Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/DE53055A2E1311EFAE851899762E951A.roa
File:                     DE53055A2E1311EFAE851899762E951A.roa (raw, json)
Hash identifier:          UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=
Subject key identifier:   17:6A:58:78:D1:1B:4E:D5:FB:A4:46:52:C3:4D:3E:1C:5A:B8:64:FA
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       038E
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/DE53055A2E1311EFAE851899762E951A.roa
Signing time:             Wed 19 Jun 2024 08:13:54 +0000
ROA not before:           Wed 19 Jun 2024 08:13:51 +0000
ROA not after:            Thu 10 Jun 2049 08:13:51 +0000
asID:                     328020
IP address blocks:        156.155.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Jun 19 08:13:51 2024 GMT
            Not After : Jun 10 08:13:51 2049 GMT
        Subject: CN=66729342-354f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:2a:09:88:19:0e:5e:87:3f:42:df:11:54:
                    9b:7f:18:6e:90:ba:fe:b9:5b:2a:7b:00:e2:f8:7b:
                    79:95:87:8a:97:28:35:04:60:72:f4:82:15:bb:8c:
                    d7:be:21:60:89:63:c0:cb:33:7d:96:9e:7c:c5:3b:
                    b5:df:a3:34:4e:78:36:02:99:3e:41:4d:14:1d:d3:
                    ac:c9:49:4a:1d:8f:e1:24:a0:b4:eb:69:5e:76:ff:
                    0c:74:43:bd:06:83:91:5e:9b:02:84:ab:d2:46:30:
                    cd:45:87:f6:41:3e:9d:37:9c:dd:c9:06:14:62:e1:
                    b3:9a:65:86:e9:47:9f:af:66:05:1e:40:4c:5b:19:
                    2b:6f:1e:5e:cb:6f:f7:5b:6e:b0:bd:8e:de:8a:ab:
                    0e:49:28:99:00:16:6c:0d:73:02:3a:f7:81:67:69:
                    bf:a9:31:47:55:b0:64:a0:95:a7:89:77:07:c8:ff:
                    11:4c:64:06:b1:b4:f0:20:12:24:ce:8b:cf:de:8f:
                    56:15:56:82:17:60:25:cc:92:82:af:52:6a:9e:fe:
                    21:19:20:06:5f:49:e6:53:26:3e:cf:64:44:63:4e:
                    cc:a0:81:f5:3e:ca:f3:c8:07:7e:ea:59:f3:43:ec:
                    15:f8:80:08:0e:98:14:64:c3:c4:5d:90:a5:84:bf:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:58:78:D1:1B:4E:D5:FB:A4:46:52:C3:4D:3E:1C:5A:B8:64:FA
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/DE53055A2E1311EFAE851899762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.155.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:bf:2c:d3:0c:e6:1d:26:4d:d8:6e:99:45:98:f0:71:cc:
         f2:fb:22:95:60:ab:71:fd:3c:55:aa:f4:4f:af:e3:27:8d:4b:
         99:fe:7e:ea:c3:b0:3c:d6:78:02:2a:26:d9:a2:86:bf:af:e5:
         84:91:a1:c0:a1:06:82:17:65:8b:99:a2:52:5d:0f:97:ef:09:
         77:16:fc:b1:2d:b7:90:db:f6:53:6f:d6:0e:93:b6:86:5c:ef:
         45:69:53:f8:a8:f0:43:98:ff:6e:fb:cf:17:74:00:6d:bf:e1:
         39:f0:f5:29:f3:69:a2:90:ad:74:2c:be:86:02:5e:9f:90:3f:
         5c:f9:20:65:99:97:e0:16:57:0e:00:80:48:d4:c3:9d:0b:41:
         01:63:02:d3:df:58:6a:d5:66:28:65:b3:31:dc:13:ca:33:04:
         f3:e5:96:85:55:a0:7c:1b:76:8d:6c:04:4b:bc:30:1d:c5:4d:
         9e:90:11:50:61:8c:5b:3d:0b:5e:29:c3:26:24:f6:74:7a:ad:
         9c:3b:a5:c4:da:cc:7a:9c:65:41:7b:63:b5:3e:24:c1:a7:06:
         cf:c0:36:11:fc:ad:41:66:0c:8e:53:c2:5a:ca:22:a0:54:e4:
         c3:0f:b5:4b:92:27:6d:fd:19:a9:34:12:d0:97:d7:54:aa:ae:
         4f:23:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org