Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/E4B61DCA8D2111EFB01DB38E762E951A.roa
File:                     E4B61DCA8D2111EFB01DB38E762E951A.roa (raw, json)
Hash identifier:          zeCNHkishsTU3uzCuAPxBuJu5YHNz5T6GSsNW4JzEZc=
Subject key identifier:   59:F6:B1:10:DD:13:43:75:D8:20:CA:96:A7:80:57:16:52:74:9C:3E
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       0347
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/E4B61DCA8D2111EFB01DB38E762E951A.roa
Signing time:             Fri 18 Oct 2024 07:23:38 +0000
ROA not before:           Fri 18 Oct 2024 07:23:35 +0000
ROA not after:            Sat 18 Oct 2025 07:23:35 +0000
asID:                     328660
IP address blocks:        102.223.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Oct 18 07:23:35 2024 GMT
            Not After : Oct 18 07:23:35 2025 GMT
        Subject: CN=67120cfa-abca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:79:e3:c1:fb:c4:77:44:94:a5:0d:20:d0:
                    58:ad:27:c1:f4:dc:98:4a:a5:27:ac:ce:65:1e:9f:
                    aa:90:22:27:cf:f9:b3:01:1e:42:5e:a9:87:40:26:
                    3e:58:4d:93:8e:da:dc:d4:f5:26:d9:ba:be:4a:8e:
                    d5:0a:c2:9b:f3:c3:96:63:54:70:ee:e3:2b:86:62:
                    8b:0a:b4:ba:7d:cb:2b:d2:b5:49:12:1f:b2:00:f0:
                    56:52:b7:c1:21:58:ff:57:52:09:dc:8b:ab:56:da:
                    06:bb:9c:21:ca:b8:56:65:76:55:90:cf:bc:47:30:
                    41:ff:1d:ec:d4:97:25:05:63:1c:08:20:41:44:7d:
                    74:d6:70:46:40:7d:99:09:2e:9a:d4:f4:a1:b9:07:
                    f6:cf:6d:78:f7:0d:68:ac:66:40:66:33:7a:dc:36:
                    7e:02:87:f0:cb:12:ee:5d:37:de:c7:5b:e6:80:d8:
                    df:e4:2d:38:9b:24:bd:fd:68:f8:2d:34:49:f6:49:
                    96:52:10:68:9d:f9:62:56:1a:fc:cf:e5:9d:df:2c:
                    08:ce:8d:14:4c:ac:24:d1:f3:48:16:39:cf:ac:9a:
                    cb:04:b5:15:2b:38:5b:85:d5:f6:57:2e:15:9b:71:
                    80:85:22:e6:aa:7b:6b:f2:f8:5b:a6:22:2f:79:af:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F6:B1:10:DD:13:43:75:D8:20:CA:96:A7:80:57:16:52:74:9C:3E
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/E4B61DCA8D2111EFB01DB38E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:8f:1a:ac:1d:13:e3:b5:2c:9e:0f:51:93:19:c7:e8:3d:4e:
         ad:79:fc:d5:e6:34:51:06:52:e9:bc:5c:30:d0:66:7c:fd:2a:
         3f:e5:91:a5:42:97:87:a3:ac:0d:51:8f:6b:43:9c:e3:08:f6:
         b4:76:d4:0f:99:7f:fc:29:3f:5c:23:04:d3:32:5c:14:4a:c7:
         e4:12:b2:8b:2b:6c:fa:1e:44:1d:0f:20:11:53:9f:09:b5:f7:
         d6:cc:c8:da:71:df:67:73:c0:2e:61:6e:47:86:bb:bb:2e:c4:
         bf:ae:45:6a:2f:b5:6e:42:88:29:78:cd:47:c1:d1:b7:05:db:
         dd:37:02:0e:03:90:47:f0:20:b1:67:9b:df:86:8c:a5:8e:14:
         09:fb:77:b2:43:7b:a9:22:68:9b:49:12:5e:78:7d:4d:2f:0e:
         7e:b7:5d:d7:60:1f:69:ab:99:02:3e:66:97:81:2f:7d:6d:ea:
         eb:88:87:82:20:c9:23:6b:60:59:cb:1e:56:dc:0c:cd:21:11:
         a1:ee:fc:36:e9:45:db:8c:5f:43:af:3e:16:e3:4d:50:82:60:
         3a:e0:c4:c3:40:c7:49:dc:20:a1:4e:e7:36:e1:8f:6c:e4:8d:
         73:bb:7f:86:c7:36:a8:45:02:a3:2d:1d:13:cd:1f:ae:e4:b1:
         0f:2f:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org