Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1248F642864511EF8BF3CEB1762E951A.roa
File:                     1248F642864511EF8BF3CEB1762E951A.roa (raw, json)
Hash identifier:          UHuhZozqS8TZtjrSbbpDuruzwIr2M6P5wDcbIl1Bxa0=
Subject key identifier:   57:CF:0D:94:8F:A3:7D:E9:93:70:E9:A2:D2:E4:8A:69:1A:EA:16:8F
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       06E3
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1248F642864511EF8BF3CEB1762E951A.roa
Signing time:             Wed 09 Oct 2024 13:47:49 +0000
ROA not before:           Wed 09 Oct 2024 13:47:45 +0000
ROA not after:            Sun 09 Oct 2044 13:47:45 +0000
asID:                     20011
IP address blocks:        197.101.162.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Oct  9 13:47:45 2024 GMT
            Not After : Oct  9 13:47:45 2044 GMT
        Subject: CN=67068985-8cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:cf:9c:c0:1a:a3:19:2a:94:2f:dd:66:2d:
                    cb:f6:5d:6c:5f:39:76:4a:31:ec:44:16:6c:91:21:
                    86:9d:40:c3:3f:22:4b:39:00:37:71:92:06:89:95:
                    b4:a8:3b:91:a6:30:71:ca:ce:d3:91:70:7d:81:15:
                    e5:8e:94:58:92:4d:38:bf:74:62:7c:fe:5b:a7:c0:
                    7b:3b:9f:16:fe:5d:bd:ed:f7:77:f8:3a:d7:e5:65:
                    11:0e:1b:dd:42:a9:0d:f5:9e:c7:39:61:cd:2f:fc:
                    0e:40:70:1b:83:db:3f:97:6b:cb:79:68:3b:fd:ab:
                    24:89:b0:63:01:f6:25:c7:c0:ec:13:25:a2:2f:96:
                    d9:ba:66:89:2b:f6:92:a6:80:03:38:be:41:f0:bf:
                    11:32:62:87:5a:e9:7c:92:34:37:a0:ca:99:2b:bc:
                    bd:61:48:19:69:5c:50:7b:6d:f9:4c:b4:64:d1:dc:
                    de:7d:fb:ec:e9:f4:47:1d:b2:d3:72:83:84:32:50:
                    fc:b0:18:08:bf:8a:e5:12:8e:58:1e:7c:2a:1e:04:
                    ef:15:5e:94:dc:01:e0:b3:1c:33:d3:6b:ed:3d:6e:
                    25:21:7c:d1:a3:11:37:25:3d:f5:05:59:92:28:ce:
                    93:42:81:31:b5:1e:20:f4:5e:13:75:e6:e0:27:40:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CF:0D:94:8F:A3:7D:E9:93:70:E9:A2:D2:E4:8A:69:1A:EA:16:8F
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/1248F642864511EF8BF3CEB1762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.101.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:05:5d:1c:a8:f2:e1:e4:f1:e6:96:9f:20:1b:de:70:d1:55:
         02:bb:be:10:24:dc:17:6f:32:f9:6c:7e:dd:cc:03:4b:2d:47:
         ad:52:f2:ce:aa:83:49:e1:fb:f3:63:66:81:0f:32:67:b2:18:
         89:a8:69:e5:a5:3b:a0:6f:5d:21:16:d5:83:16:26:ba:a7:5d:
         3c:b2:4e:7f:3c:e5:d4:bd:04:ff:24:af:7c:c5:12:94:76:68:
         8c:89:5c:fa:e2:a7:64:8a:0e:ed:c2:d8:1a:be:50:8e:71:22:
         60:f9:e1:3d:8f:b8:61:86:10:ac:6c:3f:b6:c5:18:9f:35:02:
         9f:66:01:76:84:b9:1e:ea:ae:01:6e:00:8d:7e:8e:3a:2f:8d:
         55:9c:b1:84:ea:65:4d:36:a7:d1:77:fb:96:4d:52:f8:08:54:
         d4:3f:9e:20:85:b6:65:4d:a6:e2:47:86:b8:27:a7:f7:8b:cf:
         58:9d:91:c8:df:79:d6:04:fd:09:17:0a:bf:2a:9b:78:02:c8:
         b7:5f:71:b1:73:cf:1e:f7:89:e8:e2:c3:5b:b6:b5:cf:85:0f:
         73:54:44:c8:af:1a:72:5b:00:7d:3d:24:f1:08:57:06:02:bb:
         2a:95:39:ef:2b:1f:07:5c:79:f4:10:f0:07:65:59:17:92:e8:
         a8:41:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org