Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/6C2A4CA6BCD611EB9603860DF8AEA228.roa
File:                     6C2A4CA6BCD611EB9603860DF8AEA228.roa (raw, json)
Hash identifier:          F+5YPW33ClDRWj2VM4gXhC8NzAN2EaqFG0BwHxJ6tHY=
Subject key identifier:   97:AC:FE:8A:AF:52:EC:B6:B0:20:DB:B0:21:F1:93:58:C4:BF:32:98
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       016B
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/6C2A4CA6BCD611EB9603860DF8AEA228.roa
Signing time:             Mon 24 May 2021 21:24:29 +0000
ROA not before:           Mon 24 May 2021 21:24:21 +0000
ROA not after:            Fri 24 May 2041 21:24:21 +0000
asID:                     3741
IP address blocks:        2c0f:ff40::/26 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: May 24 21:24:21 2021 GMT
            Not After : May 24 21:24:21 2041 GMT
        Subject: CN=60ac198d-3887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:42:29:26:26:e2:29:0c:79:a7:1d:29:e6:
                    92:76:f0:48:a8:46:60:84:32:fb:24:0c:9c:ae:e2:
                    3e:ea:9e:39:e5:14:b9:3d:73:a7:46:45:fc:b1:6d:
                    63:fe:0a:6f:f2:5a:f9:68:d4:bd:c7:c2:f3:4d:88:
                    25:f5:d5:4a:51:61:7d:69:dd:b8:92:3b:10:f7:d6:
                    c6:26:47:02:e9:7f:08:9b:39:85:f1:01:94:aa:ea:
                    21:d5:11:cf:69:37:e2:5b:6b:16:37:22:0c:e4:14:
                    15:4d:08:cf:0b:7b:62:8f:91:a6:6e:f1:09:de:2c:
                    3e:3e:64:a0:e2:17:cc:06:3b:7e:62:e7:c7:7f:09:
                    a7:79:5f:2e:7a:d7:e0:46:fc:1e:98:ed:a9:e6:fe:
                    bd:9f:24:23:9e:52:97:94:fa:14:13:30:08:9e:2f:
                    75:b6:ef:fa:2a:84:33:cd:a0:05:8f:1b:77:35:1a:
                    ba:44:3f:4b:e9:34:c1:74:0b:6d:27:17:6c:b0:e2:
                    14:10:d3:87:f3:54:e2:22:8c:9d:1a:51:dd:72:83:
                    fb:a2:5a:14:d7:00:40:16:09:1c:c2:26:80:1b:50:
                    24:a7:9d:af:34:e0:ef:52:8a:c7:bf:88:f0:00:ba:
                    34:57:24:bb:a0:ff:cc:a1:de:a2:7c:82:51:58:ef:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AC:FE:8A:AF:52:EC:B6:B0:20:DB:B0:21:F1:93:58:C4:BF:32:98
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/6C2A4CA6BCD611EB9603860DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ff40::/26

    Signature Algorithm: sha256WithRSAEncryption
         d2:1b:34:fa:53:67:f9:4b:d2:d1:a4:b5:7f:07:8c:6a:b2:21:
         b5:e2:b4:14:dc:0e:d0:7e:34:ef:02:18:f7:bb:77:82:19:4f:
         72:40:4a:ad:18:e9:f5:55:50:76:cb:a7:55:35:41:39:6b:12:
         9f:2e:fd:f6:9f:9e:96:e0:f0:76:4c:3a:65:93:46:ca:17:67:
         1e:f9:b3:9f:36:68:7a:3b:f8:e1:8f:fa:7c:32:cc:da:92:92:
         81:c5:25:8b:e3:d7:d9:66:6c:50:44:9e:bc:c6:78:07:22:9f:
         6b:96:39:19:aa:33:eb:ca:93:2e:41:19:ed:c9:c0:35:9e:e3:
         e4:e4:55:96:90:48:ec:a3:46:7a:32:f3:de:e9:f9:b4:3e:05:
         4f:0e:10:76:e3:c0:33:f7:cc:77:f6:c5:7d:bd:4f:95:b8:82:
         05:8b:88:0b:96:ad:f7:a6:7c:ca:45:a7:25:ed:cb:8e:e4:9a:
         61:4a:c9:c3:5e:ac:5a:ce:74:ac:ac:99:a4:a8:ae:85:84:66:
         59:50:2e:a9:30:00:c2:bf:96:a3:c3:59:98:23:1f:53:c0:56:
         3e:8a:ad:40:3c:c9:cd:e6:4e:1d:f1:0c:8e:7a:99:52:d4:3e:
         13:53:44:1c:3c:11:79:9e:43:ca:6a:ab:df:b7:19:20:d2:01:
         e8:4b:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:31 2024 by rpki-client on console-fra.rpki-client.org