Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/12ADEF1CF95C11EB89B1B33DD8A014CE.roa
File:                     12ADEF1CF95C11EB89B1B33DD8A014CE.roa (raw, json)
Hash identifier:          ZNOFebzvFvT2Nb1vHcS6wuQ11RKpspXLfVTrmKqLFjM=
Subject key identifier:   9F:5F:A4:27:E1:2A:79:7F:20:9F:DC:A1:29:3B:65:A0:CE:87:E4:0E
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       018E
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/12ADEF1CF95C11EB89B1B33DD8A014CE.roa
Signing time:             Mon 09 Aug 2021 21:52:59 +0000
ROA not before:           Tue 10 Aug 2021 21:52:54 +0000
ROA not after:            Sun 10 Aug 2031 21:52:54 +0000
asID:                     37468
IP address blocks:        102.219.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 17 May 2024 00:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Aug 10 21:52:54 2021 GMT
            Not After : Aug 10 21:52:54 2031 GMT
        Subject: CN=6111a3bb-fb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:d0:72:2e:5f:0f:f3:a3:45:45:49:9c:f9:
                    6d:19:43:22:b3:22:bc:54:80:78:3d:30:48:7d:2a:
                    ac:e4:07:66:be:15:54:71:4e:4d:3c:b7:2a:43:4e:
                    64:82:46:40:97:5a:af:59:ce:8a:b7:dd:12:ff:b7:
                    9f:ee:ce:c8:f1:80:64:6f:36:0f:fc:da:b0:87:74:
                    12:42:62:20:0d:4b:22:73:76:a6:e1:37:c1:5a:ea:
                    83:72:b0:60:06:cf:db:b6:03:79:11:8e:e8:28:fb:
                    77:10:7f:7b:0a:a5:21:a6:72:96:6e:ab:3e:49:3b:
                    fd:13:4f:81:17:a1:b8:02:15:2b:c2:8c:1d:39:db:
                    bf:11:2b:40:ba:b1:e7:6d:64:fb:c0:92:d6:32:5a:
                    ab:29:b1:50:fb:a4:3b:ba:f3:1e:3a:a8:67:51:3b:
                    4f:7f:3e:ec:b8:13:e6:b3:23:2e:dc:fc:a6:3d:3a:
                    4c:90:8f:43:de:6f:4f:6a:d0:8e:e2:20:85:e0:58:
                    6d:08:6a:62:ec:2d:7f:48:8f:06:af:c8:f8:b3:ce:
                    7c:b0:86:f1:3d:7f:2b:5d:fb:de:9b:53:96:a5:8b:
                    cb:80:7c:d9:0f:bf:e1:aa:1f:46:49:b8:39:8c:c6:
                    00:95:e3:50:9b:68:e6:78:be:20:a3:82:ec:37:9f:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5F:A4:27:E1:2A:79:7F:20:9F:DC:A1:29:3B:65:A0:CE:87:E4:0E
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/12ADEF1CF95C11EB89B1B33DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:79:74:3f:80:f1:85:08:ac:94:85:32:f3:eb:1f:66:7a:
         58:04:34:97:46:0d:e3:6a:94:a1:5a:2e:07:df:a9:94:df:62:
         c3:cc:d4:1b:2b:9d:44:42:d1:f3:2e:7d:a4:19:02:39:e9:01:
         59:79:ad:eb:db:a9:f9:fb:f0:ae:ae:46:0a:ba:1a:ff:e5:95:
         9f:b3:a4:74:03:ba:0b:58:46:a1:d4:2d:45:3c:88:4f:df:de:
         3c:fd:ff:b1:02:92:40:60:ba:ac:5c:f9:72:95:f0:0a:27:4d:
         13:8c:e3:27:b9:d6:94:ba:97:eb:07:e9:b8:32:fe:b8:04:4c:
         9a:3a:d1:12:68:b9:c7:5b:79:a3:05:32:c3:9e:8a:b3:51:80:
         9d:1f:f6:af:23:fc:1b:b9:ff:ba:93:f5:34:1c:8a:02:18:98:
         b8:a4:44:db:c1:09:1f:b7:88:d4:ba:a4:e3:99:76:96:64:a3:
         47:51:3f:df:1e:c0:84:74:e2:a0:0c:36:ec:18:f3:24:af:8c:
         e2:1d:63:4c:ff:a0:0c:20:7f:20:2e:8a:30:2f:34:90:4d:2d:
         17:3e:fd:23:79:96:2f:ec:2c:ad:6c:ec:2d:39:10:28:00:54:
         84:63:ba:95:d4:e4:b1:5a:9e:8e:03:28:f5:c0:0d:26:a4:62:
         3c:e6:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:49:49 2024 by rpki-client on console-fra.rpki-client.org