Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/E331093A782A11EF8C72A468762E951A.roa
File:                     E331093A782A11EF8C72A468762E951A.roa (raw, json)
Hash identifier:          BY9ne/1N16RAQitVEfvm4jFlat7DlCCnlCV+oKN285U=
Subject key identifier:   1F:59:3B:87:C2:D9:E1:26:AC:A5:54:D7:90:22:FC:87:CA:B3:7A:B0
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       0B
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/E331093A782A11EF8C72A468762E951A.roa
Signing time:             Sat 21 Sep 2024 15:05:07 +0000
ROA not before:           Sat 21 Sep 2024 15:05:02 +0000
ROA not after:            Mon 24 Sep 2029 15:05:02 +0000
asID:                     967
IP address blocks:        45.221.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Sep 21 15:05:02 2024 GMT
            Not After : Sep 24 15:05:02 2029 GMT
        Subject: CN=66eee0a3-dc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:7d:78:78:87:77:e6:64:82:3b:12:b7:1d:
                    0a:81:f1:c9:35:2b:76:e7:e2:0b:1a:56:ef:a3:3d:
                    a5:41:b2:40:3e:d7:4e:54:04:60:fc:2f:ca:f3:cf:
                    54:8e:4b:cd:f7:60:12:6b:ff:bf:2a:90:f6:89:0e:
                    2c:9b:a5:e6:8d:60:60:22:59:80:d5:c9:05:35:8b:
                    5b:62:46:72:ce:83:df:5e:d2:2e:b4:f1:cb:f2:23:
                    d1:9b:dd:f5:1d:15:90:c1:98:8f:23:35:8d:61:14:
                    25:e7:d9:34:26:9f:fd:2f:18:7c:fd:89:67:f2:e6:
                    68:68:a8:c5:9e:fb:5a:93:e9:21:37:3f:5e:a9:59:
                    4a:cc:db:9e:89:8f:cf:dd:0b:d2:15:85:4a:1e:2c:
                    7a:cb:dc:19:a7:f1:4a:81:f0:f5:d0:df:e3:ed:43:
                    22:21:8d:2c:09:4c:5f:37:e6:74:dc:f8:72:d0:9c:
                    bc:ac:7f:92:0c:33:6b:a4:96:7e:a8:b3:fb:ad:cd:
                    94:f9:08:88:3b:47:12:a3:e8:a3:1d:a9:7d:b9:eb:
                    90:4a:5f:55:c8:9a:c2:91:24:cd:9d:d5:36:f1:8a:
                    72:47:38:44:db:22:dd:f5:20:5b:e6:d4:09:c2:bf:
                    f7:57:b9:37:aa:6b:58:22:73:80:9d:cf:fb:5f:32:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:59:3B:87:C2:D9:E1:26:AC:A5:54:D7:90:22:FC:87:CA:B3:7A:B0
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/E331093A782A11EF8C72A468762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:ee:43:b5:dc:9d:9a:0d:32:74:92:56:ee:45:d7:e6:58:ac:
         96:ff:6e:ed:94:58:dd:b1:20:59:16:58:45:58:bf:97:51:b2:
         4c:b2:72:11:61:53:ca:8b:94:d3:10:c3:0b:e5:61:31:fd:90:
         2c:78:ad:ff:8d:c1:61:19:18:5c:53:d8:4d:16:f9:86:97:36:
         5f:0b:7b:15:1b:44:ac:9c:55:b1:4c:d8:a7:03:70:09:73:89:
         a2:21:4d:8c:3b:be:90:48:3e:58:d5:5b:55:6d:73:f7:3f:e6:
         6e:0d:79:7f:88:57:2f:04:89:5c:7f:99:a8:ba:7a:9f:cb:2d:
         6b:cd:bf:28:ed:e2:d0:53:38:b2:36:0c:37:80:f8:29:2e:41:
         37:8b:76:f6:68:07:1d:20:61:58:50:9f:57:b7:f4:f7:76:81:
         5d:c2:e8:1f:78:ee:2c:36:36:c5:b1:84:c3:ec:7f:a4:aa:91:
         cf:a2:83:48:bc:49:87:89:36:90:ce:32:91:19:75:7e:5d:74:
         07:32:79:84:e1:3b:46:49:9d:b8:4e:8b:bf:9b:3a:4b:4e:5b:
         c3:fc:83:ca:3a:99:66:1a:57:23:b4:6e:67:0d:e6:b3:ee:54:
         e5:f1:b4:e9:c7:b6:ae:1a:08:6e:13:cf:3f:10:86:f2:e6:92:
         5f:c6:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:46 2024 by rpki-client on console-fra.rpki-client.org