Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/6315ACECF95C11EB8E0A1B3ED8A014CE.roa
File:                     6315ACECF95C11EB8E0A1B3ED8A014CE.roa (raw, json)
Hash identifier:          IvSwZp9IV18zo8x0c31GN2xd9ugQho3aot5Bm2hShIs=
Subject key identifier:   71:BA:D7:C9:DB:2A:94:30:B6:DE:F3:87:69:E0:B1:F5:6D:DA:A4:41
Certificate issuer:       /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial:       0192
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/6315ACECF95C11EB8E0A1B3ED8A014CE.roa
Signing time:             Mon 09 Aug 2021 21:55:14 +0000
ROA not before:           Tue 10 Aug 2021 21:55:10 +0000
ROA not after:            Sun 10 Aug 2031 21:55:10 +0000
asID:                     37468
IP address blocks:        197.149.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 30 Sep 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
        Validity
            Not Before: Aug 10 21:55:10 2021 GMT
            Not After : Aug 10 21:55:10 2031 GMT
        Subject: CN=6111a442-2709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:f2:a1:77:ae:05:13:a7:a5:b8:13:f3:23:
                    39:70:30:3c:7a:97:54:cf:6d:d0:5c:0b:ab:92:ae:
                    77:7b:c0:d1:6b:36:45:ca:0d:25:f0:35:e2:bb:d1:
                    78:04:e4:00:ae:3a:36:88:3c:a3:45:5a:2b:b3:6f:
                    90:08:84:28:5c:05:a1:3a:d5:73:72:c3:6f:84:63:
                    44:8c:e7:de:e4:de:6d:55:78:74:45:f5:dd:b8:97:
                    bc:9b:00:08:61:ac:24:5b:5a:5d:f8:a5:60:2d:70:
                    69:de:a5:34:be:70:ad:1e:c5:ac:3b:c8:d5:82:31:
                    03:16:ad:97:15:b4:87:a2:54:f3:b3:9b:31:19:c8:
                    d9:0e:65:52:5e:18:62:42:03:76:8d:79:49:c2:9d:
                    61:80:10:8f:f6:7e:54:01:5a:15:fb:b3:88:a7:55:
                    09:94:2e:1d:53:66:b3:42:cb:7c:a6:8a:65:3c:36:
                    47:39:1a:e0:19:e2:0e:6a:b0:9f:d2:a1:2f:34:e3:
                    ca:43:70:68:5b:44:54:04:f7:6c:c2:48:23:36:61:
                    48:8c:13:d4:0c:92:78:3f:1c:5d:ea:5d:40:e6:77:
                    7d:46:72:76:61:7a:6b:34:7a:9e:a0:bc:69:56:44:
                    64:3d:4a:a6:82:93:aa:19:9c:54:f1:58:b0:92:71:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:D7:C9:DB:2A:94:30:B6:DE:F3:87:69:E0:B1:F5:6D:DA:A4:41
            X509v3 Authority Key Identifier:
                keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/6315ACECF95C11EB8E0A1B3ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.149.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:08:be:30:d2:df:ae:6e:d5:79:c9:a6:cd:76:ae:3c:26:11:
         ad:56:e9:75:51:33:02:a3:7a:2d:41:e1:5b:ac:81:55:8a:88:
         91:41:e5:6b:5c:d6:e9:35:96:73:5e:22:e6:d1:bc:be:c8:c5:
         e8:80:61:0b:d1:26:59:26:69:ba:10:8d:a8:e8:27:4e:44:e5:
         c7:31:0c:db:72:7c:79:5a:e6:63:78:cb:5a:23:55:d7:11:f7:
         4c:b2:f5:bb:5f:b1:9b:b2:03:1e:32:8e:c9:44:a9:5f:ca:bf:
         15:30:7a:93:db:74:28:d6:10:cf:50:fe:94:5d:b6:c6:b0:d2:
         87:05:f7:eb:de:d5:88:57:17:68:81:b2:35:9e:fd:4f:84:bb:
         d5:76:cf:39:10:e9:fd:80:60:b7:5b:60:2d:90:6d:d2:92:e6:
         63:ce:7c:66:c3:ca:88:a2:58:87:c5:c8:9c:05:f5:78:1a:c9:
         81:76:1a:0f:32:5d:4f:88:c3:5e:a7:9b:80:5c:d6:46:4a:95:
         1a:49:ef:10:dc:ef:82:54:00:59:85:45:80:c4:d9:03:db:ab:
         02:ec:17:d5:23:f6:e6:ca:c3:9a:a8:0f:f3:fc:51:18:94:09:
         d5:9b:f3:17:3f:38:77:12:8b:1e:c8:04:3c:89:1d:95:1d:b8:
         9e:f3:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:41:18 2024 by rpki-client on console-ams.rpki-client.org