Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/91DBD606154B11EF8BA40A6A017001B1.roa
File:                     91DBD606154B11EF8BA40A6A017001B1.roa (raw, json)
Hash identifier:          BdG0Cgj+aGLwCU4iDJcg+cfVVoxpND8baRtX9Is8vX4=
Subject key identifier:   37:F6:24:64:1E:88:52:23:05:6A:38:41:98:B0:F1:4B:CE:F7:90:B4
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0469
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/91DBD606154B11EF8BA40A6A017001B1.roa
Signing time:             Sat 18 May 2024 19:19:39 +0000
ROA not before:           Sat 18 May 2024 19:19:35 +0000
ROA not after:            Sat 11 May 2030 19:19:35 +0000
asID:                     20473
IP address blocks:        102.217.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Sep 2024 00:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 18 19:19:35 2024 GMT
            Not After : May 11 19:19:35 2030 GMT
        Subject: CN=6648ff4a-37ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:46:7f:ba:df:72:72:5c:de:2e:49:e6:1e:
                    fc:f0:ee:27:80:7e:d7:16:bc:c4:31:22:5a:cd:79:
                    06:65:92:ac:66:25:40:78:88:4d:e3:98:e3:16:18:
                    c3:d8:7c:89:ab:8c:75:91:de:b3:53:0f:f1:56:08:
                    3a:6b:67:01:72:23:90:b6:86:b9:64:3c:f0:06:02:
                    df:2c:a8:2c:0b:aa:26:1b:92:b9:39:ae:0e:14:5a:
                    b9:cf:6f:7d:a4:a8:36:64:0d:9e:bc:5d:78:92:72:
                    a7:70:fd:7f:7b:e2:7d:cb:b8:48:50:25:22:77:c1:
                    3f:08:86:30:a6:77:92:eb:fa:13:34:1f:51:9d:9f:
                    1c:81:3c:dd:68:f6:0f:1d:91:1f:13:8d:da:39:a4:
                    ac:4e:06:72:3f:d6:ff:be:95:1d:2c:da:1d:ba:94:
                    09:f0:3e:bc:6a:57:67:5f:11:9c:d5:d9:8f:22:21:
                    37:12:4c:cb:d5:99:3d:64:15:89:c8:1f:bc:08:56:
                    45:4e:6e:8f:30:ca:6c:49:e6:58:8f:26:b3:6f:5d:
                    a4:66:2f:4e:8c:24:ad:6b:ba:9a:94:f7:c7:96:72:
                    dc:9e:3a:28:ff:5e:07:02:0f:28:bd:5a:1d:d1:6d:
                    20:69:37:7f:c3:d9:ca:79:cd:5c:19:29:1e:09:b7:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F6:24:64:1E:88:52:23:05:6A:38:41:98:B0:F1:4B:CE:F7:90:B4
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/91DBD606154B11EF8BA40A6A017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:d7:c0:ff:b8:4f:bb:0c:92:7a:59:95:52:fd:b1:6c:3f:bf:
         4d:61:5b:e3:b0:f3:37:05:da:4d:98:b5:26:e1:bf:bd:61:04:
         23:15:36:a1:8f:f1:7f:fd:30:38:7f:68:c5:79:68:49:f2:7f:
         ba:e5:4e:39:a6:5d:c1:23:e3:12:bd:80:de:3b:48:8e:ac:3c:
         5d:2b:c0:9b:b2:66:fc:6d:eb:4b:4f:88:29:fa:e4:8a:2f:20:
         2d:68:c3:d7:e2:7e:99:f0:97:8d:22:a4:51:85:d3:da:03:a8:
         4b:6c:e0:6d:0f:35:cd:dd:ee:87:8f:d5:71:7b:2a:e0:e9:ba:
         4a:62:70:23:a0:44:a1:4e:71:29:26:a6:14:f9:f8:3c:de:93:
         c7:c3:2d:c9:87:1c:aa:71:f3:71:e5:85:dd:94:70:0b:56:22:
         1d:84:07:86:d7:6d:f7:47:54:8a:01:56:82:a0:c0:32:3f:0c:
         33:52:3d:d9:5e:6c:bb:71:a4:7e:4b:24:5f:94:4b:a8:52:5b:
         0f:0d:5c:15:c1:40:61:94:01:9f:d9:97:3f:d5:c0:13:29:c9:
         27:3a:b4:3e:a4:c4:d4:60:e6:14:0a:69:4b:99:4f:b8:e5:80:
         6f:81:c1:2b:26:66:30:15:fd:f7:65:89:45:91:49:10:90:7d:
         cf:29:1c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 03:24:38 2024 by rpki-client on console-ams.rpki-client.org