Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/4FE73C3EFB9111EC8E02F994F1222468.roa
File:                     4FE73C3EFB9111EC8E02F994F1222468.roa (raw, json)
Hash identifier:          GjnKB/yazoMug9KsY/PrUtk45d27ruy608z+yD9gvcY=
Subject key identifier:   12:3A:97:A4:1B:1C:A6:21:95:4E:D1:C6:30:9B:D6:FA:72:B9:10:20
Certificate issuer:       /CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Certificate serial:       0B
Authority key identifier: 24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/4FE73C3EFB9111EC8E02F994F1222468.roa
Signing time:             Mon 04 Jul 2022 12:03:27 +0000
ROA not before:           Mon 04 Jul 2022 12:03:24 +0000
ROA not after:            Wed 31 Jul 2030 12:03:24 +0000
asID:                     329084
IP address blocks:        102.215.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
        Validity
            Not Before: Jul  4 12:03:24 2022 GMT
            Not After : Jul 31 12:03:24 2030 GMT
        Subject: CN=62c2d70f-ffbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:b4:53:80:e9:cd:19:45:93:28:dc:73:20:
                    f3:2f:74:ac:cf:f5:fb:e2:b9:a2:14:94:4a:f9:63:
                    71:e4:9e:24:c9:41:d4:13:fe:f1:53:9e:2d:b0:e4:
                    51:d3:36:fb:a8:3c:d5:b6:9a:1e:68:28:a2:80:de:
                    b3:c1:b1:41:61:d4:9d:0a:e7:78:b4:51:d2:01:d0:
                    d2:cc:dd:32:61:b6:04:ee:d3:bd:08:aa:bb:60:28:
                    a4:97:15:1b:9a:fb:0f:95:41:63:ef:06:16:43:4d:
                    8a:65:10:4f:7d:39:8e:8d:58:65:30:c3:43:0a:43:
                    0e:f4:07:80:d9:a9:30:72:52:bc:e2:09:a2:1b:35:
                    22:21:c8:d6:70:e9:56:bd:82:02:48:95:32:43:62:
                    5e:e6:34:ee:39:d9:2c:80:c9:10:ac:b5:13:a3:2e:
                    53:b9:95:2b:56:34:e0:df:7d:40:19:b1:aa:81:ed:
                    61:ae:b8:ac:ce:fc:a4:b7:80:12:77:e5:01:46:c5:
                    7a:47:cc:47:76:3b:12:bf:b1:7f:9a:a2:e8:30:cb:
                    70:be:16:a7:04:56:d1:9d:c6:42:c6:e7:8e:39:07:
                    39:d9:3f:b6:f1:81:c5:d9:dd:47:28:74:32:1c:51:
                    5e:47:a7:4f:f6:0c:4c:c3:9a:59:b6:bb:fc:33:39:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:97:A4:1B:1C:A6:21:95:4E:D1:C6:30:9B:D6:FA:72:B9:10:20
            X509v3 Authority Key Identifier:
                keyid:24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/4FE73C3EFB9111EC8E02F994F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:3b:84:6b:3a:8a:96:bb:03:21:9b:af:5d:f7:6b:c1:1c:
         30:89:b5:8e:03:25:b5:c7:e0:46:d1:7b:0c:65:01:92:ae:0f:
         4c:07:93:5b:c2:bf:a6:a8:b6:fe:0d:fb:82:8f:84:62:d3:2a:
         d8:ee:fe:af:6d:83:06:f7:72:9d:91:6a:0c:60:9f:ca:27:dd:
         17:a0:b5:d7:d9:93:32:46:3e:cb:79:a4:f8:4f:e4:5f:00:2e:
         14:b2:4c:45:86:e0:03:fa:4d:ff:bc:b6:69:cd:d7:bb:3e:7c:
         bd:27:1c:67:a9:bf:20:7a:c4:91:1b:aa:79:3a:33:53:d4:b9:
         32:93:9c:fa:34:ab:f5:d2:9e:3b:af:41:dc:f6:a9:5b:80:cf:
         fe:dd:72:cc:e6:d3:34:6d:54:6c:33:fc:bf:69:88:36:c3:e9:
         9b:23:ce:ec:f7:97:4e:bc:d7:7f:ee:1c:31:42:34:0b:3d:68:
         da:59:89:90:3e:ab:6c:36:81:e9:9f:47:a3:77:f8:72:cb:59:
         60:6f:76:5a:27:32:fa:6d:17:af:4b:1d:46:38:f8:91:6d:62:
         3d:78:ba:fe:6b:f0:14:9f:d5:bc:b9:2e:2b:36:7d:a8:80:dc:
         ca:01:90:ca:ea:b0:aa:5e:9e:fb:ac:a0:9e:08:d7:13:04:0a:
         f2:6f:ee:67
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
RTQ5N0FGMTEwLwYDVQQFEygyNEY0RTM1NEREREVDODkxMzgyM0IwRjkyNDA3QTUz
NEFCRjNGOTgyMB4XDTIyMDcwNDEyMDMyNFoXDTMwMDczMTEyMDMyNFowGDEWMBQG
A1UEAwwNNjJjMmQ3MGYtZmZiZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALG1tFOA6c0ZRZMo3HMg8y90rM/1++K5ohSUSvljceSeJMlB1BP+8VOeLbDk
UdM2+6g81baaHmgoooDes8GxQWHUnQrneLRR0gHQ0szdMmG2BO7TvQiqu2AopJcV
G5r7D5VBY+8GFkNNimUQT305jo1YZTDDQwpDDvQHgNmpMHJSvOIJohs1IiHI1nDp
Vr2CAkiVMkNiXuY07jnZLIDJEKy1E6MuU7mVK1Y04N99QBmxqoHtYa64rM78pLeA
EnflAUbFekfMR3Y7Er+xf5qi6DDLcL4WpwRW0Z3GQsbnjjkHOdk/tvGBxdndRyh0
MhxRXkenT/YMTMOaWba7/DM56gUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQSOpek
GxymIZVO0cYwm9b6crkQIDAfBgNVHSMEGDAWgBQk9ONU3d7IkTgjsPkkB6U0q/P5
gjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUU0OTcvNzA4MTc2QUFGOTMyMTFFQzg4REI2NDhDRjEyMjI0NjgvSlBUalZO
M2V5SkU0STdENUpBZWxOS3Z6LVlJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSlBUalZOM2V5SkU0STdENUpBZWxOS3Z6LVlJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUU0OTcvNzA4MTc2QUFGOTMyMTFFQzg4REI2NDhDRjEy
MjI0NjgvNEZFNzNDM0VGQjkxMTFFQzhFMDJGOTk0RjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbXmzANBgkqhkiG9w0BAQsF
AAOCAQEAWsM7hGs6ipa7AyGbr133a8EcMIm1jgMltcfgRtF7DGUBkq4PTAeTW8K/
pqi2/g37go+EYtMq2O7+r22DBvdynZFqDGCfyifdF6C119mTMkY+y3mk+E/kXwAu
FLJMRYbgA/pN/7y2ac3Xuz58vSccZ6m/IHrEkRuqeTozU9S5MpOc+jSr9dKeO69B
3PapW4DP/t1yzObTNG1UbDP8v2mINsPpmyPO7PeXTrzXf+4cMUI0Cz1o2lmJkD6r
bDaB6Z9Ho3f4cstZYG92Wicy+m0Xr0sdRjj4kW1iPXi6/mvwFJ/VvLkuKzZ9qIDc
ygGQyuqwql6e+6ygngjXEwQK8m/uZw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org