Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/02E22EFA625611EC964773CA5A40D577.roa
File:                     02E22EFA625611EC964773CA5A40D577.roa (raw, json)
Hash identifier:          U8AI652AXOrPKKsuZzxDlBp/TBbv5o5pMJOe2YGJ9bI=
Subject key identifier:   11:05:10:E5:19:A1:20:24:3C:B3:3A:51:EE:B0:89:34:F9:83:CB:5B
Certificate issuer:       /CN=F365C604AF/serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
Certificate serial:       02
Authority key identifier: 83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/02E22EFA625611EC964773CA5A40D577.roa
Signing time:             Tue 21 Dec 2021 12:03:30 +0000
ROA not before:           Tue 21 Dec 2021 12:03:26 +0000
ROA not after:            Sun 21 Dec 2031 12:03:26 +0000
asID:                     328826
IP address blocks:        102.218.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 01 May 2024 09:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C604AF/serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
        Validity
            Not Before: Dec 21 12:03:26 2021 GMT
            Not After : Dec 21 12:03:26 2031 GMT
        Subject: CN=61c1c292-155b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:8e:56:ed:16:40:96:5a:2a:57:50:0e:d6:
                    e1:6a:1f:57:63:06:2c:ce:8f:20:15:2d:4d:f8:0c:
                    6d:99:f3:3e:0a:58:22:92:a5:37:41:de:49:43:68:
                    45:a8:1a:f1:3f:f7:77:fa:7d:08:07:5a:dd:19:26:
                    37:42:fb:aa:21:f2:f7:7d:7a:4e:c7:3a:60:7d:42:
                    4d:74:87:64:54:e3:04:30:c4:00:05:54:69:07:39:
                    eb:76:8d:af:88:3d:8f:ae:75:51:7d:99:3e:f3:e1:
                    a3:4e:28:b2:40:f8:07:6c:8a:d8:8c:72:45:2b:f6:
                    fc:c5:16:d6:01:34:2f:cb:c2:a3:ab:20:63:d3:9f:
                    12:39:9e:8e:62:22:87:73:7c:c0:e0:98:22:8e:47:
                    88:7f:d8:63:0d:8b:4f:d4:45:7c:34:96:68:f7:92:
                    29:97:ee:8a:a5:a0:4f:ca:22:8e:9f:16:fc:6d:d7:
                    ee:bf:f4:84:22:be:b9:c5:4e:89:5d:52:8f:9c:23:
                    8b:8f:ef:a0:f5:3c:86:27:44:7e:13:27:f4:c1:b3:
                    41:fa:c4:84:35:6b:47:c3:4d:0d:0d:5e:5f:43:e4:
                    8f:3e:36:42:03:db:df:6a:2b:f0:c5:21:a6:e4:00:
                    9a:13:fa:b0:38:1e:74:ff:00:85:d9:dc:5e:fd:4a:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:10:E5:19:A1:20:24:3C:B3:3A:51:EE:B0:89:34:F9:83:CB:5B
            X509v3 Authority Key Identifier:
                keyid:83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/02E22EFA625611EC964773CA5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:90:ff:7e:41:70:80:8c:ed:c6:1d:b1:71:f2:40:c2:a1:
         41:5f:6c:b8:f6:74:da:12:21:06:7c:bb:85:25:b1:61:b3:d3:
         fc:b5:68:e2:30:32:8c:23:3e:3f:ce:be:61:ae:67:77:bb:89:
         a0:4b:8f:3f:02:bd:84:53:a3:a1:79:de:e4:b3:2d:a5:d8:40:
         4f:01:88:91:36:1e:92:77:8c:a3:d7:d0:70:a3:a2:29:f6:03:
         cc:9c:1e:b3:69:b7:e0:ee:81:87:4f:10:ca:d9:36:3e:28:8d:
         90:ee:d9:68:10:ac:36:05:78:c0:99:49:16:b0:41:f4:6c:15:
         e1:af:4e:96:e1:5a:3e:d1:e8:26:4d:92:13:81:50:cf:f6:f0:
         52:f6:6d:87:04:d8:97:83:37:99:b8:10:88:37:36:98:7e:20:
         11:e4:26:ef:8c:85:90:72:d7:e8:2f:9a:f4:08:c3:d6:17:eb:
         a6:d0:65:d6:41:f0:5e:64:03:4f:61:58:f3:d4:8f:d0:3d:98:
         08:04:11:79:b3:51:b4:ce:b2:78:99:60:49:b4:31:de:71:0b:
         ce:eb:0c:22:79:97:0d:15:78:1d:a7:b3:c4:e7:b6:89:32:c2:
         7e:d5:00:4e:b3:b3:4c:f1:28:d4:63:e4:c9:81:50:1f:47:b5:
         11:9d:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:32:45 2024 by rpki-client on console-fra.rpki-client.org