Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/92592E3EF62211ECB1890ECFF1222468.roa
File:                     92592E3EF62211ECB1890ECFF1222468.roa (raw, json)
Hash identifier:          r+2CApErk9WQshLvMZh/1Yeo8KK9DMqaF9+XKRWgW4w=
Subject key identifier:   B6:C5:97:87:27:EE:2E:90:EC:A3:3D:87:38:48:6A:F0:54:D4:DE:0F
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       0C
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/92592E3EF62211ECB1890ECFF1222468.roa
Signing time:             Mon 27 Jun 2022 14:08:09 +0000
ROA not before:           Mon 27 Jun 2022 14:08:05 +0000
ROA not after:            Sun 27 Jun 2032 14:08:05 +0000
asID:                     328915
IP address blocks:        102.218.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Jun 27 14:08:05 2022 GMT
            Not After : Jun 27 14:08:05 2032 GMT
        Subject: CN=62b9b9c9-b623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:19:cb:cf:6d:5a:d6:a1:37:e7:b9:9e:04:
                    7f:67:82:2f:26:b0:cc:d3:f0:f9:c2:5b:e9:2b:71:
                    02:20:64:e1:11:a2:74:73:04:d1:b0:23:b2:3e:ab:
                    de:c5:1b:f9:e9:2f:33:3b:09:f1:9a:cf:49:7f:50:
                    b2:cc:53:f6:7a:34:80:91:6a:6b:81:83:03:3f:17:
                    fe:48:04:69:ee:b6:8c:b0:f3:e4:b3:09:21:73:0d:
                    72:e3:96:d9:d9:dd:31:5c:e5:d1:f5:8a:fb:0c:d4:
                    12:5e:6b:61:1c:cf:a1:92:14:27:05:07:31:c5:fb:
                    6b:b5:41:67:a8:f6:28:73:8a:6e:7c:34:01:e9:7a:
                    2d:00:dc:95:22:bf:3b:01:e6:7d:7d:ee:a0:46:3f:
                    82:c0:1b:2b:89:c0:5a:ce:3a:18:93:7a:82:39:f4:
                    de:76:a2:1b:7d:ca:20:31:15:eb:a6:54:e3:fc:02:
                    63:73:be:a8:7e:cb:a9:38:ca:32:7d:0e:8c:c5:7d:
                    49:32:70:27:95:88:58:ff:22:fd:35:94:14:f6:a9:
                    c7:69:88:6c:9c:a3:eb:4f:f8:c2:a2:63:6d:55:b0:
                    9a:8f:59:3a:53:87:c5:6a:bc:91:37:34:3a:70:b9:
                    aa:a4:14:7c:50:86:cf:05:b5:b7:63:2b:46:52:1a:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:97:87:27:EE:2E:90:EC:A3:3D:87:38:48:6A:F0:54:D4:DE:0F
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/92592E3EF62211ECB1890ECFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:6d:30:c7:cc:db:fc:56:5a:f9:21:5e:85:19:b2:ad:aa:
         61:85:46:5c:60:55:19:1f:09:f3:58:21:f2:af:7a:88:b4:83:
         00:b5:e1:84:f9:65:cd:16:c1:61:72:3b:23:86:2b:79:dc:d4:
         c4:3d:72:51:b2:8c:0c:c6:2a:e7:c6:d3:09:5a:b8:3b:13:4b:
         53:b7:e9:26:a1:45:1c:b3:14:51:f4:1c:9f:5b:26:34:c0:17:
         11:9b:e9:d7:4a:80:f1:87:36:03:b7:6c:85:07:91:43:b0:a8:
         6c:9d:78:92:61:d5:25:89:1b:7c:3e:68:a4:e5:67:20:46:42:
         49:0c:09:dd:af:52:61:0c:db:37:fe:ba:6e:8d:7e:9b:28:ed:
         ee:28:5f:5c:25:29:f8:23:a9:72:52:81:be:c8:7d:9e:0f:01:
         0a:3d:f7:f7:f5:63:62:46:50:c6:e9:61:42:98:25:d5:7b:10:
         38:6f:5f:a1:fc:41:a8:e1:75:18:25:05:6b:3a:01:d3:5e:3b:
         a7:b6:1b:f1:46:eb:9f:5c:83:eb:f9:38:d5:21:fb:7d:b5:47:
         32:aa:41:bc:de:a8:03:43:45:66:b6:f9:fa:16:7f:18:dd:91:
         a7:86:29:2c:c6:f2:ca:8a:ff:19:9c:f7:2f:34:d5:06:1d:de:
         5c:e5:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:27:14 2024 by rpki-client on console-ams.rpki-client.org