Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/113F58B6135611EF80444200017001B1.roa
File:                     113F58B6135611EF80444200017001B1.roa (raw, json)
Hash identifier:          BTsOeFkbHhGw9Gyh4jCDJwr8aq3q34PwgkotasMBepI=
Subject key identifier:   75:9B:F2:F6:82:4D:05:5D:97:29:E4:49:53:C6:E2:D3:30:D9:B2:40
Certificate issuer:       /CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Certificate serial:       0322
Authority key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/113F58B6135611EF80444200017001B1.roa
Signing time:             Thu 16 May 2024 07:29:45 +0000
ROA not before:           Thu 16 May 2024 07:29:42 +0000
ROA not after:            Fri 16 May 2025 07:29:42 +0000
asID:                     328974
IP address blocks:        102.217.228.0/22 maxlen: 24
                          102.217.228.0/30 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
        Validity
            Not Before: May 16 07:29:42 2024 GMT
            Not After : May 16 07:29:42 2025 GMT
        Subject: CN=6645b5e9-42f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:4b:37:51:3d:7d:51:39:8a:8e:32:69:59:
                    d1:64:cb:4a:a9:e2:c4:92:bf:79:a2:98:f6:dd:6a:
                    6e:77:d2:aa:50:57:26:1f:b2:a9:10:9c:50:0c:87:
                    4f:66:cb:cb:4f:83:a4:66:31:4b:8f:ba:06:6a:c9:
                    2c:71:72:06:a4:da:e6:ac:a1:a0:2a:d2:fa:90:91:
                    0b:2f:80:03:f5:32:1f:e8:f1:c3:25:fe:6f:cb:e4:
                    82:75:7a:34:96:bb:b0:06:66:42:29:90:9b:fd:cb:
                    24:8f:52:c4:73:0a:5e:f4:bd:14:2f:39:0c:02:8f:
                    de:ab:da:5f:fb:be:29:d9:81:83:3d:62:7d:fa:28:
                    1e:5e:dc:6c:3a:a6:ff:78:82:d2:7b:15:d1:62:86:
                    53:e0:10:13:82:41:b4:3c:73:d6:5a:28:e9:23:1f:
                    b5:d5:63:f6:91:8f:d5:c5:58:79:86:8c:af:61:46:
                    c8:4f:28:a2:00:7d:cd:c0:c8:01:13:4b:72:48:cf:
                    44:9b:cf:32:9c:83:27:c9:00:f0:fc:25:35:31:e1:
                    11:6c:ef:bf:f6:ad:1f:15:54:ae:64:01:b6:65:53:
                    02:c3:8b:05:cb:8a:ba:59:3e:71:5e:97:34:b0:78:
                    ab:f2:35:67:6e:33:2e:9e:8d:1b:d2:d8:50:7c:17:
                    be:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:F2:F6:82:4D:05:5D:97:29:E4:49:53:C6:E2:D3:30:D9:B2:40
            X509v3 Authority Key Identifier:
                keyid:5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/113F58B6135611EF80444200017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:a8:2d:f5:c4:fb:be:f0:93:55:7d:29:70:79:4b:f2:a2:
         9c:c1:93:d2:92:8e:07:ef:03:5e:41:87:0f:96:04:6c:37:e5:
         b6:64:25:dc:15:9d:5d:80:be:f5:e8:88:fb:7b:aa:6c:6c:36:
         08:75:b5:4c:97:58:79:2a:99:4f:92:5f:fd:75:b9:fe:db:c4:
         12:75:28:f9:ed:7c:bb:93:a7:3d:9c:64:10:2c:80:6b:94:56:
         6c:6d:21:a1:4a:ca:7f:df:75:88:c3:fb:61:cf:f9:3b:7e:26:
         90:f4:a9:b4:f3:ce:32:94:2c:ea:6e:8b:5e:a2:71:6b:4a:2c:
         33:e6:d6:79:a6:61:5a:eb:ce:6e:b0:f6:af:ee:ab:00:75:f1:
         98:8b:48:07:88:15:79:dc:28:d3:09:9f:1d:80:a4:91:30:3d:
         19:25:1b:f2:9a:44:03:14:36:a3:e0:a2:b0:84:66:2d:5f:76:
         de:92:c6:dd:1b:c8:82:18:30:a0:e9:78:32:22:e1:a1:bc:31:
         5c:51:e6:20:1e:bc:84:41:6a:6f:32:fa:1f:19:14:6d:60:bf:
         f3:60:8f:af:b1:2f:71:d4:c3:50:a8:97:dd:a9:a4:a5:d3:25:
         6f:9b:23:a5:af:b3:b1:64:93:56:49:36:2f:1c:d7:7e:41:a1:
         fb:ac:84:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org