Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/7D716E841FFB11EDA4F58EC6F1222468.roa
File:                     7D716E841FFB11EDA4F58EC6F1222468.roa (raw, json)
Hash identifier:          kIA9AuRs7fJpR8S/gM+T8eNfvwqqEcS39yhbVal5TQM=
Subject key identifier:   5D:9D:92:92:6E:6F:B9:16:B3:5B:88:55:B2:87:87:85:13:43:06:D7
Certificate issuer:       /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial:       01B9
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/7D716E841FFB11EDA4F58EC6F1222468.roa
Signing time:             Fri 19 Aug 2022 20:14:12 +0000
ROA not before:           Fri 19 Aug 2022 20:14:08 +0000
ROA not after:            Thu 19 Aug 2027 20:14:08 +0000
asID:                     328808
IP address blocks:        102.217.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
        Validity
            Not Before: Aug 19 20:14:08 2022 GMT
            Not After : Aug 19 20:14:08 2027 GMT
        Subject: CN=62ffef14-6984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:55:b7:08:cb:ba:93:31:2b:cc:29:75:1f:
                    b5:05:90:7c:ac:09:3c:ef:93:21:c5:c4:26:cf:21:
                    71:2a:9b:ec:74:9c:1a:bd:eb:98:86:f0:c5:91:39:
                    7b:9a:0c:ad:e6:df:c4:c4:90:2e:4d:1c:13:b7:fd:
                    08:e4:83:52:74:af:5c:91:13:25:bd:9f:66:1c:5a:
                    0d:79:53:56:12:73:5c:03:ff:c9:07:76:1f:cd:67:
                    1f:d8:06:78:d6:cf:a3:bb:dd:d1:16:0b:f2:d2:d4:
                    e3:0f:93:c2:b2:28:d7:21:a2:e1:70:d4:39:65:13:
                    41:36:84:45:8d:88:04:b4:98:c2:12:e9:b0:48:65:
                    ab:47:37:3b:52:2d:26:fc:3f:31:f9:d2:b5:6c:20:
                    8c:05:cb:9c:f3:2f:bd:25:70:eb:ca:d1:df:e7:45:
                    6d:d5:82:7a:a6:28:cf:ef:53:8b:a1:06:86:8c:3e:
                    0d:11:dd:18:03:0e:96:74:f8:fb:f8:3b:41:02:43:
                    2a:5e:cb:3a:de:ec:26:b0:ba:b2:46:7b:a6:1d:49:
                    8e:ef:f3:76:6d:0b:9c:7e:55:aa:57:bc:ef:f9:dc:
                    bd:b9:93:75:0b:31:a1:7f:ad:22:3c:42:58:7f:62:
                    a0:00:47:2a:20:c2:71:ca:ad:d1:a4:67:f0:11:28:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:92:92:6E:6F:B9:16:B3:5B:88:55:B2:87:87:85:13:43:06:D7
            X509v3 Authority Key Identifier:
                keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/7D716E841FFB11EDA4F58EC6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:05:38:e5:2e:5b:a4:49:ed:4f:2a:97:d0:45:d1:97:37:0e:
         fd:69:52:74:6a:3a:87:ea:ba:f7:c8:b3:a9:47:e2:ba:2a:ef:
         64:e4:80:91:0c:ca:82:2d:17:68:fe:59:98:00:c8:8d:bd:fb:
         e5:01:bb:af:48:5f:ce:60:eb:c8:ef:0c:96:6b:70:c9:39:54:
         73:25:87:9b:98:8e:e1:6c:fe:0e:17:78:bb:dc:8a:bc:16:b7:
         f4:28:7a:55:51:22:45:7f:f4:4f:df:98:fe:d3:5b:fc:2e:e4:
         a1:7b:c9:ca:9d:64:8f:60:41:36:ef:ca:f1:49:16:ab:1c:bd:
         a5:75:24:4c:e1:76:7f:ff:28:40:e6:01:c5:c2:7e:20:a2:f9:
         fc:8a:8c:c0:03:e0:b3:9f:73:4d:7d:e4:42:8f:88:92:c1:6f:
         a6:8f:fb:00:36:25:00:ef:02:34:b2:ce:3f:48:b3:76:70:d4:
         9c:58:ae:d4:90:2b:a8:2d:ae:53:4c:80:64:5b:bc:e7:2b:b1:
         76:b1:c8:6c:62:86:38:d5:87:f8:9d:aa:b9:3e:46:fa:a5:b4:
         67:90:72:93:1a:53:91:b4:fb:9d:3d:34:3b:c2:bb:20:8c:a2:
         0a:61:c2:47:d5:5e:19:7f:2b:f4:37:b0:b5:02:05:2b:db:f4:
         b1:9b:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:11 2024 by rpki-client on console-ams.rpki-client.org