Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B03C5936136B11EF9CB7442D017001B1.roa
File:                     B03C5936136B11EF9CB7442D017001B1.roa (raw, json)
Hash identifier:          8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=
Subject key identifier:   A0:3C:C0:46:A8:29:B8:7C:0E:AB:E9:C8:F2:9D:86:D8:9A:1C:7E:CD
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       04FB
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B03C5936136B11EF9CB7442D017001B1.roa
Signing time:             Thu 16 May 2024 10:04:31 +0000
ROA not before:           Thu 16 May 2024 10:04:28 +0000
ROA not after:            Tue 03 Feb 2026 10:04:28 +0000
asID:                     29684
IP address blocks:        102.177.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Nov 2024 00:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: May 16 10:04:28 2024 GMT
            Not After : Feb  3 10:04:28 2026 GMT
        Subject: CN=6645da2f-b3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:8f:23:5a:e6:53:dc:19:0d:ab:3b:6a:ec:
                    eb:7b:27:d8:d4:e2:07:fd:b9:b4:65:34:c8:43:67:
                    7f:80:3d:58:4e:7c:91:e4:2a:8b:19:11:54:16:9d:
                    8d:97:26:e2:10:0c:3b:b3:78:7c:68:db:24:77:4b:
                    5f:c9:d8:f8:89:bf:c8:7b:76:4d:e1:eb:e0:fc:0d:
                    ed:3d:9c:7f:c3:99:8c:2e:be:0f:72:ad:e9:6c:95:
                    3a:a0:9c:40:67:da:a1:e0:32:94:94:54:81:14:42:
                    b2:24:50:2f:55:b0:c3:7f:bc:ea:62:e3:df:5d:7a:
                    a0:da:7d:4e:eb:79:21:8b:e7:49:2a:e4:7d:ae:d4:
                    2d:20:b6:23:48:6c:eb:42:fa:07:bd:db:46:49:a7:
                    ca:94:77:43:7d:60:2c:ed:53:d1:fa:97:0b:2c:6a:
                    30:bf:07:bf:1f:3e:71:28:63:b0:82:94:61:91:a1:
                    e0:57:ae:a4:f1:af:a1:bc:bb:03:49:04:80:5b:28:
                    d2:a6:9a:02:d1:21:ea:a5:6e:14:37:70:70:98:2d:
                    bb:c3:cb:b5:df:85:3b:34:51:d0:5f:25:d9:fb:15:
                    71:e5:5f:34:46:d3:2a:6e:d6:5e:43:9b:8a:aa:b4:
                    54:29:f6:b7:1c:5e:f6:59:c1:bc:9e:9b:ee:39:04:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3C:C0:46:A8:29:B8:7C:0E:AB:E9:C8:F2:9D:86:D8:9A:1C:7E:CD
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B03C5936136B11EF9CB7442D017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:03:0c:31:bb:2d:88:0c:3f:74:39:ce:d3:58:e5:55:be:29:
         fe:70:84:20:0e:0e:fd:4b:90:a9:e3:0b:5a:27:5b:4f:c3:81:
         94:50:b0:43:ab:01:1d:17:7d:2d:19:62:b5:fa:74:75:b6:76:
         4f:cd:5e:2c:8c:91:1d:49:1e:66:48:e8:fc:93:2b:90:24:45:
         8e:7c:8d:84:1f:6d:92:79:92:e4:69:be:7c:12:f3:8e:74:e7:
         77:cc:28:67:e7:d1:7a:5e:34:7b:51:53:eb:b8:24:04:f5:71:
         57:fb:d8:fd:11:fa:7a:cf:d8:46:0c:54:5d:01:df:37:ce:31:
         cf:a5:89:7e:f4:5b:02:5d:ce:77:3f:40:83:80:8a:91:7e:ff:
         e7:eb:6e:2e:6e:26:73:b7:68:51:c8:22:8b:44:10:0b:cf:2e:
         19:ec:fc:5a:dc:4c:47:74:58:b2:f1:19:75:d4:b6:35:7d:00:
         84:b9:7b:13:4b:e7:e3:b8:51:f1:26:9c:f2:34:d4:d2:90:f0:
         65:33:fb:79:d2:54:c0:df:23:4b:c8:85:02:a1:f2:38:65:ad:
         5f:1c:c6:4e:67:c5:8d:50:39:bc:34:d9:b6:e2:05:a3:ad:30:
         5d:85:58:f7:0b:bf:d3:32:4f:ab:bf:d6:e0:71:c7:ed:4d:81:
         ff:16:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:56:36 2024 by rpki-client on console-ams.rpki-client.org