Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/517885647FE511EF83F2F690762E951A.roa
File:                     517885647FE511EF83F2F690762E951A.roa (raw, json)
Hash identifier:          NesjbwqdXYim8sduEYg7XmsPKVahYOQE+QARTRAVXQc=
Subject key identifier:   18:A9:E1:A1:4A:57:93:73:F0:ED:8F:8D:67:25:AB:6D:4E:52:22:13
Certificate issuer:       /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial:       08
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/517885647FE511EF83F2F690762E951A.roa
Signing time:             Tue 01 Oct 2024 11:07:16 +0000
ROA not before:           Tue 01 Oct 2024 11:07:13 +0000
ROA not after:            Wed 01 Oct 2025 11:07:13 +0000
asID:                     329403
IP address blocks:        102.209.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
        Validity
            Not Before: Oct  1 11:07:13 2024 GMT
            Not After : Oct  1 11:07:13 2025 GMT
        Subject: CN=66fbd7e4-2112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:7c:2f:af:d0:19:d9:3c:22:a8:f6:b4:d8:
                    f1:41:15:de:4e:9c:92:94:07:a3:96:6e:17:36:09:
                    fb:21:1b:d6:a9:9a:e2:db:f4:92:27:69:ec:53:5f:
                    ee:74:15:9e:0b:c9:35:3e:49:b5:bb:5d:f6:22:5d:
                    46:4b:a1:77:9d:26:75:1b:27:b6:dd:9d:e9:d8:79:
                    30:86:4a:f6:fb:40:31:2c:19:01:58:78:df:3c:04:
                    36:22:0d:c0:72:c3:bf:ad:95:4d:a4:3b:c7:1c:23:
                    74:3b:e4:fd:63:81:7b:b9:8c:b6:e9:7f:63:cb:3a:
                    f7:65:41:53:2c:64:9e:ed:67:4b:12:d5:ec:99:f5:
                    74:d2:15:42:04:fb:cc:e2:7f:e0:d2:06:39:59:80:
                    b3:2a:25:2b:da:8a:81:b5:97:1d:1d:d5:3f:0f:9b:
                    f3:f6:b7:cd:38:92:b9:7a:6d:79:63:55:f4:73:02:
                    3e:14:79:9d:38:e0:fe:ac:cd:31:fd:69:97:52:fe:
                    91:11:88:33:4e:f9:3e:9d:51:8c:6d:62:e8:ca:a2:
                    38:4b:db:cc:a8:6d:06:24:8f:64:70:27:c7:6c:5a:
                    5c:f1:34:f2:94:71:fc:3f:9c:cb:60:37:c7:4f:0a:
                    c0:e7:cb:66:fb:6a:39:c7:6c:9f:31:30:5f:bb:8f:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A9:E1:A1:4A:57:93:73:F0:ED:8F:8D:67:25:AB:6D:4E:52:22:13
            X509v3 Authority Key Identifier:
                keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/517885647FE511EF83F2F690762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fc:42:68:c3:29:9a:f9:23:64:4b:34:05:75:cb:ed:2a:36:
         c8:d3:a6:7f:c9:a7:b7:37:f5:48:67:15:ed:4f:63:eb:55:50:
         29:51:64:2b:11:41:4b:65:83:63:7d:79:cc:9b:c7:ce:03:0e:
         50:e0:cb:6c:a3:84:25:15:be:8d:d9:8c:19:3e:06:11:31:2b:
         76:82:fd:73:1f:29:27:63:1b:73:7e:4b:59:9e:bf:cb:8f:4e:
         12:a8:5c:e2:d2:0e:10:d1:5b:f9:d9:1a:fb:fe:28:67:90:02:
         cf:87:b0:78:8b:96:2d:c0:9a:98:ff:8e:51:1f:d4:06:d2:cc:
         e0:c0:61:bf:df:db:cd:55:0b:ba:27:f4:ae:f5:12:1c:59:2e:
         24:06:3f:61:75:e0:00:50:60:7b:c3:fe:f9:35:fa:91:c2:30:
         4f:52:4c:e7:d0:c2:43:10:9e:42:be:e0:3b:45:8b:e0:9a:63:
         a7:a8:84:5a:35:1c:3d:04:a0:e9:98:01:62:19:a2:dd:08:a7:
         e6:50:05:a0:8d:02:70:a8:bf:b0:1b:b6:ff:5b:63:02:8a:a1:
         4e:ce:38:84:31:a7:29:b7:c9:83:7b:44:57:3d:73:e1:32:44:
         7f:1d:54:9f:f5:6a:bd:04:70:73:27:1e:02:45:29:30:db:a0:
         41:f0:e3:7f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MzdFNUFGMTEwLwYDVQQFEyhDOUMxMjlGQkMzQzgyNzNBNDYyOTU1QTk1MjhFMEFB
QzJGMkU5ODJDMB4XDTI0MTAwMTExMDcxM1oXDTI1MTAwMTExMDcxM1owGDEWMBQG
A1UEAxMNNjZmYmQ3ZTQtMjExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALeHfC+v0BnZPCKo9rTY8UEV3k6ckpQHo5ZuFzYJ+yEb1qma4tv0kidp7FNf
7nQVngvJNT5Jtbtd9iJdRkuhd50mdRsntt2d6dh5MIZK9vtAMSwZAVh43zwENiIN
wHLDv62VTaQ7xxwjdDvk/WOBe7mMtul/Y8s692VBUyxknu1nSxLV7Jn1dNIVQgT7
zOJ/4NIGOVmAsyolK9qKgbWXHR3VPw+b8/a3zTiSuXpteWNV9HMCPhR5nTjg/qzN
Mf1pl1L+kRGIM075Pp1RjG1i6MqiOEvbzKhtBiSPZHAnx2xaXPE08pRx/D+cy2A3
x08KwOfLZvtqOcdsnzEwX7uPvI0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQYqeGh
SleTc/Dtj41nJattTlIiEzAfBgNVHSMEGDAWgBTJwSn7w8gnOkYpValSjgqsLy6Y
LDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYyRTk1MUEveWNFcC04
UElKenBHS1ZXcFVvNEtyQzh1bUN3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy
RTk1MUEvNTE3ODg1NjQ3RkU1MTFFRjgzRjJGNjkwNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbRtzANBgkqhkiG9w0BAQsF
AAOCAQEAAvxCaMMpmvkjZEs0BXXL7So2yNOmf8mntzf1SGcV7U9j61VQKVFkKxFB
S2WDY315zJvHzgMOUODLbKOEJRW+jdmMGT4GETErdoL9cx8pJ2Mbc35LWZ6/y49O
Eqhc4tIOENFb+dka+/4oZ5ACz4eweIuWLcCamP+OUR/UBtLM4MBhv9/bzVULuif0
rvUSHFkuJAY/YXXgAFBge8P++TX6kcIwT1JM59DCQxCeQr7gO0WL4Jpjp6iEWjUc
PQSg6ZgBYhmi3Qin5lAFoI0CcKi/sBu2/1tjAoqhTs44hDGnKbfJg3tEVz1z4TJE
fx1Un/VqvQRwcyceAkUpMNugQfDjfw==
-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:16 2024 by rpki-client on console-ams.rpki-client.org