Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5AA767902A6611EC97D49341D8A014CE.roa
File:                     5AA767902A6611EC97D49341D8A014CE.roa (raw, json)
Hash identifier:          rLlT/+PeJZFCuof3lwMdeLTXZci/Jop2GBhRX5lKDzI=
Subject key identifier:   1F:3A:09:4C:A9:FC:EE:DD:A2:A1:C1:5B:1E:5A:66:0C:86:D9:E1:09
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       03DB
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5AA767902A6611EC97D49341D8A014CE.roa
Signing time:             Mon 11 Oct 2021 07:39:24 +0000
ROA not before:           Mon 11 Oct 2021 07:39:20 +0000
ROA not after:            Wed 18 Oct 2028 07:39:20 +0000
asID:                     36916
IP address blocks:        41.180.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Oct 11 07:39:20 2021 GMT
            Not After : Oct 18 07:39:20 2028 GMT
        Subject: CN=6163ea2c-438d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:1d:6c:1f:85:de:07:00:43:eb:89:3a:56:
                    2d:2d:f2:e0:83:b8:40:ae:81:71:71:58:ca:69:c0:
                    2b:a3:e4:ef:a6:d8:1a:18:7f:73:63:aa:ea:0c:c9:
                    0d:c3:6e:a3:d3:cf:d0:83:14:5a:d8:64:e3:ba:32:
                    66:f6:32:01:e6:65:95:aa:33:a4:7a:70:b4:22:d5:
                    97:f0:e0:6d:34:c2:54:9d:eb:ed:ac:a6:04:7d:ca:
                    8e:83:1a:14:d6:69:af:ca:78:fd:ad:8d:9f:5b:18:
                    08:f3:f7:72:57:1f:9d:40:00:5b:78:79:ea:91:ec:
                    cb:d8:e8:a6:1d:2e:57:b7:ad:22:40:b9:21:c1:e2:
                    65:49:ab:f1:e1:5f:21:63:22:c8:2b:99:83:06:1c:
                    b8:f9:52:e8:3b:df:1f:11:50:63:aa:a1:0c:27:e9:
                    3c:1f:1d:bf:6f:4b:28:ea:57:13:ac:52:17:b2:36:
                    04:02:97:00:be:27:d5:e0:4d:da:cf:c1:2e:16:54:
                    4a:dd:d4:d5:3c:85:90:4d:fa:c3:ef:4d:14:9a:7b:
                    73:81:83:4a:bd:05:83:b9:7d:d2:06:87:5c:3b:6f:
                    fa:7b:a0:84:31:dd:70:f6:d9:d2:ee:32:0b:bd:8a:
                    7c:df:f9:ad:fc:da:e7:c3:f5:c2:c1:8f:5f:62:58:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3A:09:4C:A9:FC:EE:DD:A2:A1:C1:5B:1E:5A:66:0C:86:D9:E1:09
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5AA767902A6611EC97D49341D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:5d:1e:db:80:13:c9:d3:e7:0a:07:db:82:60:1e:fb:52:
         0a:cb:74:c1:77:29:d8:c3:45:ec:32:a5:f9:25:67:6b:52:65:
         72:3f:fd:2c:2a:39:34:ee:68:18:65:51:7b:bf:50:7d:55:49:
         a0:4f:03:a9:a2:a7:a9:3f:aa:e4:8b:bb:a4:95:6b:07:88:46:
         31:4e:3b:c0:69:83:ee:12:77:a8:e2:3f:aa:78:2c:de:09:a6:
         e8:c5:24:fa:40:5f:6e:7a:89:c6:69:62:12:8d:40:91:02:08:
         54:34:56:0d:c3:3a:02:25:79:0a:a4:02:8e:0c:e3:68:fe:c4:
         4e:8e:6e:1b:24:53:5f:f9:b8:e1:a6:16:b5:73:c3:02:d0:f8:
         e2:31:f1:8d:cf:0b:ee:00:17:07:e1:f8:af:92:ba:33:5e:95:
         35:46:01:a2:81:bc:a3:01:79:dc:ff:1f:d3:f7:d1:0b:31:9b:
         f5:8d:d5:95:44:18:0b:31:0f:51:1b:e9:d0:bd:fa:20:84:00:
         05:e6:66:c3:e9:82:1f:b2:cc:48:d4:7b:44:bf:14:25:8e:5e:
         06:53:9d:23:ef:a9:c0:ba:b0:81:d2:c5:1c:62:69:42:97:d0:
         ff:c0:b3:c8:b4:f6:11:12:b8:c3:50:57:98:3b:2b:88:ee:6a:
         04:40:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:21 2024 by rpki-client on console-ams.rpki-client.org