Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/49178D26482111EFBF6A9846762E951A.roa
File:                     49178D26482111EFBF6A9846762E951A.roa (raw, json)
Hash identifier:          Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=
Subject key identifier:   B0:6F:30:74:A9:A0:71:59:ED:4A:6D:28:B1:BA:AC:94:7C:34:92:27
Certificate issuer:       /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial:       02
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/49178D26482111EFBF6A9846762E951A.roa
Signing time:             Mon 22 Jul 2024 11:55:27 +0000
ROA not before:           Mon 22 Jul 2024 11:55:24 +0000
ROA not after:            Sat 22 Jul 2034 11:55:24 +0000
asID:                     329373
IP address blocks:        102.210.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
        Validity
            Not Before: Jul 22 11:55:24 2024 GMT
            Not After : Jul 22 11:55:24 2034 GMT
        Subject: CN=669e48af-3b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cc:52:53:c2:7b:4c:f7:e4:95:25:ff:fe:e2:
                    b7:4a:f0:7b:83:e3:24:5e:58:a9:19:9a:b7:8b:d2:
                    75:b0:59:63:05:d7:47:9e:07:e4:45:78:8b:8d:c7:
                    ce:d9:ac:75:f1:55:6e:c3:ea:c8:e5:bf:dc:32:73:
                    26:a3:26:4c:cf:67:de:6b:2c:a9:07:8f:2c:7d:71:
                    03:5e:4c:f7:c1:95:bf:23:f3:dc:b8:11:bb:3d:ed:
                    68:d1:05:47:3c:7f:87:5e:9e:1c:aa:32:a4:f7:04:
                    61:cc:fa:e1:3d:af:9b:c2:73:4d:af:76:f9:6f:81:
                    1c:f0:d0:33:de:8e:79:b2:cf:58:88:cf:f1:8b:8d:
                    a6:68:6d:f5:81:48:87:ee:17:66:f9:af:73:b7:33:
                    ae:6b:ad:21:d4:ad:a3:4b:e5:59:3a:cf:4f:76:45:
                    82:e7:c1:be:f1:1f:5f:c4:15:89:c8:39:c9:2c:f6:
                    81:a0:db:69:ce:74:9b:03:74:01:e6:30:02:2d:cf:
                    5f:f8:19:bd:10:ab:50:ec:d5:71:7b:af:26:f8:de:
                    dd:ad:41:cc:b3:7a:76:93:6f:a7:3d:88:06:e2:15:
                    e7:23:9b:f1:d0:44:7d:9b:8e:50:06:6d:72:fd:b1:
                    be:f2:69:94:f5:a0:6e:2a:9f:51:44:ac:0b:74:e3:
                    88:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6F:30:74:A9:A0:71:59:ED:4A:6D:28:B1:BA:AC:94:7C:34:92:27
            X509v3 Authority Key Identifier:
                keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/49178D26482111EFBF6A9846762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:a2:42:63:1a:f3:5e:53:a8:1d:87:a0:e9:21:c5:07:6e:03:
         c1:ab:dd:a3:80:d4:68:cb:f1:7c:e1:22:9d:43:02:89:2b:48:
         92:63:f0:ef:53:f1:26:2d:ec:c9:60:f2:8a:01:e3:f4:92:7a:
         a3:9d:b3:7c:73:44:96:61:36:af:ce:04:c2:ca:e4:1b:cd:28:
         b9:bb:36:56:fe:ee:94:cb:c2:76:67:5f:c2:ad:10:38:00:6a:
         b2:22:f7:db:e9:a5:e8:c2:1b:64:e1:01:4c:a9:85:c8:2c:52:
         c2:62:df:75:4c:0f:80:35:2e:24:2a:87:d6:7e:a8:99:ea:46:
         05:e3:a4:0a:a6:ef:f3:41:3f:d6:90:8b:de:e9:71:fa:9f:5b:
         42:6c:d9:81:d5:fe:5a:da:37:a0:3e:70:27:ca:7b:4e:86:48:
         31:8f:d0:e7:a0:37:cf:d6:98:2c:eb:a6:bd:6b:34:7a:b8:3b:
         43:55:25:c7:0a:0f:02:70:02:80:2c:61:ff:b2:6b:27:ad:19:
         b1:1e:7a:6b:41:30:84:6e:6e:6a:0b:a1:3b:40:2a:15:ed:aa:
         53:61:42:4d:d2:6a:52:f0:19:15:25:ce:18:98:4c:b4:a5:9a:
         66:14:57:26:a7:8a:01:fa:e1:40:4a:ba:71:33:53:f0:d9:df:
         58:c2:62:5e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
OUMyREFGMTEwLwYDVQQFEygwQUI4MkE0OTgxNjA3RDlCMzM2OURDNzc2REIwODcz
REEwRDc1QjRBMB4XDTI0MDcyMjExNTUyNFoXDTM0MDcyMjExNTUyNFowGDEWMBQG
A1UEAxMNNjY5ZTQ4YWYtM2IxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOPMUlPCe0z35JUl//7it0rwe4PjJF5YqRmat4vSdbBZYwXXR54H5EV4i43H
ztmsdfFVbsPqyOW/3DJzJqMmTM9n3mssqQePLH1xA15M98GVvyPz3LgRuz3taNEF
Rzx/h16eHKoypPcEYcz64T2vm8JzTa92+W+BHPDQM96OebLPWIjP8YuNpmht9YFI
h+4XZvmvc7czrmutIdSto0vlWTrPT3ZFgufBvvEfX8QVicg5ySz2gaDbac50mwN0
AeYwAi3PX/gZvRCrUOzVcXuvJvje3a1BzLN6dpNvpz2IBuIV5yOb8dBEfZuOUAZt
cv2xvvJplPWgbiqfUUSsC3TjiKsCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSwbzB0
qaBxWe1KbSixuqyUfDSSJzAfBgNVHSMEGDAWgBQKuCpJgWB9mzNp3HdtsIc9oNdb
SjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTlDMkQvQTM4MDBCQUU0ODIwMTFFRkI4MjZCNTQxNzYyRTk1MUEvQ3JncVNZ
RmdmWnN6YWR4M2JiQ0hQYURYVzBvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQ3JncVNZRmdmWnN6YWR4M2JiQ0hQYURYVzBvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTlDMkQvQTM4MDBCQUU0ODIwMTFFRkI4MjZCNTQxNzYy
RTk1MUEvNDkxNzhEMjY0ODIxMTFFRkJGNkE5ODQ2NzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbSfDANBgkqhkiG9w0BAQsF
AAOCAQEAyqJCYxrzXlOoHYeg6SHFB24Dwavdo4DUaMvxfOEinUMCiStIkmPw71Px
Ji3syWDyigHj9JJ6o52zfHNElmE2r84EwsrkG80oubs2Vv7ulMvCdmdfwq0QOABq
siL32+ml6MIbZOEBTKmFyCxSwmLfdUwPgDUuJCqH1n6omepGBeOkCqbv80E/1pCL
3ulx+p9bQmzZgdX+Wto3oD5wJ8p7ToZIMY/Q56A3z9aYLOumvWs0erg7Q1UlxwoP
AnACgCxh/7JrJ60ZsR56a0EwhG5uaguhO0AqFe2qU2FCTdJqUvAZFSXOGJhMtKWa
ZhRXJqeKAfrhQEq6cTNT8NnfWMJiXg==
-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:14 2024 by rpki-client on console-ams.rpki-client.org