Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/34ACF6022F0B11EFB9A014A4762E951A.roa
File:                     34ACF6022F0B11EFB9A014A4762E951A.roa (raw, json)
Hash identifier:          BLzlYgV40HQogMIbm+x8V3JETPDeLNVmMvcyAXv1ZHs=
Subject key identifier:   49:56:0C:BA:0C:A0:D2:4F:88:4D:5E:DF:2E:81:17:9E:7A:1B:0C:22
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0497
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/34ACF6022F0B11EFB9A014A4762E951A.roa
Signing time:             Thu 20 Jun 2024 13:44:25 +0000
ROA not before:           Thu 20 Jun 2024 13:44:21 +0000
ROA not after:            Thu 20 Jun 2030 13:44:21 +0000
asID:                     214967
IP address blocks:        102.216.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Jul 2024 00:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jun 20 13:44:21 2024 GMT
            Not After : Jun 20 13:44:21 2030 GMT
        Subject: CN=66743239-f691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ab:28:fb:86:e1:d5:eb:4e:77:2c:d0:f0:89:
                    7d:21:7b:41:62:07:b4:16:c1:3a:d7:06:b7:8c:81:
                    83:30:48:0e:aa:f0:61:49:0c:3f:08:fd:00:62:df:
                    9b:87:ef:b3:3b:9a:59:04:62:e9:84:ba:f2:01:af:
                    fe:5a:b3:bf:94:1f:5b:56:f2:6a:a9:01:5c:16:9d:
                    72:d6:81:6f:64:75:9b:2e:a0:7f:dd:29:37:7f:b1:
                    9e:4f:62:c1:6d:12:82:b7:de:56:0a:b6:d9:a7:55:
                    c4:3a:fb:72:f5:fc:35:4c:a8:63:30:92:f7:9b:a8:
                    24:19:0a:ee:39:97:d7:ce:35:36:b6:47:cc:c4:41:
                    19:c3:01:6d:22:5c:5f:89:ce:3b:36:7d:d0:e8:9b:
                    e1:b8:37:d1:55:61:1a:ab:9f:af:1d:a2:2a:1c:14:
                    c7:bf:e0:cf:f7:83:c1:ac:16:d4:ce:fb:d1:66:02:
                    06:d0:64:a5:ba:8e:f6:14:fc:24:85:f6:88:01:e4:
                    fc:2d:3d:8a:8c:01:c1:bd:01:6b:4d:fe:bb:a4:c4:
                    b3:e7:17:fb:64:6f:3f:4d:51:7e:8f:b7:76:db:11:
                    f0:e0:39:a0:75:bb:0a:df:f2:58:f6:af:7f:4d:91:
                    cb:5a:fe:24:3e:40:d2:68:d0:fc:85:41:2a:75:6b:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:0C:BA:0C:A0:D2:4F:88:4D:5E:DF:2E:81:17:9E:7A:1B:0C:22
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/34ACF6022F0B11EFB9A014A4762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:7a:66:f6:64:fe:84:58:f1:9b:73:dd:ff:24:29:ef:a7:
         39:44:08:5b:b8:cd:a3:6b:c3:f7:d1:43:53:c4:38:7a:62:6b:
         78:5f:36:ce:1c:05:58:fc:be:a0:7c:32:e0:03:7f:fc:35:78:
         84:fd:bf:49:ba:61:5d:09:9b:02:45:c8:5b:87:c9:62:30:d7:
         a0:12:1d:fb:fe:8b:69:d2:65:ed:b2:e4:b1:c8:cd:02:2c:28:
         a5:1a:7e:ff:4f:2b:be:53:d0:67:62:63:63:ba:70:fe:ef:4c:
         48:ca:b6:0b:89:01:e4:ea:b8:d4:c8:3a:8c:9c:69:7d:6b:df:
         97:35:8c:9a:85:7e:09:70:04:5b:95:1a:01:bd:92:d2:10:3f:
         df:e6:36:97:5a:91:09:f9:3f:73:d5:89:3a:bc:9e:6b:34:9d:
         e4:bc:26:fc:f4:45:17:29:df:ed:81:f3:bf:ca:7f:dd:f5:bd:
         f2:0b:34:80:d4:46:8f:df:0a:9d:3e:c7:13:de:c0:50:ae:e2:
         b6:9d:47:4d:d2:f0:62:f3:bf:11:b8:a5:bd:25:ae:76:17:70:
         88:45:d2:f6:96:5a:ac:27:4e:fb:af:fa:04:c4:85:1b:8a:1c:
         6b:cd:a0:50:b2:f3:42:d8:df:98:56:58:0d:b8:58:42:f0:90:
         7a:77:d3:86
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNDA2MjAxMzQ0MjFaFw0zMDA2MjAxMzQ0MjFaMBgxFjAU
BgNVBAMTDTY2NzQzMjM5LWY2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD7qyj7huHV6053LNDwiX0he0FiB7QWwTrXBreMgYMwSA6q8GFJDD8I/QBi
35uH77M7mlkEYumEuvIBr/5as7+UH1tW8mqpAVwWnXLWgW9kdZsuoH/dKTd/sZ5P
YsFtEoK33lYKttmnVcQ6+3L1/DVMqGMwkvebqCQZCu45l9fONTa2R8zEQRnDAW0i
XF+Jzjs2fdDom+G4N9FVYRqrn68doiocFMe/4M/3g8GsFtTO+9FmAgbQZKW6jvYU
/CSF9ogB5PwtPYqMAcG9AWtN/rukxLPnF/tkbz9NUX6Pt3bbEfDgOaB1uwrf8lj2
r39Nkcta/iQ+QNJo0PyFQSp1a0ULAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSVYM
ugyg0k+ITV7fLoEXnnobDCIwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzM0QUNGNjAyMkYwQjExRUZCOUEwMTRBNDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2FMwDQYJKoZIhvcNAQEL
BQADggEBAJvBemb2ZP6EWPGbc93/JCnvpzlECFu4zaNrw/fRQ1PEOHpia3hfNs4c
BVj8vqB8MuADf/w1eIT9v0m6YV0JmwJFyFuHyWIw16ASHfv+i2nSZe2y5LHIzQIs
KKUafv9PK75T0GdiY2O6cP7vTEjKtguJAeTquNTIOoycaX1r35c1jJqFfglwBFuV
GgG9ktIQP9/mNpdakQn5P3PViTq8nms0neS8Jvz0RRcp3+2B87/Kf931vfILNIDU
Ro/fCp0+xxPewFCu4radR03S8GLzvxG4pb0lrnYXcIhF0vaWWqwnTvuv+gTEhRuK
HGvNoFCy80LY35hWWA24WELwkHp304Y=
-----END CERTIFICATE-----
Generated at Sat Jul 6 02:30:53 2024 by rpki-client on console-fra.rpki-client.org