Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/EDDB9188615111EF93218B6E762E951A.roa
File:                     EDDB9188615111EF93218B6E762E951A.roa (raw, json)
Hash identifier:          oHW2F4WK6PPi6Dk4FIb84Lnsv3f3jfKiD8T2cF8lBhw=
Subject key identifier:   F3:DB:53:86:A4:E0:3D:60:57:F7:0B:96:D6:D2:E1:43:CD:F9:68:22
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       04FB
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/EDDB9188615111EF93218B6E762E951A.roa
Signing time:             Fri 23 Aug 2024 13:16:38 +0000
ROA not before:           Fri 23 Aug 2024 13:16:34 +0000
ROA not after:            Tue 20 Aug 2030 13:16:34 +0000
asID:                     135391
IP address blocks:        102.215.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Aug 23 13:16:34 2024 GMT
            Not After : Aug 20 13:16:34 2030 GMT
        Subject: CN=66c88bb6-de8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:97:8f:05:71:f7:76:43:1b:57:4e:e3:cb:
                    76:40:1f:1e:2b:03:88:c9:01:46:e6:d6:d9:ed:44:
                    94:79:6f:e4:d0:93:79:16:bb:04:31:2c:d6:e8:7e:
                    c6:75:5c:fb:0b:32:37:b6:49:c3:97:c8:bf:a6:2b:
                    72:3e:55:b0:5b:eb:11:36:a6:b6:b6:ee:7e:ab:f4:
                    ec:92:e8:f1:97:3d:f8:bb:b0:56:ad:03:62:3a:86:
                    27:b1:d2:bf:9e:54:74:be:71:f7:5c:71:1d:84:f4:
                    cd:03:f2:72:71:78:5a:b8:48:5f:2c:e4:2b:7e:75:
                    c2:d9:82:a8:81:f2:61:e7:26:63:28:e3:39:46:03:
                    af:8a:e8:db:a2:0e:4d:64:f1:94:06:76:f6:ee:77:
                    c3:97:47:87:a2:66:81:8c:6e:94:d0:3a:d2:d1:ea:
                    c3:2d:52:50:c0:cd:ee:14:83:61:fe:68:77:b2:18:
                    4b:c8:ce:26:9d:b9:b8:3f:4d:52:32:b4:ab:87:fe:
                    f8:54:f6:f9:8a:85:3a:dd:1d:10:38:fa:77:ac:4d:
                    59:61:47:b1:aa:1b:c4:14:31:63:cf:4f:2a:ea:3b:
                    ec:f0:80:bf:59:aa:0a:c5:e2:63:50:9a:4a:fa:d1:
                    a2:93:30:39:e6:66:d2:9d:7b:f4:d4:09:bf:b0:ce:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DB:53:86:A4:E0:3D:60:57:F7:0B:96:D6:D2:E1:43:CD:F9:68:22
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/EDDB9188615111EF93218B6E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:37:9e:bb:c7:d1:db:e9:e4:08:bb:ba:8f:26:78:c0:14:f3:
         26:73:7e:d1:fd:8b:0c:5e:d7:2d:f0:ad:f9:1f:f3:73:0e:74:
         0d:d3:c1:2b:3c:43:fb:74:34:11:fd:0e:32:f2:4a:dc:d8:07:
         10:24:f4:51:18:bd:70:2c:0e:e5:15:c9:c7:11:85:f0:cc:42:
         b9:2d:b1:97:fc:27:6a:c6:e0:b0:ce:25:8f:02:21:ab:21:68:
         bb:91:1c:95:67:15:1b:69:62:6e:31:73:ad:b5:12:bb:3c:4d:
         f5:69:8c:20:9f:83:4b:22:b3:08:92:67:8e:b6:05:d6:40:8e:
         3e:b4:9b:ed:08:4b:10:b9:96:8c:24:ce:83:6c:e1:f0:00:8c:
         a8:10:aa:4d:3d:fc:0d:4f:4f:f2:08:57:34:3e:43:82:c4:e1:
         15:c2:7b:1c:9f:81:72:05:99:20:6b:91:66:47:d7:68:09:d6:
         2a:87:66:3e:35:ed:3d:f8:9d:4f:90:b2:17:2e:2f:9d:6f:08:
         37:ff:35:44:05:c7:20:a8:ca:59:67:95:44:8b:91:e3:6b:9c:
         1a:25:01:99:aa:b9:05:97:72:9b:8a:3c:76:a9:97:62:4f:f9:
         50:c8:5f:7b:4a:19:f4:d6:d5:71:de:17:39:de:cc:bf:96:f8:
         9c:9b:23:dc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBPswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNDA4MjMxMzE2MzRaFw0zMDA4MjAxMzE2MzRaMBgxFjAU
BgNVBAMTDTY2Yzg4YmI2LWRlOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqdZePBXH3dkMbV07jy3ZAHx4rA4jJAUbm1tntRJR5b+TQk3kWuwQxLNbo
fsZ1XPsLMje2ScOXyL+mK3I+VbBb6xE2pra27n6r9OyS6PGXPfi7sFatA2I6hiex
0r+eVHS+cfdccR2E9M0D8nJxeFq4SF8s5Ct+dcLZgqiB8mHnJmMo4zlGA6+K6Nui
Dk1k8ZQGdvbud8OXR4eiZoGMbpTQOtLR6sMtUlDAze4Ug2H+aHeyGEvIziadubg/
TVIytKuH/vhU9vmKhTrdHRA4+nesTVlhR7GqG8QUMWPPTyrqO+zwgL9ZqgrF4mNQ
mkr60aKTMDnmZtKde/TUCb+wzngvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU89tT
hqTgPWBX9wuW1tLhQ835aCIwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3L0VEREI5MTg4NjE1MTExRUY5MzIxOEI2RTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm1+AwDQYJKoZIhvcNAQEL
BQADggEBAAk3nrvH0dvp5Ai7uo8meMAU8yZzftH9iwxe1y3wrfkf83MOdA3TwSs8
Q/t0NBH9DjLyStzYBxAk9FEYvXAsDuUVyccRhfDMQrktsZf8J2rG4LDOJY8CIash
aLuRHJVnFRtpYm4xc621Ers8TfVpjCCfg0siswiSZ462BdZAjj60m+0ISxC5lowk
zoNs4fAAjKgQqk09/A1PT/IIVzQ+Q4LE4RXCexyfgXIFmSBrkWZH12gJ1iqHZj41
7T34nU+QshcuL51vCDf/NUQFxyCoyllnlUSLkeNrnBolAZmquQWXcpuKPHapl2JP
+VDIX3tKGfTW1XHeFznezL+W+JybI9w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:30 2024 by rpki-client on console-ams.rpki-client.org