Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/A97B972E7FE511EF83081793762E951A.roa
File:                     A97B972E7FE511EF83081793762E951A.roa (raw, json)
Hash identifier:          mN6sdorObjWRjdE+T1AUWFBe0BDnfK2FWZtt0dewwa0=
Subject key identifier:   DE:C9:3B:5B:E2:26:28:2E:DE:90:58:89:82:8D:E1:0E:DA:6C:A9:DE
Certificate issuer:       /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial:       0C
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/A97B972E7FE511EF83081793762E951A.roa
Signing time:             Tue 01 Oct 2024 11:09:44 +0000
ROA not before:           Tue 01 Oct 2024 11:09:40 +0000
ROA not after:            Wed 01 Oct 2025 11:09:40 +0000
asID:                     329403
IP address blocks:        2c0f:2e40:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
        Validity
            Not Before: Oct  1 11:09:40 2024 GMT
            Not After : Oct  1 11:09:40 2025 GMT
        Subject: CN=66fbd878-f048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:fc:12:c4:32:d5:d2:cf:f9:4b:bc:80:71:
                    ba:a8:ce:de:a4:34:62:0b:ed:46:69:80:a0:7e:08:
                    51:82:42:fe:f5:16:74:37:1a:1a:05:56:b7:fe:13:
                    8d:a9:1d:b5:88:64:0a:c0:8a:e8:ac:a2:50:98:18:
                    52:9e:b8:c7:e3:2f:b1:fe:5b:7e:18:36:5a:45:1e:
                    47:32:8a:d9:0a:31:b6:2c:93:50:52:f1:a5:0d:5f:
                    09:e9:fb:e3:68:6c:02:67:13:ca:6a:0d:24:ee:b6:
                    7d:31:1d:f1:38:aa:36:02:54:00:20:29:71:a5:78:
                    35:1e:ef:c3:20:72:02:14:33:44:d4:b2:cd:de:0c:
                    35:4b:e0:26:62:46:3c:55:65:98:4d:f2:19:dd:32:
                    24:18:0f:9f:e0:5e:d0:a6:17:7e:57:80:f6:cc:46:
                    d2:80:ee:33:9e:96:01:3b:47:cd:3a:19:ba:33:ee:
                    13:fe:1f:81:27:2c:99:d2:ff:1e:c5:d7:ba:71:a6:
                    fc:b0:73:c2:62:26:62:6e:08:b2:27:e1:82:d5:34:
                    9d:74:cf:6c:14:8f:37:a6:7f:6d:53:fc:9c:ab:f8:
                    d8:a3:7d:b3:50:63:fd:5b:d8:27:53:c0:f8:2c:f7:
                    ac:6d:ea:2f:96:62:54:95:cf:1f:43:98:2f:6e:b2:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:3B:5B:E2:26:28:2E:DE:90:58:89:82:8D:E1:0E:DA:6C:A9:DE
            X509v3 Authority Key Identifier:
                keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/A97B972E7FE511EF83081793762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2e40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:58:d9:b7:c1:c5:0e:71:c2:6c:7b:64:8b:c4:da:a3:2b:
         c2:98:4b:60:dd:9b:78:8b:4c:b3:40:be:e1:b9:4a:6f:94:7f:
         75:d3:59:3a:33:ac:d7:3e:2b:bc:04:78:b0:d8:c1:be:0e:ab:
         61:2e:66:1a:11:77:e1:03:f5:ca:73:c0:d8:b3:46:d2:d4:4d:
         d7:2a:b6:d4:66:1d:8a:ea:a4:e3:f9:46:f7:98:1b:68:0b:d1:
         be:79:c9:f2:fc:a0:b6:dd:9c:1d:9d:7d:62:12:03:ad:61:79:
         b0:ae:03:15:1b:4f:b2:44:e1:b6:1f:21:96:0c:82:7d:8f:f4:
         73:8e:0a:ce:0f:53:f7:53:33:52:61:00:9e:48:af:0c:46:2f:
         5f:16:1c:65:e0:16:77:7d:eb:e0:c0:73:47:27:c6:d3:e8:e0:
         13:49:47:6c:7f:78:95:57:8e:34:51:4c:7a:ee:86:18:4b:65:
         56:70:77:cd:ad:22:21:4b:f8:0b:29:8a:bd:cb:83:96:61:e9:
         82:3d:85:b8:06:1e:b3:51:ef:4a:f3:52:b5:0c:fc:50:77:f4:
         d0:0d:d7:d0:6b:7d:e6:21:38:4a:a7:bc:d0:94:04:41:b4:8d:
         05:23:48:60:74:20:8a:7f:36:f6:96:c3:da:30:47:58:0f:6e:
         a3:90:da:46
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MzdFNUFGMTEwLwYDVQQFEyhDOUMxMjlGQkMzQzgyNzNBNDYyOTU1QTk1MjhFMEFB
QzJGMkU5ODJDMB4XDTI0MTAwMTExMDk0MFoXDTI1MTAwMTExMDk0MFowGDEWMBQG
A1UEAxMNNjZmYmQ4NzgtZjA0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKnL/BLEMtXSz/lLvIBxuqjO3qQ0YgvtRmmAoH4IUYJC/vUWdDcaGgVWt/4T
jakdtYhkCsCK6KyiUJgYUp64x+Mvsf5bfhg2WkUeRzKK2QoxtiyTUFLxpQ1fCen7
42hsAmcTymoNJO62fTEd8TiqNgJUACApcaV4NR7vwyByAhQzRNSyzd4MNUvgJmJG
PFVlmE3yGd0yJBgPn+Be0KYXfleA9sxG0oDuM56WATtHzToZujPuE/4fgScsmdL/
HsXXunGm/LBzwmImYm4IsifhgtU0nXTPbBSPN6Z/bVP8nKv42KN9s1Bj/VvYJ1PA
+Cz3rG3qL5ZiVJXPH0OYL26y9B0CAwEAAaOCAqgwggKkMB0GA1UdDgQWBBTeyTtb
4iYoLt6QWImCjeEO2myp3jAfBgNVHSMEGDAWgBTJwSn7w8gnOkYpValSjgqsLy6Y
LDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYyRTk1MUEveWNFcC04
UElKenBHS1ZXcFVvNEtyQzh1bUN3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveWNFcC04UElKenBHS1ZXcFVvNEtyQzh1bUN3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzM3RTUvOTc5QkE2NDA3RkUzMTFFRjgzNDc1NTg2NzYy
RTk1MUEvQTk3Qjk3MkU3RkU1MTFFRjgzMDgxNzkzNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACwPLkAAATANBgkqhkiG9w0B
AQsFAAOCAQEAjV5Y2bfBxQ5xwmx7ZIvE2qMrwphLYN2beItMs0C+4blKb5R/ddNZ
OjOs1z4rvAR4sNjBvg6rYS5mGhF34QP1ynPA2LNG0tRN1yq21GYdiuqk4/lG95gb
aAvRvnnJ8vygtt2cHZ19YhIDrWF5sK4DFRtPskThth8hlgyCfY/0c44Kzg9T91Mz
UmEAnkivDEYvXxYcZeAWd33r4MBzRyfG0+jgE0lHbH94lVeONFFMeu6GGEtlVnB3
za0iIUv4CymKvcuDlmHpgj2FuAYes1HvSvNStQz8UHf00A3X0Gt95iE4Sqe80JQE
QbSNBSNIYHQgin829pbD2jBHWA9uo5DaRg==
-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:45 2024 by rpki-client on console-fra.rpki-client.org