Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/049A345E0BF211EDAF09D39FF1222468.roa
File:                     049A345E0BF211EDAF09D39FF1222468.roa (raw, json)
Hash identifier:          y8fDUyH3ieVgtxFaudIe3hpBaJ1snI09cUw4gDRceOg=
Subject key identifier:   99:3F:7C:82:88:4E:63:5B:74:AF:BE:1C:DB:D8:3D:B2:5A:2E:9F:5F
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0568
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/049A345E0BF211EDAF09D39FF1222468.roa
Signing time:             Mon 25 Jul 2022 08:16:01 +0000
ROA not before:           Mon 25 Jul 2022 08:15:57 +0000
ROA not after:            Wed 07 Jul 2032 08:15:57 +0000
asID:                     36916
IP address blocks:        41.180.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 25 08:15:57 2022 GMT
            Not After : Jul  7 08:15:57 2032 GMT
        Subject: CN=62de5140-a949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:19:1b:da:4b:60:10:2b:63:88:71:11:56:
                    3e:34:0d:46:38:bd:1b:d2:9b:dc:da:1b:e7:6a:66:
                    17:40:f5:17:4f:ae:40:cc:75:29:dd:0c:02:e1:1e:
                    7d:4f:d8:45:98:a8:b2:b3:9d:66:14:99:ce:b2:cd:
                    52:03:41:dc:2c:db:aa:f3:fc:6c:a0:00:ae:79:e1:
                    a5:0f:4e:b2:34:5c:b5:ec:98:7e:15:fb:69:2e:01:
                    03:5c:bf:59:70:6b:15:eb:c8:ec:ae:71:cc:d0:2c:
                    e1:d5:3e:86:b3:99:61:ba:4f:81:42:ee:85:57:6b:
                    97:74:76:c8:f3:d9:39:3f:46:ba:f8:d7:6a:63:0b:
                    62:e4:d0:3f:01:16:f8:17:76:7a:fb:dd:4c:03:33:
                    2b:c5:03:b8:17:4e:9a:1a:6d:d2:0d:da:69:92:e8:
                    cb:3c:41:86:0a:19:0f:7f:30:55:36:d6:14:98:8b:
                    52:ea:da:a3:9f:b4:cc:46:36:5d:be:1e:e0:b4:38:
                    91:0b:56:7a:1e:35:23:37:51:17:e4:6a:fb:49:3e:
                    0b:f2:7f:b4:7f:9f:3c:39:d9:f5:81:62:a0:cb:03:
                    76:8e:8b:22:ef:4f:05:57:ee:ad:8a:68:f5:e2:d2:
                    85:44:e6:da:56:82:d7:00:8d:6c:23:96:7c:58:50:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:7C:82:88:4E:63:5B:74:AF:BE:1C:DB:D8:3D:B2:5A:2E:9F:5F
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/049A345E0BF211EDAF09D39FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:0c:27:3b:d5:ca:44:49:33:31:ef:1e:82:bd:e5:6e:ad:
         65:e3:38:50:fd:5f:8f:07:55:e1:da:fb:fb:a6:28:11:f1:73:
         5d:95:92:e4:d2:95:27:44:4c:27:d3:b8:27:01:e8:c9:49:b2:
         b0:16:4e:57:d0:47:11:50:08:1e:3f:ab:03:28:55:83:f9:9b:
         ce:48:e7:bb:c5:3f:be:85:9e:0f:87:e1:0d:d4:d3:31:8b:e1:
         9a:40:28:b2:ff:15:86:c9:60:4b:52:b4:5b:22:92:f9:03:10:
         e9:6a:62:53:1b:af:17:f5:e0:b0:68:17:07:07:bf:5d:0b:18:
         57:a3:1c:e0:09:95:e2:53:59:fe:28:09:df:59:3f:e4:c6:c5:
         ab:03:77:18:32:18:7f:e4:ac:d2:78:e5:b8:ae:91:b3:aa:c9:
         33:16:f7:c7:42:da:a6:ae:5b:87:94:c5:30:63:43:a4:76:5d:
         62:b9:45:90:03:bd:3e:08:4f:56:a2:44:b0:4d:56:09:2b:5a:
         af:e7:99:e6:48:91:cc:70:b3:6c:96:b6:dd:28:04:09:9c:4d:
         ef:a2:f3:5f:72:79:01:31:3e:08:55:92:4a:1c:1d:be:50:bd:
         e0:bf:df:16:4c:a8:b8:9f:d1:f5:05:c2:37:04:3f:4b:1c:3f:
         3c:d5:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org