Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/50BAC5EEF3B811ECA8997FA1F1222468.roa
File:                     50BAC5EEF3B811ECA8997FA1F1222468.roa (raw, json)
Hash identifier:          h84bha7Y5NrrOsUQn14ycqJXs06aFIbMb8TABGnsbyA=
Subject key identifier:   8D:0B:63:15:76:B5:AE:F9:E9:B0:97:CC:72:47:BA:58:92:79:1D:14
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       04FD
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/50BAC5EEF3B811ECA8997FA1F1222468.roa
Signing time:             Fri 24 Jun 2022 12:22:30 +0000
ROA not before:           Fri 24 Jun 2022 12:22:26 +0000
ROA not after:            Wed 12 Jun 2030 12:22:26 +0000
asID:                     36916
IP address blocks:        41.180.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jun 24 12:22:26 2022 GMT
            Not After : Jun 12 12:22:26 2030 GMT
        Subject: CN=62b5ac85-c41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:af:6a:77:51:32:ef:83:9a:ce:e7:75:97:
                    cc:8b:6d:db:e1:44:53:8c:98:3a:cb:9a:e7:3a:e2:
                    0e:a8:f1:ce:55:32:55:ec:ae:74:3c:79:69:e5:99:
                    b4:12:83:dd:fa:16:7d:0d:f4:e9:8b:c8:0e:9d:5b:
                    f2:6c:c2:59:b6:d5:17:e7:8c:96:a4:76:63:e3:c0:
                    ce:fd:04:de:ec:29:c4:57:57:a0:3a:ea:af:87:ee:
                    a5:d1:39:d6:7f:90:2b:c9:5a:e1:59:e5:73:7b:4f:
                    c2:e2:88:6a:a7:c6:48:af:c3:b8:a8:3d:c1:19:34:
                    5c:fe:e8:2b:13:2c:0e:ac:80:5c:30:ad:31:4e:ca:
                    f3:08:f0:76:55:c6:42:6d:98:df:6f:36:1a:fc:9d:
                    c1:26:08:2f:90:28:7f:be:08:f6:3e:4d:ea:de:6c:
                    e6:97:5f:b3:2a:40:8a:8a:d4:25:63:a6:18:fe:02:
                    80:a1:9e:4e:00:36:06:ad:77:20:39:ca:63:a5:b1:
                    89:ac:db:46:1f:06:c9:24:90:a3:77:3e:d6:40:7a:
                    00:e9:88:34:f7:73:80:fb:d6:62:b6:05:a3:28:98:
                    63:5f:54:5e:04:de:ee:bb:70:76:89:90:2e:e8:d7:
                    f9:0a:5a:ca:22:ec:e1:6a:53:35:a8:0a:f7:64:29:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0B:63:15:76:B5:AE:F9:E9:B0:97:CC:72:47:BA:58:92:79:1D:14
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/50BAC5EEF3B811ECA8997FA1F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:26:0f:d8:c6:f5:bc:71:04:ef:68:68:20:a4:c1:cd:a5:
         14:37:3e:7b:97:93:8a:29:7b:84:52:c3:62:fd:b2:f9:58:a4:
         90:3a:56:00:c7:2d:f3:e7:c7:0e:c2:14:8a:dc:73:7f:9d:9a:
         37:b6:f8:32:56:1f:fd:6d:74:c0:8e:9d:92:90:41:a5:23:33:
         ca:1d:7d:95:de:ec:44:67:93:3c:f1:e5:86:06:5c:f3:05:4e:
         69:e4:84:50:df:16:5a:22:a3:a8:44:71:a8:96:92:c2:7e:e2:
         72:63:54:94:36:03:58:de:43:c8:e6:75:70:18:7a:21:89:83:
         ab:db:44:28:75:dc:74:ff:d2:c8:2a:f9:e2:17:f6:56:c9:2e:
         27:d9:7f:cf:67:7f:2f:b1:5e:71:38:ca:18:11:ef:bb:6f:99:
         05:eb:06:82:87:43:8c:d2:c5:a1:fa:78:88:ff:fd:cd:29:f0:
         98:1d:b8:c8:3c:53:1e:ad:8c:c2:37:a9:80:67:a8:8c:55:24:
         4f:bf:5e:93:17:8e:ab:bc:5e:9f:64:d5:7f:ac:b6:47:35:5a:
         27:63:e5:50:a7:c8:1b:fc:d2:13:2d:f7:a1:3f:e3:9b:a7:66:
         41:2e:ce:f8:7b:5d:8b:a0:d4:87:14:6b:be:44:db:a7:b6:ad:
         26:2c:57:7e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMjA2MjQxMjIyMjZaFw0zMDA2MTIxMjIyMjZaMBgxFjAU
BgNVBAMMDTYyYjVhYzg1LWM0MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxqq9qd1Ey74Oazud1l8yLbdvhRFOMmDrLmuc64g6o8c5VMlXsrnQ8eWnl
mbQSg936Fn0N9OmLyA6dW/Jswlm21RfnjJakdmPjwM79BN7sKcRXV6A66q+H7qXR
OdZ/kCvJWuFZ5XN7T8LiiGqnxkivw7ioPcEZNFz+6CsTLA6sgFwwrTFOyvMI8HZV
xkJtmN9vNhr8ncEmCC+QKH++CPY+TerebOaXX7MqQIqK1CVjphj+AoChnk4ANgat
dyA5ymOlsYms20YfBskkkKN3PtZAegDpiDT3c4D71mK2BaMomGNfVF4E3u67cHaJ
kC7o1/kKWsoi7OFqUzWoCvdkKR5pAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjQtj
FXa1rvnpsJfMcke6WJJ5HRQwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4LzUwQkFDNUVFRjNCODExRUNBODk5N0ZBMUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMptCAwDQYJKoZIhvcNAQEL
BQADggEBAFa6Jg/YxvW8cQTvaGggpMHNpRQ3PnuXk4ope4RSw2L9svlYpJA6VgDH
LfPnxw7CFIrcc3+dmje2+DJWH/1tdMCOnZKQQaUjM8odfZXe7ERnkzzx5YYGXPMF
TmnkhFDfFloio6hEcaiWksJ+4nJjVJQ2A1jeQ8jmdXAYeiGJg6vbRCh13HT/0sgq
+eIX9lbJLifZf89nfy+xXnE4yhgR77tvmQXrBoKHQ4zSxaH6eIj//c0p8JgduMg8
Ux6tjMI3qYBnqIxVJE+/XpMXjqu8Xp9k1X+stkc1Widj5VCnyBv80hMt96E/45un
ZkEuzvh7XYug1IcUa75E26e2rSYsV34=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org