Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/C125AEA2968911ECB8B62F765A40D577.roa
File:                     C125AEA2968911ECB8B62F765A40D577.roa (raw, json)
Hash identifier:          Iv44exOZ2UhalkmALSilO2jVi2bBIIFYg68+4/da9Kc=
Subject key identifier:   27:96:A4:F5:F9:43:D0:D9:B7:65:B7:F2:74:11:2F:24:D3:3F:70:DD
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0973
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/C125AEA2968911ECB8B62F765A40D577.roa
Signing time:             Fri 25 Feb 2022 22:24:54 +0000
ROA not before:           Sat 26 Feb 2022 22:24:50 +0000
ROA not after:            Wed 26 Feb 2025 22:24:50 +0000
asID:                     37199
IP address blocks:        197.155.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419 (0x973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Feb 26 22:24:50 2022 GMT
            Not After : Feb 26 22:24:50 2025 GMT
        Subject: CN=62195736-37bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:49:5a:87:42:8f:74:eb:42:57:ee:55:83:09:
                    1c:a3:0f:68:89:d7:01:39:69:54:da:0a:eb:da:93:
                    5e:84:5d:eb:d5:db:ac:9e:53:f1:63:b9:ae:e3:97:
                    6f:3d:6c:7b:bb:68:66:2b:8d:34:de:58:4b:fe:ab:
                    8c:6e:8f:56:77:32:25:92:0a:ec:ce:fc:37:30:ca:
                    ca:1f:01:d4:0e:16:5a:63:c4:34:3c:78:25:0a:6b:
                    b0:ec:43:26:91:13:59:b2:09:c9:ac:45:90:1a:85:
                    eb:ec:a4:5a:b7:d1:4c:ca:63:90:d5:48:52:65:61:
                    b7:02:b1:ad:66:5a:54:0d:16:da:5f:5d:43:2b:92:
                    1c:a0:94:cc:c0:aa:e7:ff:83:d1:57:1c:02:9e:f0:
                    c8:42:dc:59:aa:1c:34:5c:80:49:73:bf:a5:ce:cc:
                    2c:44:ea:3d:10:f3:15:85:d3:27:21:dc:74:69:52:
                    e2:8b:f3:c5:ce:e1:19:72:83:1e:68:67:c4:34:33:
                    ec:6b:a9:92:e9:fc:98:28:c3:fa:60:5e:18:d5:aa:
                    8d:d4:5a:be:da:33:fc:c2:3e:44:bb:68:cb:17:92:
                    8c:22:89:8f:53:94:7d:a9:bb:d0:8b:d0:e9:53:fe:
                    7b:57:94:5b:da:18:f4:2e:2d:3b:00:9d:d0:50:a5:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:96:A4:F5:F9:43:D0:D9:B7:65:B7:F2:74:11:2F:24:D3:3F:70:DD
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/C125AEA2968911ECB8B62F765A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.155.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:41:f2:0e:ea:19:0c:32:9f:6d:bf:d7:b8:a8:51:80:2b:fa:
         dc:3a:dc:29:6d:b1:af:4d:58:c5:cf:ba:9d:e3:b8:87:b2:40:
         ff:74:c9:29:89:0a:2e:70:15:13:4c:07:08:70:60:b1:d5:c0:
         0d:8b:a7:5a:90:c5:2c:94:58:d9:02:33:2c:fa:6d:e3:68:7c:
         45:d3:8d:25:f7:0b:b2:3f:da:8e:e0:1b:7b:22:33:88:db:b6:
         54:57:cc:be:bc:58:a3:4e:df:c0:94:f3:ca:88:97:eb:6c:02:
         45:d6:88:73:69:e1:bc:fe:1e:81:ae:89:01:9e:af:1b:f9:06:
         38:14:97:41:93:8c:9d:b0:1f:9e:31:2a:05:29:59:40:53:2a:
         1b:0b:7b:24:41:07:f1:f1:00:a8:ce:2b:53:dd:8e:e5:4e:47:
         87:80:5b:29:37:f3:f5:b5:ba:ae:91:60:c6:54:e8:03:df:a1:
         0c:fc:b0:12:fe:88:bb:90:d6:7f:22:4f:b4:b4:da:ea:4d:90:
         63:16:be:82:26:22:c8:b5:40:50:8d:e6:bc:0e:f4:60:e5:78:
         09:1f:ba:8e:fe:38:95:c8:f2:60:f1:09:35:3d:71:43:52:46:
         29:9a:fa:3b:ba:03:79:19:28:04:87:be:ca:95:6f:63:33:7d:
         6f:76:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org