80:
         58:e0:48:63:ec:0a:a0:d5:4f:cd:d4:d5:4a:30:85:51:63:03:
         25:b0:a2:2a:ac:d0:3a:a6:c4:56:78:3f:7d:72:13:4c:d0:85:
         0e:fe:08:72:8e:7c:fb:b3:78:a4:39:07:98:1c:6c:2c:a2:23:
         04:ec:e9:d6:cc:95:f9:0d:d7:16:8b:c0:16:e8:e3:57:88:a2:
         16:79:ce:5a:72:9d:47:3b:f5:99:6d:8d:d9:8b:66:02:53:fd:
         92:18:e4:5f:e0:a8:e1:a9:5a:de:df:b3:2c:76:bf:e1:65:b1:
         fb:93:64:19:40:42:ba:cf:b6:b0:b8:66:bb:af:a8:80:15:99:
         e0:6f:13:a1:8d:5f:14:42:f7:37:d9:ec:20:65:30:f5:ab:0a:
         44:e8:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:11 2024 by rpki-client on console-ams.rpki-client.org