Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/1C5E9EFED4DF11EB9185D046F8AEA228.roa
File:                     1C5E9EFED4DF11EB9185D046F8AEA228.roa (raw, json)
Hash identifier:          eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=
Subject key identifier:   84:39:C3:06:BE:C1:59:C5:9E:88:2D:F9:03:E9:9A:22:2B:84:E8:7C
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       0876
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/1C5E9EFED4DF11EB9185D046F8AEA228.roa
Signing time:             Thu 24 Jun 2021 11:27:09 +0000
ROA not before:           Thu 24 Jun 2021 11:27:02 +0000
ROA not after:            Wed 30 Apr 2031 11:27:02 +0000
asID:                     327750
IP address blocks:        102.164.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: Jun 24 11:27:02 2021 GMT
            Not After : Apr 30 11:27:02 2031 GMT
        Subject: CN=60d46c0d-cc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:e1:84:11:82:35:91:03:54:9d:21:d0:67:
                    36:83:3f:59:37:12:5d:00:d2:61:da:3a:6f:2d:64:
                    bd:4d:02:6f:aa:e7:e4:86:5d:09:dc:03:6a:c3:01:
                    9b:22:cb:24:7a:8b:bd:71:64:ed:c7:19:da:30:fc:
                    0d:30:90:75:d3:33:12:bd:ed:8c:ab:de:11:5a:8b:
                    c2:82:d6:db:a0:be:a8:99:d0:b8:78:96:70:80:bb:
                    0f:39:4b:23:55:af:7b:7a:a5:40:8c:da:fa:c6:44:
                    bd:86:7d:be:d2:a9:0c:60:c9:89:fe:5a:82:d2:58:
                    0e:10:ca:21:5a:d2:53:0b:12:cf:88:b2:f1:a7:7f:
                    99:33:c5:e7:23:02:0b:38:15:e4:15:fe:f6:c2:0d:
                    fb:27:60:1b:ee:4d:a2:59:4a:9d:cb:7c:17:f9:e6:
                    f6:7d:da:0a:9c:03:ec:63:98:56:35:1b:29:e1:20:
                    0f:f1:ed:5a:b3:d4:49:cf:ee:bb:f2:ce:e8:91:89:
                    53:ed:5a:77:eb:bc:31:a5:d8:91:83:19:05:3c:55:
                    f8:c9:7f:54:56:d3:ef:0c:d0:09:69:6d:98:5c:57:
                    37:e6:21:19:5d:50:1c:70:78:47:71:1a:f1:bc:f3:
                    df:d0:cd:7b:7f:cd:b6:d4:95:17:0a:d0:e7:b4:c5:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:39:C3:06:BE:C1:59:C5:9E:88:2D:F9:03:E9:9A:22:2B:84:E8:7C
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/1C5E9EFED4DF11EB9185D046F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.164.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d4:44:89:dd:b6:0c:44:45:11:7d:eb:4e:2e:af:b4:cf:14:97:
         19:74:6c:bd:84:a5:bb:ff:3a:97:58:7e:26:63:ef:16:b0:94:
         6d:38:d9:06:30:a9:3c:97:28:b9:ed:21:f7:eb:46:63:16:68:
         9f:30:54:36:b0:9c:0b:49:5f:8a:53:70:90:35:0b:9a:b8:59:
         3e:44:72:43:b6:53:e5:ac:79:c9:71:8b:02:01:66:9d:1e:6d:
         32:58:8e:de:d0:bc:de:90:e2:6c:a5:69:36:ad:77:b2:db:da:
         72:70:d0:0f:5a:d5:26:a1:51:93:c8:d8:05:c3:55:ca:a5:9f:
         da:9a:14:27:43:6c:5c:d2:6a:65:36:d8:7b:d8:37:dc:d3:31:
         5b:6b:20:ae:ee:0e:95:0a:a7:3c:57:f0:87:7e:00:4b:64:f2:
         33:33:96:43:01:bf:59:47:b1:b6:43:2b:e0:55:4d:0a:f3:28:
         d0:66:92:58:45:9e:a9:98:df:d4:20:c7:5d:8f:c0:36:29:67:
         3c:9a:02:13:0b:e8:e4:15:c1:75:07:84:25:3e:2e:bb:7d:bf:
         8d:01:bb:02:7f:ea:9b:c1:9a:a9:08:d5:7d:f8:e4:9b:de:02:
         e7:7c:43:91:b2:7b:3b:37:e3:01:66:ff:af:69:1f:53:77:f1:
         5f:19:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:27 2024 by rpki-client on console-ams.rpki-client.org