Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BEA0EEB6F3B411EC9C097396F1222468.roa
File:                     BEA0EEB6F3B411EC9C097396F1222468.roa (raw, json)
Hash identifier:          ANaq6V06z1VaYdFQT4k1ASWmgkUgJTDrarPCKEP+iQQ=
Subject key identifier:   4E:CB:C8:51:01:49:C4:D3:EC:E5:2E:EB:EA:24:CB:22:CC:A3:11:F4
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       04EF
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BEA0EEB6F3B411EC9C097396F1222468.roa
Signing time:             Fri 24 Jun 2022 11:56:56 +0000
ROA not before:           Fri 24 Jun 2022 11:56:52 +0000
ROA not after:            Wed 12 Jun 2030 11:56:52 +0000
asID:                     36916
IP address blocks:        41.180.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jun 24 11:56:52 2022 GMT
            Not After : Jun 12 11:56:52 2030 GMT
        Subject: CN=62b5a688-63f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:98:bb:7d:b4:0f:3f:73:89:1c:b7:4e:2a:
                    da:c7:ec:5c:95:bd:65:73:72:53:e1:7e:3f:94:2c:
                    59:94:8b:38:b7:63:55:d6:1b:b5:94:b1:5d:f9:d8:
                    39:1a:39:fc:b5:2a:a1:85:79:b0:7a:63:a6:ef:1f:
                    81:c9:c0:3b:49:86:fc:12:eb:10:3c:4c:26:7a:5b:
                    71:bc:b8:ec:0d:02:8e:fe:d4:5c:91:a5:a7:fc:c8:
                    d0:8a:f0:4f:5a:05:98:55:61:a7:25:a1:64:74:dd:
                    69:f8:f6:f0:5e:6f:d7:1c:3e:77:79:aa:01:b4:e3:
                    ad:74:2c:98:ef:6a:04:d3:9a:54:33:a8:c2:d3:ed:
                    5a:20:e9:1d:d3:40:99:82:5d:e2:b7:c3:11:4a:41:
                    f8:9f:a3:5a:03:12:bc:19:91:cd:fa:77:15:25:9b:
                    81:da:d3:c6:48:8a:1b:8f:bc:fe:bf:72:80:db:61:
                    0b:3f:5a:57:8e:0d:85:aa:31:63:ce:df:e0:98:57:
                    53:22:4a:e0:58:e6:b7:1c:33:b3:2c:11:95:f4:1d:
                    f2:fc:be:a1:b5:30:b3:32:33:71:16:1f:72:c3:83:
                    8a:1c:64:6e:ba:47:1b:67:e2:e3:79:f7:35:3e:f8:
                    fc:ba:c6:b9:42:86:5b:3d:99:4c:37:d3:d1:c7:bd:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CB:C8:51:01:49:C4:D3:EC:E5:2E:EB:EA:24:CB:22:CC:A3:11:F4
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/BEA0EEB6F3B411EC9C097396F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:48:ca:7c:4d:02:a1:9a:a6:41:86:82:94:00:46:ee:4f:f6:
         6e:d8:62:a7:bf:9f:9a:4d:f0:c7:06:69:3e:b2:3d:87:d4:35:
         82:c6:93:cb:42:9b:49:0f:cf:a7:dc:aa:a5:32:86:98:bc:a9:
         93:45:f5:72:bc:fa:78:6a:73:86:6f:af:c8:94:25:cf:c4:d5:
         61:4b:7b:67:6f:e4:d4:bc:c4:1c:19:c3:84:d0:f8:8f:c2:fa:
         48:ca:35:0f:aa:14:fc:d9:68:df:a4:71:6a:39:a2:2e:d6:38:
         45:d0:a8:6b:76:fd:72:dd:64:1a:40:5e:20:e0:40:43:83:27:
         93:58:12:a5:94:20:d4:e5:8a:28:fd:09:0c:c9:12:5a:84:10:
         57:6c:95:5e:30:0e:11:38:34:47:c0:72:3b:66:0a:58:f3:36:
         dc:59:42:48:7b:cf:ad:05:a4:ad:44:01:b0:e0:71:fb:54:1d:
         26:88:a5:3b:a2:10:a8:a4:f9:f1:37:0b:eb:14:6a:1e:d3:30:
         83:b1:06:9a:ce:c1:68:14:46:a1:83:12:d4:60:df:a9:66:35:
         c6:46:a6:cd:7e:f3:c7:0c:c2:36:dc:cc:97:09:8d:07:71:58:
         2d:be:e3:51:0b:a0:33:bc:36:34:e8:f8:f5:8e:18:08:ff:6e:
         3a:5d:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org