Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/69176EDA54B411EF85302264762E951A.roa
File:                     69176EDA54B411EF85302264762E951A.roa (raw, json)
Hash identifier:          aXC5ZcMaKvppj9wFu7iH9bADIONa5jeymvvlcxe0MZE=
Subject key identifier:   A6:7F:32:D5:86:69:A5:47:CD:87:B3:F2:CC:E2:EF:C2:8C:8C:8A:3F
Certificate issuer:       /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial:       0E
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/69176EDA54B411EF85302264762E951A.roa
Signing time:             Wed 07 Aug 2024 11:58:51 +0000
ROA not before:           Wed 07 Aug 2024 11:58:47 +0000
ROA not after:            Thu 31 Aug 2034 11:58:47 +0000
asID:                     329455
IP address blocks:        102.208.140.0/22 maxlen: 22
                          102.208.140.0/24 maxlen: 24
                          102.208.141.0/24 maxlen: 24
                          102.208.142.0/24 maxlen: 24
                          102.208.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
        Validity
            Not Before: Aug  7 11:58:47 2024 GMT
            Not After : Aug 31 11:58:47 2034 GMT
        Subject: CN=66b3617a-81e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:a8:61:3d:b2:37:0e:fa:20:41:6b:0f:3b:
                    6c:04:44:d3:12:1e:9b:3c:3a:99:ad:46:11:60:be:
                    78:a9:84:7d:e7:b6:b0:f2:2c:3c:e1:94:27:37:bc:
                    45:49:23:63:c2:2a:70:2d:fb:c9:38:81:a8:0a:f2:
                    3a:c1:fa:2c:90:b8:f2:ad:98:50:60:76:78:02:29:
                    7f:55:5d:37:6f:32:3e:e0:7b:fd:04:c7:5a:18:e4:
                    7a:86:c5:3b:2b:ff:bd:e9:5e:ee:f6:8e:b7:b8:e0:
                    81:78:fa:8d:73:52:1d:f5:a8:99:6e:e4:c8:de:fd:
                    bc:37:8b:9e:5f:b2:23:26:1b:71:cd:f4:a2:a2:9d:
                    08:e6:11:b1:1a:d3:26:8b:f5:59:de:0b:99:4c:80:
                    35:43:1a:cf:c5:c4:34:9d:7e:56:c9:76:12:e6:3b:
                    26:28:02:8d:18:b7:aa:2e:77:56:bf:b2:3b:47:89:
                    fc:66:1a:16:e4:89:0d:d7:8f:b8:fa:ba:d8:6c:5b:
                    83:21:c5:15:4c:54:24:22:86:31:f3:f0:2a:47:d4:
                    a6:00:ee:4a:e1:21:9f:48:a8:69:3b:e2:b8:16:9a:
                    9a:10:3f:0e:f5:5e:3f:38:ea:39:e8:7b:c0:11:92:
                    8e:a1:cd:31:52:2f:dc:5b:45:53:0f:18:1e:3e:d5:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7F:32:D5:86:69:A5:47:CD:87:B3:F2:CC:E2:EF:C2:8C:8C:8A:3F
            X509v3 Authority Key Identifier:
                keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/69176EDA54B411EF85302264762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:f0:00:0d:00:5c:51:da:f7:71:ce:28:fe:fc:c3:61:52:
         d6:ee:9d:f5:4d:04:43:ab:58:c3:16:6f:2e:2e:2b:61:6d:b9:
         fb:f1:3b:20:03:7b:a6:63:ce:0d:27:da:19:ea:a2:c3:62:d1:
         1d:fb:c4:f1:39:36:12:7f:c7:81:ba:36:61:da:ee:52:9f:dd:
         64:42:7e:18:9e:7c:7a:2d:fe:2c:f9:1e:fa:72:36:4b:90:39:
         3e:ae:01:63:05:72:8b:73:96:d9:b7:10:80:fe:5c:5d:86:7c:
         64:c0:f1:b8:63:b0:87:9f:29:e3:4f:3e:96:f3:e8:67:40:36:
         1d:8c:5f:2d:f2:57:b4:ea:bd:02:f8:b1:79:d7:81:3a:0e:bf:
         a7:5e:47:14:fc:59:1a:36:46:91:fc:8c:19:a5:60:47:c4:ee:
         07:ad:99:ee:7e:f2:92:d4:82:46:1f:73:cc:b4:13:5c:4e:f4:
         99:16:43:4c:fd:d1:8a:5e:89:bd:60:06:66:24:3d:e6:10:68:
         a8:8e:3f:3a:49:f7:70:f2:ce:15:0f:66:84:f1:83:d6:db:19:
         a0:61:bf:02:73:a6:b3:a4:58:86:46:d4:9a:c0:78:dc:f7:65:
         f6:c8:ee:3b:3e:82:67:ea:5e:82:3a:35:9b:64:10:79:bf:28:
         7c:34:65:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:45 2024 by rpki-client on console-fra.rpki-client.org