Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/811BAB76644611EFA6F0A47C762E951A.roa
File:                     811BAB76644611EFA6F0A47C762E951A.roa (raw, json)
Hash identifier:          Yi3eBx1O5hcVSQGJCfOSHrVnnSFlO6i7tc8Ao45KqAc=
Subject key identifier:   50:10:E9:12:BE:2E:7B:3A:A7:11:E4:EC:5B:39:9D:A9:C9:FB:2A:52
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       17BA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/811BAB76644611EFA6F0A47C762E951A.roa
Signing time:             Tue 27 Aug 2024 07:32:25 +0000
ROA not before:           Tue 27 Aug 2024 07:32:20 +0000
ROA not after:            Thu 27 Aug 2026 07:32:20 +0000
asID:                     5065
IP address blocks:        154.16.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 08:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6074 (0x17ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Aug 27 07:32:20 2024 GMT
            Not After : Aug 27 07:32:20 2026 GMT
        Subject: CN=66cd8109-20cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:2e:cc:a5:3b:59:77:d0:a4:00:74:7f:99:
                    f6:3a:07:3e:49:73:df:5e:80:99:4e:15:35:0c:04:
                    31:f8:66:a3:2c:23:64:0a:dd:b5:50:80:a4:da:b7:
                    98:54:9d:98:12:20:51:fa:7a:de:b7:66:c0:9d:3c:
                    82:86:b3:c5:34:75:00:c7:c1:65:55:52:c0:e0:1f:
                    61:b0:a9:2f:dc:b0:44:05:1f:3f:f3:fc:7f:7e:b8:
                    0f:16:da:a3:53:de:40:0c:68:82:c6:46:5a:2d:a7:
                    ee:03:07:d9:e6:c7:43:b5:c2:06:b0:69:4c:30:a2:
                    16:af:20:aa:02:46:05:2e:4f:1a:a7:ca:60:00:99:
                    78:bc:d2:19:7e:65:95:e6:24:2c:c0:15:41:1e:a2:
                    ba:25:4a:15:4a:58:b9:ae:cb:1a:c6:5c:b6:15:6b:
                    cf:37:32:7f:15:e6:27:0a:b6:b2:1f:b6:39:53:d2:
                    d3:cb:99:93:b2:a7:b0:a3:09:41:41:8d:52:cd:db:
                    33:a1:cb:7b:ad:87:f6:32:5b:6a:4d:cd:d5:cd:e6:
                    17:cf:32:94:10:20:a6:be:b9:70:dc:d6:e4:af:9c:
                    02:f6:d9:63:5d:f4:c0:3e:0e:36:c7:7c:79:64:7f:
                    11:9b:9e:7e:23:b5:63:73:19:db:97:3e:ce:89:cc:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:E9:12:BE:2E:7B:3A:A7:11:E4:EC:5B:39:9D:A9:C9:FB:2A:52
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/811BAB76644611EFA6F0A47C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6d:19:9f:29:fd:66:6c:70:41:76:22:eb:58:96:e3:96:2a:
         59:5c:fb:27:57:a5:21:7b:e8:4b:e6:7f:ff:72:3d:ab:5f:a7:
         a2:88:5d:02:9b:1b:78:14:8e:66:82:ae:31:f7:f8:2f:2a:ee:
         10:33:48:06:c1:f9:14:08:97:94:48:e3:8d:fd:be:85:a2:e4:
         20:13:f6:a5:e9:2e:bf:a8:6a:2a:ac:63:43:24:87:a7:b8:87:
         78:8e:c0:27:05:4b:b6:f6:5a:b2:52:e5:c7:8f:4e:a9:d0:30:
         8e:e7:b5:d1:2d:94:d7:43:76:b5:82:57:30:49:3c:23:ba:a9:
         b5:29:e5:74:c1:89:75:45:35:58:db:34:b4:d3:be:21:7c:b6:
         f3:bb:e4:87:85:2e:a6:c2:f4:42:66:96:7f:9b:86:23:0c:b2:
         d7:34:bf:0e:02:ef:9e:da:c4:80:42:ed:f1:1b:02:1b:e9:da:
         b8:9e:b8:7d:45:c7:86:1b:ce:47:84:72:b8:af:b2:43:2c:e7:
         8b:70:67:82:9a:0a:d5:cb:04:84:6f:c3:58:85:a5:53:9e:b2:
         66:65:07:1f:2b:a5:19:18:17:ef:26:cd:b2:c0:43:34:55:76:
         23:7d:54:94:eb:15:16:a9:1d:17:5b:11:c5:f0:14:e2:60:16:
         7c:02:69:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:27 2024 by rpki-client on console-ams.rpki-client.org