Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/C45709B0188711EDB2E546A3F1222468.roa
File:                     C45709B0188711EDB2E546A3F1222468.roa (raw, json)
Hash identifier:          ARinLMAcSIYiVMizZ61V53Ecef6ywlGVvUXXtImzsZY=
Subject key identifier:   44:C7:13:8E:E7:BD:D7:16:A5:CA:95:31:75:9A:6C:D3:58:DA:8D:86
Certificate issuer:       /CN=F3630683AF/serialNumber=055DB1BF9AD058383C628E393200D6B6CE5F7090
Certificate serial:       02
Authority key identifier: 05:5D:B1:BF:9A:D0:58:38:3C:62:8E:39:32:00:D6:B6:CE:5F:70:90
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/C45709B0188711EDB2E546A3F1222468.roa
Signing time:             Wed 10 Aug 2022 08:38:11 +0000
ROA not before:           Wed 10 Aug 2022 08:38:05 +0000
ROA not after:            Tue 31 Aug 2032 08:38:05 +0000
asID:                     329075
IP address blocks:        102.216.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 17 May 2024 00:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630683AF/serialNumber=055DB1BF9AD058383C628E393200D6B6CE5F7090
        Validity
            Not Before: Aug 10 08:38:05 2022 GMT
            Not After : Aug 31 08:38:05 2032 GMT
        Subject: CN=62f36e73-ad1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:c8:0f:bd:94:a6:03:6a:8f:e4:2e:15:a9:
                    b1:ba:d3:e3:96:a3:a5:fd:0f:67:bd:79:d1:b3:df:
                    43:87:c2:39:cb:9f:6a:00:27:c8:c8:1e:5d:a4:a5:
                    83:f9:5c:ef:a8:1e:a5:cf:7a:4f:e1:9f:eb:49:bc:
                    ef:60:3e:ee:e3:fb:85:21:2c:ef:88:83:c0:7b:86:
                    1d:8b:22:74:6e:b9:18:ff:b7:c8:93:53:47:ff:d2:
                    f7:0f:02:c1:d9:92:21:00:b7:d0:70:39:e6:54:e6:
                    b4:e9:7e:c3:4d:fa:17:5f:a3:b0:5f:4e:0b:8e:64:
                    88:67:b6:5e:5b:ef:65:9a:6b:c8:63:fc:3d:0b:6a:
                    67:e6:8c:8d:34:d3:15:b2:10:cb:72:8e:83:48:35:
                    82:bb:05:ab:e2:d2:f9:ab:06:24:d1:6b:f0:bb:57:
                    f3:da:1a:92:e1:ab:ce:89:37:fd:cf:f4:81:bc:ab:
                    88:8b:d3:dc:73:1f:44:50:60:96:4b:97:2b:d7:0b:
                    54:84:54:76:e6:ac:48:85:0d:b1:37:fa:1d:4e:e6:
                    21:c3:c6:d1:84:17:4e:c5:3c:7d:69:c5:77:b2:c7:
                    9d:c9:ff:ba:64:98:42:61:b8:15:c0:aa:9a:da:50:
                    07:c9:23:4c:91:ed:8c:5f:9d:68:f8:0d:a9:f5:a2:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:13:8E:E7:BD:D7:16:A5:CA:95:31:75:9A:6C:D3:58:DA:8D:86
            X509v3 Authority Key Identifier:
                keyid:05:5D:B1:BF:9A:D0:58:38:3C:62:8E:39:32:00:D6:B6:CE:5F:70:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/C45709B0188711EDB2E546A3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:3d:02:a0:3b:57:82:00:ff:5f:5b:76:7f:9f:0c:b0:8f:04:
         a6:6e:6f:e2:1a:98:45:6d:ad:89:05:44:04:75:96:2e:f1:58:
         7d:14:f3:51:14:7f:4c:f0:59:d2:f5:c0:0b:12:1a:92:62:f0:
         a3:cd:bd:5e:e0:c2:8b:8d:b4:48:f7:08:f4:68:57:a6:e7:6e:
         b1:b7:51:86:75:58:40:c3:1f:29:8e:69:45:1d:7f:88:52:dc:
         a5:69:37:15:e7:e8:ef:78:35:6c:39:8d:9f:68:fd:a5:2e:42:
         65:c3:88:34:d6:20:aa:f9:a7:09:14:17:5f:4c:95:fe:e6:52:
         27:7f:65:f1:8b:77:db:d0:5d:94:02:38:a2:e1:81:fd:e6:1f:
         5d:31:aa:4c:c5:ed:06:ae:14:33:d9:9c:f2:e3:9d:c6:35:96:
         e4:b3:c6:b9:f5:15:79:36:8f:29:dd:f3:88:b7:1d:59:69:0e:
         f9:0d:4b:e3:d3:45:94:32:e9:e7:82:57:07:a2:6d:50:39:f1:
         93:41:13:66:92:5d:b0:e5:ad:0a:c4:ef:26:b5:e3:07:90:ec:
         ea:cb:61:b4:93:72:c0:c9:53:08:24:0a:f8:6f:72:c2:66:20:
         58:f7:42:94:c1:8b:1a:f1:79:81:33:50:68:7a:3a:85:ba:c9:
         f4:83:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 05:22:28 2024 by rpki-client on console-fra.rpki-client.org