Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/F59C135AD57111EE98F3334E775412E6.roa
File:                     F59C135AD57111EE98F3334E775412E6.roa (raw, json)
Hash identifier:          DlLkA76T6/DZ7xEc77ZbObEHLYWet3TzWSKSqOWWlnU=
Subject key identifier:   37:4C:E2:90:6C:BD:16:DF:09:08:BD:23:F3:67:E3:C2:B5:E4:E4:18
Certificate issuer:       /CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
Certificate serial:       E7
Authority key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/F59C135AD57111EE98F3334E775412E6.roa
Signing time:             Tue 27 Feb 2024 13:13:12 +0000
ROA not before:           Tue 27 Feb 2024 13:13:09 +0000
ROA not after:            Thu 27 Feb 2048 13:13:09 +0000
asID:                     37697
IP address blocks:        102.210.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
        Validity
            Not Before: Feb 27 13:13:09 2024 GMT
            Not After : Feb 27 13:13:09 2048 GMT
        Subject: CN=65dddfe8-0820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:67:df:0d:e5:a5:4e:8e:64:9d:2d:d4:b3:
                    dc:7d:2d:f0:b9:62:4c:4a:e6:d4:b9:b3:4f:a6:fe:
                    a7:d4:3e:50:ee:56:b0:de:c7:90:f3:b6:10:b6:d9:
                    48:09:4b:c3:da:6a:71:53:4d:6d:99:ea:c4:56:dc:
                    9e:27:ee:0b:0e:dc:10:98:95:bd:d4:d0:62:bd:da:
                    58:b0:e3:2b:f0:4a:81:dd:39:76:bc:d5:4d:f1:6a:
                    85:ec:09:ec:9c:b2:c0:20:38:de:e5:9d:0f:92:52:
                    cd:b9:ec:15:40:6e:11:74:fa:eb:47:fe:7e:eb:2b:
                    7c:23:20:c7:60:01:a2:c0:29:1e:38:4b:07:ca:84:
                    55:26:52:6c:0e:23:00:2d:37:14:2d:ec:25:d0:4f:
                    f1:30:78:7b:08:5f:90:94:7a:36:71:1f:ab:f3:1f:
                    12:d3:f1:17:36:82:1b:e5:b9:da:5a:30:ec:a3:7d:
                    81:66:e5:6c:c4:81:a9:c8:68:f9:24:48:cb:93:8c:
                    4b:9e:5d:21:27:e6:f4:24:0c:e4:4b:48:37:2a:50:
                    7b:6b:32:ee:c8:06:ed:19:9f:cf:bb:25:4c:65:ce:
                    0d:6c:17:6f:ea:0c:f5:3f:a9:44:7d:65:dc:37:12:
                    ab:81:91:bd:05:c7:9b:a7:c0:b5:e2:c2:d3:b9:37:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:E2:90:6C:BD:16:DF:09:08:BD:23:F3:67:E3:C2:B5:E4:E4:18
            X509v3 Authority Key Identifier:
                keyid:92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/F59C135AD57111EE98F3334E775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:66:a8:51:e5:b7:cd:e7:f5:92:f2:93:b4:25:68:9f:d3:
         7d:4a:c0:10:2f:16:fb:49:8f:32:95:47:e2:6d:92:ee:1f:76:
         d1:e8:b2:fd:26:f6:a1:46:66:44:6a:9f:bb:cd:c4:bc:c5:97:
         6d:25:d2:16:99:3c:e0:a7:6d:f0:f5:96:bc:f2:f8:3b:f5:95:
         74:68:09:de:f6:71:1e:29:0a:93:1f:b3:71:1c:cc:c9:22:e3:
         9d:d5:ff:a2:63:9c:11:0f:a7:e1:27:77:79:18:ab:d4:0f:da:
         6b:85:7e:77:35:71:19:8f:23:bd:ea:fa:f4:19:f9:b7:62:d3:
         23:da:b1:d3:71:2a:f0:2c:e5:4e:9f:4f:d9:de:ef:e7:ea:20:
         bd:ca:b6:8b:c5:d8:04:48:51:7a:40:e5:5e:fe:fa:06:54:a7:
         f6:ff:a0:e3:a1:63:72:cf:28:2b:d1:e6:8a:f1:05:19:f9:2d:
         e1:46:f7:3d:27:72:d2:b7:92:23:37:40:06:e9:8f:c2:f6:8a:
         5e:86:01:6f:bb:35:f4:c1:d1:93:2a:c6:e4:c4:d0:95:f5:b4:
         f8:75:71:7d:41:39:94:14:5a:7f:e1:79:40:3a:58:39:23:4c:
         d1:1c:55:a4:67:aa:0f:36:14:12:4e:4c:d3:f7:e4:a1:44:7e:
         de:af:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org