Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/E775739C386E11EF9B6A87AC762E951A.roa
File:                     E775739C386E11EF9B6A87AC762E951A.roa (raw, json)
Hash identifier:          9EDzyq3NU8VbeJb4xTqQLA3QihMtcHzWeBDxSXelft0=
Subject key identifier:   30:D1:AA:2B:50:E0:AA:25:10:54:E2:26:D9:58:C4:B4:CC:37:1A:73
Certificate issuer:       /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial:       02F2
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/E775739C386E11EF9B6A87AC762E951A.roa
Signing time:             Tue 02 Jul 2024 12:30:46 +0000
ROA not before:           Tue 02 Jul 2024 12:30:42 +0000
ROA not after:            Wed 31 Dec 2025 12:30:42 +0000
asID:                     328857
IP address blocks:        102.220.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
        Validity
            Not Before: Jul  2 12:30:42 2024 GMT
            Not After : Dec 31 12:30:42 2025 GMT
        Subject: CN=6683f2f5-8040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:92:c9:48:2f:37:3f:32:9d:b1:05:72:1f:
                    ba:dc:1e:9c:e9:2c:55:2e:9f:b5:78:ed:6c:85:13:
                    66:aa:f6:b5:bd:51:06:1f:0a:d3:d7:18:de:36:cd:
                    89:44:a7:d5:05:0e:77:4f:34:a1:da:2d:bd:85:39:
                    d3:2b:1b:33:3c:b7:a7:b0:d8:e8:80:11:e2:fb:15:
                    27:82:d2:b7:b4:f2:e6:f4:e7:7d:6f:3b:02:89:71:
                    ee:ee:31:85:6b:29:ef:e9:47:f2:75:9d:3e:e7:1a:
                    35:cd:e7:29:4e:3c:fc:26:8d:29:8d:9b:1a:05:6a:
                    ef:9c:82:49:14:09:70:ea:cc:54:f8:a0:f3:1d:4c:
                    f0:1e:61:b9:e3:3a:4b:0f:56:40:e2:43:6c:94:f6:
                    a5:34:ff:20:c1:d3:a2:7d:b1:64:b3:bd:91:a3:ba:
                    0c:c4:08:8f:93:58:e1:66:47:8a:14:ad:d4:6a:61:
                    af:eb:f9:80:03:f8:b4:43:c5:b8:52:d0:43:7b:8f:
                    1d:6b:4c:e3:cc:32:20:96:5f:ec:3f:87:ed:3e:3e:
                    bd:d8:07:f3:a1:21:31:a5:d9:59:aa:34:26:98:07:
                    c1:d3:fb:81:42:fd:89:24:ad:71:4e:26:cc:b9:87:
                    57:79:58:eb:82:8f:34:22:dc:cb:e5:cb:9f:6a:18:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:AA:2B:50:E0:AA:25:10:54:E2:26:D9:58:C4:B4:CC:37:1A:73
            X509v3 Authority Key Identifier:
                keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/E775739C386E11EF9B6A87AC762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:4d:c9:86:4e:42:20:42:4b:dd:96:6e:c2:d5:dd:f4:5a:e8:
         6b:3d:d9:8c:b6:d7:73:19:2f:e8:6c:9f:f4:41:dd:aa:78:85:
         cb:a1:41:c7:fc:f3:fb:90:5a:46:93:83:5c:0b:6d:c2:fa:19:
         56:07:9b:5f:1a:87:14:67:ea:06:c1:82:03:96:b5:d3:75:bc:
         f3:b2:d0:9f:77:5e:a3:4f:d7:a5:5b:76:da:a4:2a:57:a5:2c:
         f2:42:3e:57:56:b9:b8:6f:36:c1:cb:db:c7:bf:9b:8a:32:a9:
         2d:58:70:e8:6d:76:46:6a:f5:7d:6b:82:4d:0d:fe:b6:60:7d:
         f3:cb:12:40:4f:1a:99:92:dd:87:ba:f3:12:bb:e3:b6:5d:2a:
         4d:fa:a3:f3:0a:c8:97:4e:70:f4:b7:71:75:94:3f:e1:51:8d:
         aa:da:dd:c3:da:61:88:a0:42:2d:da:d2:b3:20:9d:4e:60:99:
         4d:07:d6:86:7f:8f:f7:a7:86:6d:37:b8:06:d5:d0:dd:04:cf:
         b1:30:f4:6e:27:f2:cb:cc:87:1f:95:f9:b6:94:fd:1d:36:98:
         63:24:cc:69:48:63:70:d1:bd:35:fe:08:01:07:b3:ba:6a:7e:
         81:45:15:22:f2:d2:f8:36:e7:ca:ed:41:a7:01:87:d4:7f:7f:
         1e:64:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org