Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0AE83752864811EFA7FD1F48762E951A.roa
File:                     0AE83752864811EFA7FD1F48762E951A.roa (raw, json)
Hash identifier:          s91NkPhVZNyfmDKgbRRCmJQz3AsA6ndkzmaQN3AM6ZI=
Subject key identifier:   C8:DA:AA:53:95:6F:56:57:9F:4E:78:1E:45:4D:7B:29:3E:F8:FF:7C
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       06F3
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0AE83752864811EFA7FD1F48762E951A.roa
Signing time:             Wed 09 Oct 2024 14:09:05 +0000
ROA not before:           Wed 09 Oct 2024 14:09:01 +0000
ROA not after:            Sun 09 Oct 2044 14:09:01 +0000
asID:                     20011
IP address blocks:        197.101.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Oct  9 14:09:01 2024 GMT
            Not After : Oct  9 14:09:01 2044 GMT
        Subject: CN=67068e81-e993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:37:1e:e1:1c:a5:ce:31:55:23:0c:82:b1:
                    03:0f:12:a5:4d:05:cd:b1:f3:9a:0f:97:da:32:dd:
                    31:20:87:c6:89:fa:20:e5:f4:47:34:77:88:04:01:
                    ae:c6:f2:23:23:8e:3c:d4:3f:51:06:b1:ae:f7:72:
                    48:eb:64:da:20:4b:0e:25:8b:86:35:df:a2:b4:a7:
                    bb:00:a3:9a:54:b9:ac:a4:c6:99:ab:81:86:21:cd:
                    df:83:c2:d6:64:a7:7f:c7:4c:73:f2:36:8a:10:55:
                    54:98:00:f5:ad:dc:9c:f5:be:ff:cc:b6:97:1f:3c:
                    fe:cb:c1:9d:fb:34:7b:a7:07:e7:8b:94:ba:bb:27:
                    f8:67:03:4e:0d:4e:a4:ec:b7:00:ba:8f:40:9f:05:
                    2e:9f:43:2f:0e:cb:e9:d8:82:f1:6d:0f:4e:44:05:
                    8b:9c:c5:d2:46:30:6e:a7:19:82:a3:82:24:a4:9f:
                    e8:6a:8e:28:71:d4:e6:88:b0:23:e3:f9:ae:46:da:
                    3c:fc:c1:89:42:24:f5:14:6a:57:c3:94:fd:f1:21:
                    b8:06:7a:be:27:ac:dd:83:10:05:f5:ce:78:5d:c9:
                    06:46:c4:ef:19:7d:80:a5:90:1b:5a:40:73:27:ca:
                    78:75:9a:22:0e:5c:e0:c1:0e:66:3b:c3:9f:7a:47:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DA:AA:53:95:6F:56:57:9F:4E:78:1E:45:4D:7B:29:3E:F8:FF:7C
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0AE83752864811EFA7FD1F48762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.101.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:8a:69:cc:55:52:44:1a:1d:c2:eb:9f:27:74:ef:f6:ec:7b:
         9a:bc:fe:53:4d:13:0b:79:75:a9:f0:1f:b4:fc:9d:c8:23:a4:
         d1:0f:d8:a2:81:f3:4d:23:35:4a:01:d4:25:ec:54:da:09:12:
         c8:03:b3:f2:f3:c2:79:d5:0a:54:ce:9b:8a:29:9e:82:4a:0d:
         fb:b6:3d:2d:fc:24:00:fe:28:46:36:be:04:ef:84:cd:9b:af:
         39:42:6d:1a:e9:db:b2:00:a4:9e:d0:b2:30:8a:e4:d7:b4:53:
         a0:57:e4:1e:8a:03:d4:f3:9f:70:6f:b0:32:a3:66:22:b5:44:
         dc:d5:f4:72:b4:68:d1:9e:8a:11:a4:30:c9:9f:80:dd:47:d0:
         a7:fd:a6:1a:ed:16:11:e1:f5:71:22:8a:e7:eb:5a:3c:f2:2f:
         44:03:2a:a3:d8:0e:e2:07:72:44:a3:1e:ed:fb:fd:18:2a:05:
         8e:d3:f9:a4:4a:20:44:78:41:7e:f0:87:47:2d:80:68:92:1b:
         cc:99:d3:81:c6:55:fc:8a:35:c0:16:d2:e2:39:df:dd:b3:47:
         e3:15:30:72:5d:df:7a:36:df:34:b1:18:6b:a3:c6:bd:1e:ec:
         11:d9:bb:dd:b2:c2:71:3f:77:93:31:00:32:79:0b:8a:73:ca:
         4d:36:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org