Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/2454757CD05011EBAB0F2062F8AEA228.roa
File:                     2454757CD05011EBAB0F2062F8AEA228.roa (raw, json)
Hash identifier:          tubRlzsnsdiEG0ytfF7J8JHB6jLNO49SjtfStBJwfbg=
Subject key identifier:   1B:4D:D1:9D:F4:D6:CE:11:8F:EF:76:C5:81:92:B8:9B:38:8B:29:A0
Certificate issuer:       /CN=F367C1FCAR/serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
Certificate serial:       0175
Authority key identifier: 4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/2454757CD05011EBAB0F2062F8AEA228.roa
Signing time:             Fri 18 Jun 2021 16:13:39 +0000
ROA not before:           Fri 18 Jun 2021 16:13:24 +0000
ROA not after:            Wed 18 Jun 2025 16:13:24 +0000
asID:                     328160
IP address blocks:        160.119.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
                          rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C1FCAR/serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
        Validity
            Not Before: Jun 18 16:13:24 2021 GMT
            Not After : Jun 18 16:13:24 2025 GMT
        Subject: CN=60ccc633-b129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:a2:81:20:9f:e9:15:04:c4:95:ce:b5:4c:
                    51:36:e4:34:85:b5:2f:9f:71:a7:79:83:19:ea:41:
                    48:b0:5e:61:ad:ce:46:03:ce:88:75:b8:ae:3e:c3:
                    03:fa:13:be:d4:80:ef:4e:24:fb:e5:36:6d:9e:c1:
                    48:1e:1d:9b:25:58:ac:f5:6c:8b:91:84:c7:b5:ca:
                    f6:bb:5c:ce:91:e1:b5:d1:88:e0:63:06:eb:f6:a6:
                    65:e8:45:b9:af:ea:31:00:44:3e:95:83:f6:4b:ab:
                    83:fd:9d:a2:95:b6:a4:06:4a:91:21:b8:4f:96:54:
                    ff:ee:77:e0:22:5f:85:5f:b8:f8:e6:6f:3f:eb:f0:
                    25:94:2b:57:a4:20:e4:c0:ed:1a:10:77:e9:aa:5d:
                    9f:0a:f8:fb:4a:0b:07:b7:8b:35:86:fe:2e:1b:8e:
                    15:f8:72:f5:9b:51:ba:27:cf:c0:c5:89:0d:ef:80:
                    0e:57:ec:76:b8:60:51:27:7b:98:86:e5:cd:6c:1b:
                    5c:63:f4:ff:79:64:b9:bc:d0:9f:d5:d1:21:2c:30:
                    da:41:d8:73:28:16:82:ca:c2:af:f5:11:0e:3a:0d:
                    1f:1c:9d:ba:ff:3d:c1:57:c0:bb:62:e1:91:74:ab:
                    2a:b8:61:b4:87:bb:06:f6:57:34:64:3f:24:53:5f:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:D1:9D:F4:D6:CE:11:8F:EF:76:C5:81:92:B8:9B:38:8B:29:A0
            X509v3 Authority Key Identifier:
                keyid:4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/2454757CD05011EBAB0F2062F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:58:d5:da:95:6e:6f:09:42:c1:cf:89:24:51:fb:e1:bf:42:
         1a:da:4f:1e:5b:86:31:65:f1:42:2a:8b:fc:60:2e:b6:9e:81:
         96:29:67:35:c1:77:c2:aa:43:ce:4a:53:e5:fd:4f:5b:a8:47:
         c2:5b:77:55:3c:22:47:58:ea:21:62:a0:23:eb:82:7b:de:37:
         20:25:ef:1f:7e:bc:9e:43:20:bb:9c:c5:43:51:44:79:f4:93:
         97:55:08:0e:fc:f2:26:d1:66:14:b0:e0:06:61:59:b4:17:f2:
         ac:a4:e8:74:dd:0a:1a:e0:b7:4c:1c:e1:69:a6:de:95:80:df:
         02:68:71:37:3e:f4:97:37:d6:51:99:06:d1:c9:c7:57:d5:c0:
         a8:af:01:c3:29:b7:2a:b9:49:67:81:07:23:d5:af:fb:96:71:
         bb:a6:62:7c:93:a8:02:f6:8c:81:af:e9:4e:b7:a1:6d:62:e8:
         9f:3a:73:5b:03:44:45:65:03:28:56:ed:5c:12:03:44:31:22:
         12:a9:a9:c0:93:25:1f:d4:6d:c5:3a:fc:9c:dd:b8:a6:4d:01:
         43:40:da:18:e1:7a:c0:91:1d:42:0d:5f:c4:64:86:d2:7b:0a:
         90:7d:00:bf:d4:55:d3:d3:30:f7:aa:c7:a1:fc:16:ba:75:55:
         9c:f3:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:52:47 2024 by rpki-client on console-ams.rpki-client.org