Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/D65E5FC48AF311EF8851F34F762E951A.roa
File:                     D65E5FC48AF311EF8851F34F762E951A.roa (raw, json)
Hash identifier:          c7SkEy3Yi2GeKetGrgJ5UUc1oCY9D4Wbzhx8n+efBVI=
Subject key identifier:   81:50:53:67:42:8B:E3:47:50:06:1A:8D:AC:23:A8:6A:C7:B0:D7:08
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       0339
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/D65E5FC48AF311EF8851F34F762E951A.roa
Signing time:             Tue 15 Oct 2024 12:48:55 +0000
ROA not before:           Tue 15 Oct 2024 12:48:51 +0000
ROA not after:            Wed 15 Oct 2025 12:48:51 +0000
asID:                     327767
IP address blocks:        102.214.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Oct 15 12:48:51 2024 GMT
            Not After : Oct 15 12:48:51 2025 GMT
        Subject: CN=670e64b7-f526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:2b:2e:a9:f5:ee:9f:c6:8f:78:15:7c:e4:
                    0a:eb:49:8f:c1:f5:8c:ef:6a:86:f5:bd:55:9e:4a:
                    95:cb:31:41:ff:07:09:68:ce:79:c0:7e:66:bf:ec:
                    4d:a4:ba:6e:c8:27:ab:3f:a3:5c:93:2a:0f:0e:66:
                    8c:f4:42:b5:cd:b4:ac:b8:50:b2:7e:f5:b4:c5:fd:
                    e9:d3:ff:85:64:d0:4c:6e:ad:eb:ab:70:d9:90:64:
                    87:9f:95:58:c6:c7:e8:5b:f8:7a:5c:04:ab:2f:62:
                    02:f2:21:b0:b3:37:04:69:0b:23:76:da:74:4d:86:
                    ab:9c:72:1e:a3:ce:95:3c:e2:d1:ae:7a:9d:44:54:
                    0b:5d:1c:a7:e6:e0:01:12:c8:7c:a5:00:c5:ef:8a:
                    4d:4e:76:b0:b2:c2:aa:98:10:31:de:af:4e:06:ba:
                    c6:ea:df:ed:ae:f6:46:95:11:e3:6e:d5:dd:0f:76:
                    ca:9d:61:34:36:ab:ca:90:25:57:c6:a1:03:12:4e:
                    f8:31:3c:05:cf:be:58:a2:df:93:29:67:f3:51:9e:
                    04:56:08:65:65:88:ad:77:d5:d4:bb:14:37:9d:86:
                    38:e5:b4:fa:68:82:97:b9:dc:f5:7c:15:fc:ee:f9:
                    1a:27:c4:94:90:76:8e:98:49:54:c6:4a:d9:e2:ba:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:50:53:67:42:8B:E3:47:50:06:1A:8D:AC:23:A8:6A:C7:B0:D7:08
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/D65E5FC48AF311EF8851F34F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.214.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:c1:97:f3:bf:43:b1:10:d0:55:86:b4:34:be:f1:49:6d:
         5d:0d:eb:f7:11:84:8b:7a:4c:02:4b:8e:11:d7:eb:5e:be:e0:
         d5:8f:a6:01:a2:98:73:26:60:3b:e6:ad:9b:7c:dd:f3:68:16:
         c0:89:cd:5c:e0:8a:c6:60:4b:8d:a1:82:e5:30:6f:e2:e9:39:
         17:84:1a:9c:31:66:1f:eb:4e:65:f9:89:0d:bc:d7:91:11:1b:
         5e:02:40:b4:30:e2:8e:81:40:d0:9b:32:ee:04:93:cf:93:14:
         f0:5f:ca:a4:0c:ca:cf:74:f8:3d:19:72:87:1c:61:3f:27:03:
         e4:e2:3a:e2:2c:c3:29:6e:28:d4:54:78:f0:4e:63:69:d5:b9:
         e0:a0:eb:56:9d:d5:26:5c:e4:10:2e:d4:b7:fb:fb:96:5e:9b:
         f1:b2:e7:4c:ff:2a:a1:a1:92:8b:44:32:99:ca:ed:ef:db:07:
         5f:c9:c1:4b:92:07:98:bd:64:4e:25:b4:48:d7:0c:e6:ef:f7:
         c2:53:1d:ac:f2:8f:78:5c:71:a0:ed:66:27:65:ac:1f:45:4e:
         c7:b2:85:f4:8f:bc:bf:62:47:02:14:48:b5:85:fe:49:cf:cd:
         ad:05:93:2e:98:16:ec:64:a6:ad:03:07:16:c2:14:52:1c:ff:
         5f:52:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org