Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8E967116FE8911EC830A5781F1222468.roa
File:                     8E967116FE8911EC830A5781F1222468.roa (raw, json)
Hash identifier:          gJ13NtO09EjcFP0OTS1wIPGq1ZkeJUmjxVl52xuY+hI=
Subject key identifier:   7E:B5:1C:FC:E7:6F:94:DE:1B:C2:02:3D:20:41:F3:01:08:69:DC:5E
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0723
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8E967116FE8911EC830A5781F1222468.roa
Signing time:             Fri 08 Jul 2022 06:45:30 +0000
ROA not before:           Fri 08 Jul 2022 06:45:24 +0000
ROA not after:            Mon 08 Jul 2024 06:45:24 +0000
asID:                     9009
IP address blocks:        102.165.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  8 06:45:24 2022 GMT
            Not After : Jul  8 06:45:24 2024 GMT
        Subject: CN=62c7d28a-604b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:2c:03:d4:a6:31:10:80:01:73:82:db:5a:
                    5f:37:49:6a:0e:d8:a8:9d:bd:e1:bf:ef:68:58:b7:
                    40:54:f4:8d:82:ca:69:48:df:c0:08:b2:ef:83:cd:
                    90:50:58:46:15:53:18:d2:bd:09:9c:bf:62:02:ae:
                    80:22:d1:3e:f3:b5:9a:c6:ee:3f:eb:4f:11:6f:eb:
                    c6:dd:ca:7d:7e:94:05:b6:34:2b:5c:30:36:3e:98:
                    ea:bd:5e:10:9e:64:96:98:80:b9:7f:a2:38:47:97:
                    3e:41:54:c2:4b:e2:a3:31:08:a3:93:72:67:8d:b2:
                    66:22:9d:14:3f:12:b8:fd:06:c4:1f:0c:8f:3f:e7:
                    78:2c:8c:53:c2:87:47:09:93:66:9f:21:32:dd:ed:
                    85:ec:b0:be:da:76:0e:38:0d:8a:8c:e2:cb:73:85:
                    c6:29:8b:b4:61:f3:37:49:13:c0:78:bd:41:4b:45:
                    4c:fa:fd:ce:fa:5c:ea:2c:c7:2e:be:fc:06:ee:2b:
                    96:b7:77:c5:f5:c7:4b:4e:12:fe:37:a1:d3:4f:08:
                    1d:87:b8:b7:ca:76:0a:7e:ea:d0:00:8a:63:32:8c:
                    62:7b:7d:89:1a:13:b3:a4:77:bc:af:b8:7f:ee:5b:
                    90:1b:47:da:a0:08:cc:a2:ac:70:71:a5:e5:7b:25:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B5:1C:FC:E7:6F:94:DE:1B:C2:02:3D:20:41:F3:01:08:69:DC:5E
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8E967116FE8911EC830A5781F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:10:7d:dd:21:dd:92:a7:33:22:7d:67:0d:b5:c0:c4:f6:1b:
         a6:a4:ca:81:4d:a2:63:7a:40:b0:be:1f:d8:6f:32:cf:a7:ce:
         64:93:d1:63:71:b7:e2:da:6c:e3:f8:13:75:09:dc:86:93:5c:
         28:9e:89:07:39:6f:c5:1f:dd:1d:ba:98:3b:f3:0d:ef:60:07:
         25:07:ec:d8:04:0a:32:9a:5f:d9:78:38:ab:25:cb:bb:16:67:
         db:2d:d0:cf:6a:2d:3a:e6:7b:79:39:cb:85:49:5b:9e:fa:c0:
         6b:55:79:39:21:60:fd:68:1b:d3:9f:75:a7:8d:91:de:b8:fa:
         40:9c:e9:2f:c0:79:a3:e9:68:37:87:44:26:a3:21:81:4f:7b:
         f4:af:3f:f7:ed:84:d9:94:63:09:f6:31:14:c1:88:b5:44:9b:
         cb:45:82:0a:0f:02:55:70:d7:e8:82:bf:2f:91:ca:fc:a1:26:
         91:45:9e:45:2e:54:e8:31:07:78:8a:2b:1c:b2:e6:6c:93:ef:
         c0:80:8d:6b:cf:27:40:a1:d2:34:4f:cc:ed:a2:e9:b7:56:d7:
         ec:8a:d3:d3:98:7f:30:2e:67:6f:b6:29:9e:49:b0:37:25:d7:
         03:46:55:54:bb:7b:c3:6f:02:d1:33:03:02:a8:f5:3b:33:6f:
         7b:5a:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:12 2024 by rpki-client on console-ams.rpki-client.org