Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F6B8583C85DD11ED87C30992F1222468.roa
File:                     F6B8583C85DD11ED87C30992F1222468.roa (raw, json)
Hash identifier:          ftC7Zm1fEKUa4Kc2aj9bucnb247ar4sXIZ/A3jrlvnQ=
Subject key identifier:   9F:2F:9F:E0:2A:70:CC:70:1F:1F:45:38:B1:CE:A6:B1:84:CB:62:6F
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       022B
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F6B8583C85DD11ED87C30992F1222468.roa
Signing time:             Tue 27 Dec 2022 11:59:49 +0000
ROA not before:           Tue 27 Dec 2022 11:59:46 +0000
ROA not after:            Fri 27 Dec 2030 11:59:46 +0000
asID:                     328992
IP address blocks:        102.215.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 May 2024 00:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Dec 27 11:59:46 2022 GMT
            Not After : Dec 27 11:59:46 2030 GMT
        Subject: CN=63aade35-b0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a8:bc:fb:ac:f0:a8:a3:26:24:55:5e:f3:85:
                    b4:0a:a5:fa:19:00:94:91:3c:14:76:f1:f3:80:0c:
                    a2:c3:c2:6b:40:95:ca:1f:7f:05:f6:fb:4d:00:2e:
                    f3:5f:7a:b1:41:3e:b6:95:70:b7:26:c2:6f:2c:65:
                    f8:61:77:a9:7f:6d:ad:a4:92:89:3d:5c:08:53:f6:
                    26:de:df:9a:af:cb:9a:ca:d4:21:66:39:5d:32:ab:
                    f8:3d:ac:b0:40:f4:b3:4a:8d:c7:6f:e1:6e:89:47:
                    9d:1a:e5:f0:c1:e5:65:51:f9:90:fc:dd:8f:e6:b7:
                    9c:8d:b0:e2:3f:38:f3:14:68:36:66:20:5e:05:ac:
                    0a:a1:da:36:bf:a4:a0:f9:d7:f3:01:1d:08:b1:fb:
                    11:4f:76:27:84:5e:54:6d:bf:c0:74:94:e7:75:79:
                    0b:9e:9b:c8:a2:4b:36:ee:dc:aa:58:e9:c4:a8:3c:
                    f0:30:d5:db:2b:f5:14:33:80:af:5d:f8:01:a1:92:
                    a9:ae:fb:a7:3b:43:3d:8e:c8:bc:27:a0:5e:5b:f2:
                    3c:44:33:07:4d:73:35:a9:4d:03:0d:24:8d:a0:75:
                    25:8e:ec:71:6f:2b:8c:30:c8:a3:73:a6:c8:54:da:
                    73:21:d9:3f:46:64:ff:6d:c3:cb:ce:e5:f5:7c:77:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:9F:E0:2A:70:CC:70:1F:1F:45:38:B1:CE:A6:B1:84:CB:62:6F
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F6B8583C85DD11ED87C30992F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:79:2c:ab:50:f0:e0:55:a6:27:d9:c3:da:dc:1a:50:95:7d:
         e0:4c:b2:28:24:7c:70:f4:08:19:a1:9f:05:cc:30:36:c7:4f:
         04:50:68:6c:fe:6e:e8:f3:0b:a0:17:0f:c9:fd:12:24:b8:dd:
         d0:e4:c2:9e:02:d5:be:42:f2:4a:e5:71:3f:68:26:73:b9:19:
         a2:71:fc:bd:59:88:a6:6a:55:31:11:73:07:ef:45:b4:3c:bb:
         61:ac:da:e3:b6:d6:7a:95:3c:1a:1b:85:92:dc:cb:a6:2f:10:
         1c:34:39:e2:3e:c4:24:e4:ce:1d:92:fa:7b:1b:f5:8a:fb:32:
         ed:b3:80:d8:45:51:af:9e:fe:57:af:fe:c7:b6:56:4c:f8:d5:
         31:8e:1a:44:4f:8f:a3:87:39:dc:6f:ff:56:7d:47:3e:32:f9:
         88:ff:a3:2f:e8:39:f6:ac:e2:a0:38:6b:05:54:b3:45:2b:af:
         aa:d1:c0:93:0c:36:70:51:ad:87:63:f2:fb:87:f9:ee:b6:2c:
         c4:ef:5c:a7:34:12:97:1e:e1:9e:ad:e9:59:ee:ff:fa:b5:66:
         3a:34:e7:0c:ad:fa:18:69:19:01:2d:9c:ab:54:cc:08:46:87:
         39:7c:7e:2d:6c:5c:4b:3c:74:4c:86:a9:f2:2a:62:40:85:42:
         79:3c:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:20:22 2024 by rpki-client on console-fra.rpki-client.org