Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/11E302C07FE611EF881E5295762E951A.roa
File:                     11E302C07FE611EF881E5295762E951A.roa (raw, json)
Hash identifier:          145rdnt1Cxjywczq9gDypBeUgWkI++ibIUuOEMfQqyk=
Subject key identifier:   5A:1E:84:55:A4:4B:CE:59:36:E3:A2:B8:28:02:37:83:92:B1:6D:A0
Certificate issuer:       /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial:       14
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/11E302C07FE611EF881E5295762E951A.roa
Signing time:             Tue 01 Oct 2024 11:12:39 +0000
ROA not before:           Tue 01 Oct 2024 11:12:35 +0000
ROA not after:            Wed 01 Oct 2025 11:12:35 +0000
asID:                     329403
IP address blocks:        2c0f:2e40:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
        Validity
            Not Before: Oct  1 11:12:35 2024 GMT
            Not After : Oct  1 11:12:35 2025 GMT
        Subject: CN=66fbd927-a870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:32:39:15:fa:bd:00:60:c4:9f:7c:8e:8e:
                    93:0b:df:18:c5:2b:a8:54:1b:1c:b8:b8:13:da:31:
                    50:86:1a:82:9e:17:7f:a8:ef:af:c3:8a:a4:c9:3d:
                    82:d9:90:e2:81:c3:6f:b1:ed:84:42:cd:10:0c:6a:
                    e4:ee:12:ac:eb:8a:18:14:0f:c4:3a:51:bd:04:e2:
                    1c:9d:fa:f1:9d:b5:8b:2a:63:1c:f9:66:90:77:1f:
                    fe:db:9e:ec:f3:ed:91:58:91:f2:ad:bf:06:80:e9:
                    4a:97:c8:06:4d:26:b0:0d:89:22:89:a1:0c:fb:51:
                    f5:b0:01:87:59:de:46:3f:ac:2d:fc:15:94:b5:2c:
                    03:c3:a0:7e:a0:0f:a2:aa:01:d6:ee:62:c6:fa:eb:
                    05:f5:18:76:a9:69:26:aa:aa:97:01:85:7b:5b:2f:
                    3c:b7:79:21:d6:ff:44:ed:77:40:45:ab:9d:65:88:
                    24:85:83:bc:7c:4e:ad:68:4d:63:1d:ea:69:ed:a4:
                    35:0b:5c:23:a4:e3:6d:94:8d:8f:43:20:ba:76:ef:
                    04:cb:39:f3:01:87:67:b9:dd:cb:d0:11:ee:6e:fe:
                    2c:b0:ec:8f:d0:b6:fd:bc:00:31:94:b4:c1:b2:90:
                    d4:91:ee:80:5c:1c:9a:0b:00:b7:c2:79:eb:74:f4:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1E:84:55:A4:4B:CE:59:36:E3:A2:B8:28:02:37:83:92:B1:6D:A0
            X509v3 Authority Key Identifier:
                keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/11E302C07FE611EF881E5295762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2e40:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:fb:1d:63:6a:92:8c:4b:c4:7e:9d:9e:30:83:d6:ca:a0:
         69:0f:3e:fc:8a:44:ee:18:05:92:d7:b3:cb:72:1d:35:41:83:
         66:d7:9e:cd:61:5b:2a:26:14:88:07:14:f9:7b:75:88:26:e1:
         45:f6:b4:f0:0f:7c:2e:a2:03:cc:c6:6e:6c:5c:f6:5e:c2:f7:
         95:c1:a6:94:13:91:0f:cf:ac:0a:e2:b9:e5:bb:90:51:9a:21:
         d0:05:d6:43:57:6a:5d:cb:a9:f0:a3:aa:9e:cb:c7:57:80:84:
         7a:ee:ab:00:c6:f0:89:20:94:ab:82:d3:17:a0:58:31:ee:36:
         dc:c9:e0:88:a2:cb:3b:fe:8e:af:85:87:92:3b:1f:60:a3:f8:
         80:4d:f5:97:73:15:87:67:cc:ec:36:96:ef:45:01:75:ca:89:
         50:76:16:e6:6d:4e:4d:b5:32:9e:c2:1e:16:3d:ce:07:e6:9d:
         ef:30:1f:0f:4b:c3:5a:0d:68:85:44:7b:28:c8:94:6e:d3:75:
         bd:a3:f1:e5:4e:78:16:71:53:32:58:8d:08:3f:c0:1f:8d:cb:
         92:e3:13:be:af:05:b9:e9:f6:e8:0a:4e:19:bd:9a:fd:ad:0b:
         5e:32:eb:a5:88:fb:43:c6:36:29:4f:26:5f:8a:a4:83:6d:0e:
         f9:53:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:16 2024 by rpki-client on console-ams.rpki-client.org