Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/077D2872950A11EF882E6662762E951A.roa
File:                     077D2872950A11EF882E6662762E951A.roa (raw, json)
Hash identifier:          FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=
Subject key identifier:   18:A9:A2:6D:F8:A7:50:E0:D4:AC:D2:E8:0F:B5:72:70:EB:C2:E0:AB
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       2C
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/077D2872950A11EF882E6662762E951A.roa
Signing time:             Mon 28 Oct 2024 08:52:58 +0000
ROA not before:           Mon 28 Oct 2024 08:52:54 +0000
ROA not after:            Sat 28 Oct 2028 08:52:54 +0000
asID:                     328364
IP address blocks:        102.208.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Oct 28 08:52:54 2024 GMT
            Not After : Oct 28 08:52:54 2028 GMT
        Subject: CN=671f50ea-6d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:97:75:2a:b8:01:6c:f3:ff:1b:4b:af:95:
                    a3:72:72:d5:37:dc:c5:b0:ca:9c:9f:13:9f:fa:c7:
                    64:31:17:fe:29:3a:05:b2:c2:bd:68:4c:b8:a3:a6:
                    ed:e7:e6:50:94:f8:01:92:de:bf:ad:75:99:f1:6a:
                    f1:46:d6:b1:e8:10:e8:2f:3e:13:05:44:3f:6f:f5:
                    41:81:55:4b:b9:5b:53:fc:91:29:13:db:f0:89:7f:
                    cc:5f:83:d9:52:98:9c:e2:71:2e:ac:8a:3f:14:12:
                    e9:6c:c4:0d:66:ad:e2:ea:88:80:05:23:3a:93:9d:
                    92:68:c8:df:53:b0:6b:e1:92:47:30:ec:b9:97:52:
                    e7:fd:8f:1b:20:b4:24:cf:dd:7b:d5:9a:9c:87:2c:
                    a7:80:44:cf:90:83:c3:08:88:42:62:80:78:c7:77:
                    21:25:e4:47:77:03:44:7b:c7:41:7d:e7:76:73:6b:
                    09:a2:11:de:34:29:97:1d:29:2b:43:67:45:e6:49:
                    38:84:89:fb:86:06:d5:aa:c4:c8:c1:9c:d6:11:5a:
                    1d:9a:30:d9:6e:76:50:9c:a1:2c:c0:e4:39:11:e9:
                    07:b2:e0:6b:8f:bc:98:05:d4:7e:e0:90:78:58:9e:
                    67:8e:be:cc:76:bf:d4:8a:a3:35:60:a5:ad:1e:00:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A9:A2:6D:F8:A7:50:E0:D4:AC:D2:E8:0F:B5:72:70:EB:C2:E0:AB
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/077D2872950A11EF882E6662762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:ee:e3:31:cf:04:f8:28:11:a5:5a:21:54:a9:1b:b1:a3:82:
         4a:f6:c1:5e:86:e3:43:ce:98:bf:e6:a2:54:47:ca:36:3e:7f:
         74:03:1a:42:9b:05:8d:af:15:db:39:83:8d:9c:fe:e6:c7:dc:
         a4:e4:3a:f6:71:3b:d5:80:27:a9:82:37:65:dc:39:a1:1e:08:
         c7:44:3f:05:d1:bd:a3:37:cf:f7:6e:df:a5:a3:bd:d7:63:ed:
         73:5b:5c:00:90:70:bc:43:1d:74:35:3b:9a:a8:0c:3d:0a:26:
         41:5f:06:72:13:b7:9b:70:83:80:3a:6a:39:8c:5d:6d:a8:be:
         ad:d1:92:b2:0b:b5:c1:98:8b:be:c1:31:b0:a6:f7:20:42:ad:
         2f:32:c5:cf:73:00:f6:4e:5f:17:cf:c6:f4:b6:9e:89:e0:af:
         71:1d:8e:31:d3:09:a1:96:49:32:2d:e4:0a:4d:da:88:72:80:
         65:25:d0:41:d5:c5:94:5f:af:ef:6b:51:dc:9f:91:50:0c:23:
         33:a7:cc:3a:3e:26:79:8c:93:ce:e1:18:73:9a:8c:f0:0a:81:
         00:76:31:b7:5d:d3:6f:df:9b:e4:58:43:b3:48:ad:29:52:07:
         3c:a1:5e:23:87:03:4f:85:d7:b5:3c:89:04:4f:08:87:4b:7f:
         22:62:c1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org