Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/7A8C97107FE511EFB8E44791762E951A.roa
File:                     7A8C97107FE511EFB8E44791762E951A.roa (raw, json)
Hash identifier:          AH8DtFHeq8MnXy0oZ85/RX+mX+FZ7sL97pcuKDpfLIU=
Subject key identifier:   E8:55:48:56:74:BD:AC:14:14:C2:21:D8:82:5F:AC:0E:5B:3A:5F:6E
Certificate issuer:       /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial:       0A
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/7A8C97107FE511EFB8E44791762E951A.roa
Signing time:             Tue 01 Oct 2024 11:08:25 +0000
ROA not before:           Tue 01 Oct 2024 11:08:22 +0000
ROA not after:            Wed 01 Oct 2025 11:08:22 +0000
asID:                     329403
IP address blocks:        2c0f:2e40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
        Validity
            Not Before: Oct  1 11:08:22 2024 GMT
            Not After : Oct  1 11:08:22 2025 GMT
        Subject: CN=66fbd829-ecb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:cf:23:16:9c:a9:81:20:76:c2:04:e9:d1:
                    15:28:77:14:6c:97:cb:ec:0b:ed:af:77:1e:23:9f:
                    f4:9a:e1:a2:a6:35:57:46:62:e4:fb:cd:97:a6:6c:
                    12:50:17:52:a7:66:b9:71:bd:43:95:9d:58:eb:14:
                    d8:70:08:c4:17:79:5a:88:6c:62:5a:6c:04:d3:c6:
                    7e:76:89:25:b4:45:66:8b:0c:1c:a4:bc:31:2f:15:
                    f6:44:68:64:d9:e5:66:00:37:da:87:8c:1a:27:7e:
                    f9:50:93:a1:76:a0:a5:50:1b:7f:1a:96:8c:27:c7:
                    4b:ef:ae:13:82:d2:04:db:20:27:f4:74:ad:39:f0:
                    35:1e:4d:23:48:93:fd:ef:ca:d1:8e:ee:79:23:07:
                    62:38:27:65:a6:5f:9b:12:df:ab:24:38:81:99:f1:
                    75:bc:25:76:9d:36:76:ac:3e:1b:c4:73:7d:e9:f2:
                    33:1e:00:26:39:cf:e6:85:74:f3:1d:72:0d:42:72:
                    1c:08:8a:c7:75:6f:de:ff:cb:61:ac:5a:a4:6c:75:
                    c2:f2:33:fb:1d:cc:a7:ed:c8:47:2f:c2:1b:3e:c4:
                    45:a6:2f:3e:6e:66:ba:a1:70:48:77:52:09:dc:65:
                    a9:3c:a6:f8:7d:ab:1d:94:ec:55:b4:91:a5:ab:39:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:55:48:56:74:BD:AC:14:14:C2:21:D8:82:5F:AC:0E:5B:3A:5F:6E
            X509v3 Authority Key Identifier:
                keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/7A8C97107FE511EFB8E44791762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:5b:cf:d9:04:cc:aa:b3:d1:ad:2a:ac:b1:d6:05:6c:3b:
         5a:26:d8:ce:98:c0:34:a8:8d:e0:55:15:93:2c:70:bc:6f:42:
         9a:d2:86:2e:33:bf:21:d5:1f:d5:0a:40:a5:1a:d9:7e:27:8f:
         22:b3:59:a9:e4:68:32:9e:ca:6c:b7:99:50:0c:5a:64:7a:d0:
         fa:0f:06:69:26:70:b7:d3:04:3c:1e:e4:88:e5:4b:08:87:ae:
         e1:c8:9f:cc:44:fd:09:33:65:81:a2:ac:83:04:07:b9:9d:54:
         9c:36:3c:34:1a:80:78:c7:b5:33:ce:91:5e:14:88:e4:78:82:
         ec:92:7a:7f:ad:46:79:5b:02:bd:ab:02:c0:5d:2a:33:3d:da:
         5e:b9:ee:75:44:8e:e5:5c:95:13:22:be:85:63:98:ce:04:9b:
         f3:f3:6a:8c:ca:55:ec:10:93:29:6e:73:2f:92:8f:22:92:08:
         2b:78:69:66:30:98:ed:e2:05:83:ef:c1:6f:1c:ab:52:5b:f9:
         b6:d4:f5:4d:7c:63:4f:f1:f3:89:af:2a:b7:95:9d:e2:0c:a3:
         d3:fd:2f:58:df:1a:68:ca:99:d3:b3:bd:40:74:a2:9f:87:76:
         7d:59:c4:40:ee:0f:0c:62:5f:09:57:79:66:6f:81:eb:4c:f0:
         ad:1e:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:16 2024 by rpki-client on console-ams.rpki-client.org