Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDF39278EB9111EE90285661775412E6.roa
File:                     EDF39278EB9111EE90285661775412E6.roa (raw, json)
Hash identifier:          TWi8fjQnhXu+YrVJdYgoJOMxhZPrcVl9Dah2NxJR9lM=
Subject key identifier:   E5:80:CB:29:BB:73:EA:16:AA:88:E6:53:FC:6D:45:B7:54:FE:C6:F0
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1024
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDF39278EB9111EE90285661775412E6.roa
Signing time:             Tue 26 Mar 2024 16:57:29 +0000
ROA not before:           Tue 26 Mar 2024 16:57:26 +0000
ROA not after:            Sat 28 Mar 2026 16:57:26 +0000
asID:                     29802
IP address blocks:        102.129.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 01 May 2024 09:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4132 (0x1024)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Mar 26 16:57:26 2024 GMT
            Not After : Mar 28 16:57:26 2026 GMT
        Subject: CN=6602fe79-e052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:6e:81:3f:67:a3:c3:95:b4:a1:fc:03:90:
                    32:d0:54:b6:5d:14:49:42:97:88:77:b2:bd:5c:d9:
                    17:95:31:b5:41:1e:b4:9f:16:82:ec:e0:39:be:1f:
                    cf:8b:43:f5:ea:19:38:0e:d6:79:7a:3f:cb:8c:62:
                    1a:83:27:bc:f3:e1:30:97:83:0f:a4:10:e9:3e:5a:
                    fd:dc:fa:87:5f:2c:77:92:82:8c:41:4e:b5:a7:ea:
                    1b:bf:b2:c6:c8:6c:fe:fa:a1:26:ad:5d:4e:80:53:
                    04:68:50:d3:87:99:67:1a:df:c3:50:92:2f:b1:38:
                    63:79:f1:0b:77:5d:26:7b:fb:3f:29:f0:b1:a5:80:
                    a7:a6:6d:bc:4d:02:a1:f7:97:11:10:c7:ea:de:3e:
                    92:30:82:61:0c:9a:5e:49:5a:64:5a:9a:4a:17:19:
                    3c:93:c0:ad:dc:f7:98:d4:8b:8d:44:a2:55:3d:ef:
                    ac:47:9a:c8:78:42:e8:e8:c9:37:24:e5:f4:1d:30:
                    3e:b4:3b:b5:1a:23:df:72:12:d6:7c:c9:5a:e4:80:
                    53:6a:4a:9b:19:4d:77:be:cf:6b:5d:de:20:a5:40:
                    54:b7:01:7e:67:59:d1:d6:c9:34:ee:86:8e:cf:49:
                    bc:82:a6:f6:d3:2c:3f:5e:75:f9:8c:1b:7a:99:76:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:80:CB:29:BB:73:EA:16:AA:88:E6:53:FC:6D:45:B7:54:FE:C6:F0
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDF39278EB9111EE90285661775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:3e:e1:4f:c0:a6:54:53:2d:fa:81:dc:cc:54:dc:aa:f2:
         2e:b3:66:cd:a5:22:fd:2c:ef:bc:d9:88:4d:1b:60:e9:a1:9d:
         50:e5:c1:3c:20:5d:83:03:4c:16:37:a2:1a:ac:57:a7:f5:4f:
         d1:19:a0:bf:0b:ab:cf:73:0b:1f:71:a5:f2:c7:74:c7:c1:6f:
         c1:8e:ae:5b:0f:9a:0a:90:54:6e:91:9f:4d:b4:fe:55:da:ff:
         ed:7b:7b:fe:d2:63:75:2f:39:01:87:e3:a6:81:a0:00:4d:cb:
         6b:ce:31:fa:75:2a:89:c2:26:98:bb:ca:bd:3e:a5:ec:0f:83:
         22:8d:b2:af:9c:fd:f0:42:99:8a:39:d3:f6:5c:c9:17:cb:c5:
         e6:82:67:60:e5:61:a3:97:b6:02:e7:86:c6:a7:84:41:d5:01:
         bd:ca:16:6e:77:7b:42:b0:01:24:7c:23:5d:a2:ad:01:af:b9:
         7f:d8:c1:10:ff:48:2d:5b:7b:be:7e:88:88:3f:dd:8a:4e:a8:
         a3:f2:a5:bb:c9:85:e8:63:d8:ae:2a:54:ff:c1:12:b0:ca:2f:
         35:13:fc:f0:83:48:f3:ce:58:ab:73:bc:6d:c4:98:22:71:79:
         d1:28:5b:90:5c:0d:39:77:61:39:b8:d9:bb:a7:7f:31:c9:60:
         57:38:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:11 2024 by rpki-client on console-fra.rpki-client.org