Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F135F55416DC11EF8909052E017001B1.roa
File:                     F135F55416DC11EF8909052E017001B1.roa (raw, json)
Hash identifier:          dxbonRwXxySX6gX2G/IFteEtAvtJpeU0Bd0PHAQASgU=
Subject key identifier:   E9:21:57:2E:76:F9:35:E6:5B:43:D9:25:AB:37:C4:8B:7D:A9:C2:31
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       0633
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F135F55416DC11EF8909052E017001B1.roa
Signing time:             Mon 20 May 2024 19:12:47 +0000
ROA not before:           Mon 20 May 2024 19:12:43 +0000
ROA not after:            Wed 31 May 2034 19:12:43 +0000
asID:                     20011
IP address blocks:        197.91.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: May 20 19:12:43 2024 GMT
            Not After : May 31 19:12:43 2034 GMT
        Subject: CN=664ba0af-2251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:82:57:4a:e4:be:d7:5b:a5:23:49:9f:0e:
                    80:7c:ba:90:94:ee:91:6f:5f:af:99:d3:f7:af:ca:
                    c1:28:67:7e:0b:b8:03:1f:04:3c:d5:1a:8e:4a:1c:
                    eb:6b:b2:5c:57:c5:1c:32:3b:7b:49:b7:f7:8f:70:
                    84:44:e9:c2:45:79:e3:e9:c1:50:85:ad:e8:3a:50:
                    2b:0f:b4:df:b3:21:91:c4:80:e4:68:7b:ad:09:0c:
                    d4:76:41:94:bb:5a:80:ef:39:fd:c3:95:ee:6c:26:
                    b3:43:5e:b6:0e:5b:67:d3:c7:7f:85:c3:de:b2:de:
                    7b:b3:9f:27:da:6f:ce:c7:f6:18:77:9c:62:7a:9d:
                    73:e7:b1:f8:42:83:a0:ef:d1:45:f3:d4:44:17:ba:
                    e8:f9:7d:37:32:17:6d:be:0b:af:86:02:02:ce:a5:
                    8f:79:36:bb:6f:04:2f:b2:52:b5:e9:ed:6f:6d:41:
                    ef:a6:19:51:d7:ae:9b:b9:f1:73:d1:9b:7c:a7:31:
                    37:ba:10:b2:4f:d0:aa:d6:54:da:f7:4c:69:29:56:
                    88:cf:5e:19:6d:5c:dd:7a:32:72:42:b9:c1:29:ca:
                    27:17:83:15:18:ad:79:14:6b:da:00:cc:ff:19:23:
                    48:8b:52:23:e6:14:90:c2:47:63:95:a9:18:85:64:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:57:2E:76:F9:35:E6:5B:43:D9:25:AB:37:C4:8B:7D:A9:C2:31
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F135F55416DC11EF8909052E017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.91.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:3e:a5:09:12:80:82:20:46:83:8e:1f:6e:7e:85:78:74:0c:
         c6:a3:d3:5f:b2:65:fb:9c:93:c6:96:00:0b:2e:89:bd:24:6e:
         b8:74:b9:88:30:5a:59:62:e8:9d:ff:f3:1a:a5:73:af:34:61:
         c7:97:7a:af:16:9f:4d:67:46:ad:78:70:07:69:70:ea:1b:77:
         d5:a9:5d:a7:bd:ac:ef:43:35:5b:2b:cc:e3:ed:23:65:88:9d:
         ca:f2:f6:fb:8c:ee:b3:7b:00:07:11:82:38:b7:3c:91:db:c1:
         57:fe:85:85:6f:55:76:54:d6:64:bd:a4:a7:c4:33:68:03:0b:
         fb:6f:56:2a:8a:7b:2d:5c:03:cd:ba:a0:ff:d3:f8:9b:7f:e9:
         a9:cb:dd:03:62:e3:a7:ed:cf:6a:9e:d2:ea:45:a4:d9:68:27:
         11:11:3f:30:03:7f:15:0e:b1:9c:59:9e:f8:4a:f0:02:a1:71:
         3c:a1:ef:d3:f9:90:f4:5c:28:20:ea:ee:b9:36:c6:d4:c5:4f:
         61:14:8f:ee:c6:33:13:82:6b:d1:26:4b:0d:c6:c1:ee:7f:48:
         ef:ac:14:b8:03:48:84:b9:8f:62:0e:fa:12:3d:5c:a4:7c:14:
         39:e8:38:a8:2f:f6:84:15:12:58:96:50:12:e2:03:fe:61:bb:
         86:6e:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org