Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E6A1462C0BF111EDA5CB7F9FF1222468.roa
File:                     E6A1462C0BF111EDA5CB7F9FF1222468.roa (raw, json)
Hash identifier:          2qes/QNyJ8a8JrjxEIWIg2p0/W6ccmCquX7yzCqsU+8=
Subject key identifier:   05:62:99:FF:6F:0A:B7:2F:B6:E3:97:59:5D:E7:82:68:27:62:DE:1D
Certificate issuer:       /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial:       0566
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E6A1462C0BF111EDA5CB7F9FF1222468.roa
Signing time:             Mon 25 Jul 2022 08:15:10 +0000
ROA not before:           Mon 25 Jul 2022 08:15:07 +0000
ROA not after:            Wed 07 Jul 2032 08:15:07 +0000
asID:                     36916
IP address blocks:        41.180.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
        Validity
            Not Before: Jul 25 08:15:07 2022 GMT
            Not After : Jul  7 08:15:07 2032 GMT
        Subject: CN=62de510e-20f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:e8:c0:78:75:af:24:d4:13:10:c1:79:4a:
                    1b:d8:b2:dd:73:b2:e2:32:88:a3:fa:88:e2:48:cc:
                    32:4e:8a:52:a2:b1:2b:ea:93:eb:27:95:b6:64:a6:
                    45:f3:7f:e8:82:6c:d3:50:b8:0d:64:07:16:55:99:
                    ed:0d:36:15:3c:81:57:c7:3a:5d:fb:5f:55:d4:cb:
                    86:4d:69:91:a0:c5:a3:5c:61:67:20:65:e1:5f:c4:
                    f0:cb:e6:61:36:bd:11:db:7c:a5:bf:4f:39:3b:6a:
                    0e:60:8e:26:76:44:06:5b:5f:fe:03:99:f5:5e:49:
                    1a:a7:93:d5:16:e5:3a:37:78:7a:e0:f0:26:ac:5c:
                    0a:10:53:d8:1b:6f:ce:49:31:c5:d6:d2:67:dc:5f:
                    19:16:39:26:c3:f3:54:0d:2a:8a:bb:3b:54:76:8e:
                    67:aa:0b:ac:bc:e1:70:f7:17:7b:80:6c:b2:06:8b:
                    6f:fe:35:c1:4f:a5:6a:32:9d:66:26:80:59:01:85:
                    de:0a:bc:e4:5c:3a:0c:2f:78:cc:bf:d2:7b:c5:54:
                    a2:0e:5b:b3:df:49:d0:fc:27:de:71:e2:b8:6a:51:
                    d4:46:ea:09:6f:6e:4a:32:11:1c:2b:6f:bb:a0:d3:
                    25:79:c2:5e:7f:e1:5e:a1:d0:05:49:15:5b:0d:3e:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:62:99:FF:6F:0A:B7:2F:B6:E3:97:59:5D:E7:82:68:27:62:DE:1D
            X509v3 Authority Key Identifier:
                keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E6A1462C0BF111EDA5CB7F9FF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.180.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:95:a6:f9:0e:53:ea:84:a1:1d:f4:1d:46:b6:80:f7:3c:71:
         5d:ac:58:d6:23:22:f5:9b:1c:76:34:4c:a8:1a:87:df:1d:c8:
         c5:3e:34:03:24:ff:8a:38:f1:8b:c3:bc:ba:56:36:f5:87:0e:
         f3:09:17:0d:b0:94:52:9a:b3:2b:49:72:05:d4:a9:01:87:4e:
         88:3d:53:93:7a:28:43:39:67:9d:f9:22:05:f8:39:f7:a0:fa:
         65:ce:24:f6:61:90:28:c2:51:b4:2d:16:02:94:b2:1d:9e:95:
         93:92:45:b8:5f:ef:72:a1:27:bc:dc:e2:51:7e:18:22:21:c6:
         57:d9:88:80:cd:57:68:e8:ac:66:fa:0a:41:a3:67:fa:58:1f:
         4a:17:b3:cf:6e:09:a6:71:64:e4:26:0e:68:9f:c9:7e:e2:5a:
         73:78:18:28:1a:f3:a0:7c:d5:53:60:fb:fb:f4:37:60:8d:db:
         3c:d5:cd:c2:cd:c2:f9:fc:4f:7b:74:64:a9:89:1f:28:33:df:
         3a:4e:67:40:59:12:10:da:cd:5a:fa:73:ac:89:f0:b1:bb:ca:
         8c:04:98:7d:30:49:55:b6:fe:d5:53:02:eb:ba:44:42:ec:df:
         e5:02:47:65:d5:73:e0:20:f8:44:f8:70:10:a7:53:dc:ae:b9:
         70:df:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org