Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/BE16CC50864611EFA7FCA5BD762E951A.roa
File:                     BE16CC50864611EFA7FCA5BD762E951A.roa (raw, json)
Hash identifier:          n5JSJULjxweXyJK6i34ikECKGCgmE0z0/nm0P07crMc=
Subject key identifier:   13:E9:B3:9B:9B:E2:CC:A2:D3:10:1F:BF:09:D9:E7:23:65:1B:0E:ED
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       06ED
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/BE16CC50864611EFA7FCA5BD762E951A.roa
Signing time:             Wed 09 Oct 2024 13:59:47 +0000
ROA not before:           Wed 09 Oct 2024 13:59:42 +0000
ROA not after:            Sun 09 Oct 2044 13:59:42 +0000
asID:                     20011
IP address blocks:        197.101.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: Oct  9 13:59:42 2024 GMT
            Not After : Oct  9 13:59:42 2044 GMT
        Subject: CN=67068c53-0a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:28:f8:2b:5e:38:e7:7a:28:c8:9e:70:f0:
                    67:48:5c:d3:d9:c9:d4:40:9e:25:f1:8f:7a:26:35:
                    41:7c:d8:f6:9a:49:07:be:37:93:5a:ce:f3:d3:de:
                    40:ef:e3:0f:75:6b:1c:2f:42:81:e9:9d:bf:34:b8:
                    a0:e4:2f:b3:3b:85:15:03:76:10:52:2a:22:9c:02:
                    b9:8b:cc:07:7c:fa:3d:e6:d4:3e:c7:f2:2d:31:f7:
                    82:07:ff:22:8d:10:7e:0a:07:10:70:43:1e:7e:52:
                    37:3e:02:2e:3a:8e:51:62:bb:09:67:f5:5d:ce:bb:
                    44:e0:b0:de:d2:2c:38:60:ed:74:6e:11:01:7a:9a:
                    d1:3e:5c:77:fd:5c:c3:4a:03:57:e5:cd:97:2d:4c:
                    86:68:7d:07:be:76:6c:5e:69:c8:52:c7:f9:ce:0f:
                    bf:aa:14:14:7f:f8:5e:6a:e9:18:e4:c7:18:0f:65:
                    bd:19:61:a2:63:0f:e2:77:82:b7:7c:85:bc:42:77:
                    1a:ee:1d:bb:e3:1d:bf:96:54:c1:eb:32:27:8e:69:
                    b3:91:3a:a5:d1:e0:88:8e:da:f1:ca:8a:a7:20:5d:
                    67:b4:5f:5a:1c:a7:54:ac:03:b9:ab:79:4d:38:18:
                    33:e6:ce:05:40:40:1c:ae:78:07:63:87:b5:aa:ed:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E9:B3:9B:9B:E2:CC:A2:D3:10:1F:BF:09:D9:E7:23:65:1B:0E:ED
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/BE16CC50864611EFA7FCA5BD762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.101.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:f7:5c:82:85:a3:86:46:31:29:bd:6c:0d:b4:a2:8d:2a:
         c2:69:48:fe:b9:4f:87:48:bb:b3:65:bb:28:bc:e3:5d:67:03:
         5b:42:06:8d:d9:7c:82:67:26:f8:e9:a5:ec:af:d9:4a:93:68:
         72:17:29:bd:f3:b5:6c:dc:c1:ef:af:97:54:f1:60:c2:59:0c:
         52:e0:ec:00:45:49:5e:a4:53:01:b8:55:cf:80:90:4e:41:6e:
         83:cb:bb:c7:9a:3a:e5:ac:ec:e4:df:07:43:66:c5:ab:03:2b:
         bf:6d:57:25:0f:e7:4c:21:e8:ad:97:e5:d5:d9:23:45:05:31:
         94:4b:bf:96:73:f3:68:05:77:f7:5d:67:2a:6b:a2:94:da:00:
         fa:b8:a7:ff:15:ac:94:39:1e:49:45:66:34:6b:df:50:37:98:
         f7:b7:e2:45:0c:22:f1:9e:ba:1b:b6:cc:d6:4e:45:c9:0e:d6:
         54:ea:09:e2:63:e3:15:2b:df:c7:ef:3e:aa:85:cf:d1:c7:8e:
         76:dd:e7:c6:9d:56:b6:1a:1c:0b:e1:7f:0e:94:4c:f6:0e:3c:
         67:e1:6a:56:e7:81:d7:15:36:7b:2e:94:21:a5:4b:cc:6a:c5:
         3d:63:04:9b:fb:99:06:d8:d1:cb:07:0f:ef:da:2e:6e:4d:50:
         48:0d:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org