Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/2283DBBEC4D311EEB2E6EA66775412E6.roa
File:                     2283DBBEC4D311EEB2E6EA66775412E6.roa (raw, json)
Hash identifier:          vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=
Subject key identifier:   DC:E1:78:5F:BD:69:3F:9C:8F:A3:A5:19:F6:25:7A:21:DF:30:E7:A6
Certificate issuer:       /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial:       33
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/2283DBBEC4D311EEB2E6EA66775412E6.roa
Signing time:             Tue 06 Feb 2024 09:35:59 +0000
ROA not before:           Tue 06 Feb 2024 09:35:55 +0000
ROA not after:            Sat 06 Feb 2027 09:35:55 +0000
asID:                     36905
IP address blocks:        154.126.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
        Validity
            Not Before: Feb  6 09:35:55 2024 GMT
            Not After : Feb  6 09:35:55 2027 GMT
        Subject: CN=65c1fd7f-731c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:b1:4d:39:23:63:96:34:92:7f:64:a5:47:
                    27:8f:2d:58:62:91:25:94:13:2e:88:98:21:9d:71:
                    18:30:e4:d9:48:a5:c9:ed:ca:e1:a4:a8:4f:f5:5b:
                    b0:d0:cf:f8:b9:b0:b5:b8:80:dd:3f:37:f5:c0:60:
                    14:31:3f:1e:8a:28:aa:44:50:12:fb:3a:b0:c5:62:
                    97:af:2f:e1:2d:13:21:57:4a:3c:44:3b:71:a6:0a:
                    5d:85:12:f6:b8:60:32:c8:85:5b:82:bb:52:26:da:
                    b2:4e:a4:0b:8e:13:81:4e:58:01:f4:84:94:2c:77:
                    59:0f:8d:52:f9:5a:ab:0c:b4:ed:84:35:f9:69:21:
                    74:7b:9a:27:bc:36:26:e9:23:6b:fc:18:eb:2a:96:
                    a1:13:8f:dc:ad:e5:52:c0:f9:4b:a1:bc:a5:8c:7c:
                    53:32:19:f6:4b:cd:de:ff:ed:76:81:55:a8:96:8b:
                    7e:19:a3:5c:de:fd:3d:2b:80:cb:74:52:c3:f3:c6:
                    be:ee:32:1a:36:dd:ad:58:17:09:0e:2f:03:e8:c1:
                    0e:50:0d:50:59:c3:c0:09:85:16:eb:b4:71:48:e1:
                    ce:bb:72:c7:0c:3b:ca:9c:7b:60:cb:ce:bc:0c:35:
                    1e:0a:63:68:05:33:8a:f7:71:08:55:44:14:65:47:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:78:5F:BD:69:3F:9C:8F:A3:A5:19:F6:25:7A:21:DF:30:E7:A6
            X509v3 Authority Key Identifier:
                keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/2283DBBEC4D311EEB2E6EA66775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.126.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:a5:13:01:3b:b4:cc:9b:f9:66:5f:23:d6:1a:ad:cc:98:
         85:86:aa:88:e6:5e:a5:b2:ef:c9:9d:93:b0:31:6c:50:80:bd:
         8e:82:fa:f9:ad:98:9f:4a:78:28:36:4f:1f:9c:78:75:d7:23:
         49:f2:21:a2:2a:d0:65:60:38:b2:37:94:a4:02:3d:a9:c0:b3:
         b9:fc:1d:82:29:2e:cb:f1:2a:25:bf:b1:a6:80:95:09:2e:29:
         d2:2a:cb:e3:a8:8c:f8:1a:52:5b:dd:f9:3a:af:9d:fa:13:29:
         ba:47:e0:c4:8e:39:e5:d5:61:c2:70:db:cb:59:c6:14:26:3d:
         18:6e:58:e1:d2:27:5d:de:00:de:4a:83:f3:e8:cc:e6:cf:5f:
         be:37:1f:65:8b:5b:06:3e:e8:14:25:96:04:43:0f:a0:63:dd:
         19:27:b6:ba:f7:db:ad:92:8b:21:93:9d:9f:d7:68:90:f0:55:
         fe:aa:07:84:c2:33:44:b9:31:45:8c:97:98:75:27:fd:00:69:
         54:c1:7a:c2:94:30:a3:9f:2b:d5:56:91:17:8e:ca:f8:cf:05:
         42:8f:a2:2b:89:68:52:1c:15:ff:12:f0:ff:00:e4:07:8b:1e:
         9d:a7:c2:c3:16:4f:22:45:ae:80:5b:a1:0e:ff:a4:8e:ff:39:
         70:47:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org