Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/39106F00FBB611ED8E7FD90D4AD9E6FC.roa
File:                     39106F00FBB611ED8E7FD90D4AD9E6FC.roa (raw, json)
Hash identifier:          +HdzaGd/6604DHYW5LPhty4qlNfPBJ18Y9dSfuN3sGc=
Subject key identifier:   14:B9:65:3F:19:08:06:7F:D5:1A:A2:2D:BF:16:22:FA:40:09:C0:09
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       043B
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/39106F00FBB611ED8E7FD90D4AD9E6FC.roa
Signing time:             Fri 26 May 2023 11:12:38 +0000
ROA not before:           Fri 26 May 2023 11:12:32 +0000
ROA not after:            Wed 26 May 2027 11:12:32 +0000
asID:                     37468
IP address blocks:        102.214.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 18 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: May 26 11:12:32 2023 GMT
            Not After : May 26 11:12:32 2027 GMT
        Subject: CN=64709426-e901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:92:bd:4e:54:3e:67:77:1c:88:c8:df:a6:
                    43:e4:7f:95:a9:b9:02:10:c6:74:29:69:ef:1b:3b:
                    50:d9:b1:c3:75:26:7d:9c:25:ca:a7:d5:75:ea:17:
                    7d:28:85:b1:af:cc:e8:d3:bc:4b:8c:f2:fb:72:77:
                    31:da:d4:20:74:3d:1f:dd:c4:79:90:3d:0c:0a:f8:
                    4a:47:98:92:25:6a:bf:5f:11:a9:c1:26:6e:95:51:
                    44:ac:62:fd:13:3d:63:c6:06:f0:d2:a5:d7:ed:95:
                    dc:44:fa:58:a8:43:b3:ef:4f:93:98:a0:a9:14:db:
                    bc:6f:77:59:7e:77:c1:fb:b1:86:f9:af:86:23:f3:
                    15:1d:7c:5b:0c:1d:8b:e7:98:d3:5c:6d:e2:5e:04:
                    33:95:36:61:13:8a:21:04:12:9a:f0:46:b0:c5:ab:
                    be:0a:d8:b6:0a:ce:21:b7:e5:16:90:7a:cc:84:d3:
                    95:32:ae:9c:d4:ac:93:cd:79:8f:0d:51:0f:ce:a2:
                    66:fa:9d:1c:8f:8c:3e:cb:21:91:52:c9:03:d8:a3:
                    df:0d:15:be:66:97:9a:86:80:ee:40:a7:bc:7c:e0:
                    39:67:41:ca:d9:0c:3f:7b:7a:fd:8e:ff:51:09:b8:
                    46:9b:0f:13:b7:3a:88:9d:57:e1:58:23:f0:dc:fa:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:65:3F:19:08:06:7F:D5:1A:A2:2D:BF:16:22:FA:40:09:C0:09
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/39106F00FBB611ED8E7FD90D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:04:70:1f:b4:c5:0b:4b:a1:b3:19:f0:d1:5b:bc:7b:d9:11:
         f5:af:09:6d:ce:1d:45:0a:fd:48:e8:af:45:f1:d0:08:46:f7:
         6a:0c:e3:a6:12:86:fd:be:59:3e:44:b8:87:98:cc:5f:71:d8:
         f6:e5:92:d1:34:99:4e:b4:85:bd:ea:3f:ff:19:a8:14:42:c2:
         70:83:e9:c4:16:a8:94:09:21:d6:2c:9a:f1:d4:20:f5:91:35:
         04:70:40:a2:bf:31:0f:7f:90:14:f3:8b:d4:3c:39:cd:65:6b:
         8b:00:73:a0:09:47:ec:df:9f:65:8d:38:9b:45:f2:07:61:aa:
         fc:85:3d:84:36:fe:9a:f7:1b:13:84:b2:c5:da:92:56:7a:18:
         8c:9c:68:c6:3e:64:5d:8b:d5:28:30:1e:ec:f4:08:05:e2:52:
         c9:6b:11:b2:75:d5:81:52:1f:78:44:f1:57:51:e1:e0:ed:40:
         1e:ac:27:37:79:99:3b:4c:33:be:c8:14:ad:76:c2:87:79:e8:
         a9:1c:85:be:34:ea:db:ea:3c:4e:b1:6e:b5:6e:18:b9:e0:85:
         67:76:15:2c:e7:4d:92:5a:f7:dd:99:d8:34:c3:34:4b:7a:3d:
         84:0f:48:41:fb:e6:da:20:43:4e:87:67:08:23:98:87:d8:3f:
         9f:a2:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:09:51 2024 by rpki-client on console-fra.rpki-client.org