Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1862346862311EFBA58A563762E951A.roa
File:                     B1862346862311EFBA58A563762E951A.roa (raw, json)
Hash identifier:          +I+4vxJiR11dAhGzqFP2Of2SKuXclWkQYyghm5NmrF4=
Subject key identifier:   05:F8:68:6D:87:91:94:BE:1E:04:AD:0C:9D:0E:CA:8B:BD:7B:3E:94
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1856
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1862346862311EFBA58A563762E951A.roa
Signing time:             Wed 09 Oct 2024 09:48:53 +0000
ROA not before:           Wed 09 Oct 2024 09:48:50 +0000
ROA not after:            Fri 09 Oct 2026 09:48:50 +0000
asID:                     215224
IP address blocks:        154.16.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6230 (0x1856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Oct  9 09:48:50 2024 GMT
            Not After : Oct  9 09:48:50 2026 GMT
        Subject: CN=67065185-4ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:75:00:fa:a1:20:9f:d8:d2:27:48:aa:5d:
                    32:78:19:25:b6:54:6d:33:e5:2e:5c:74:ea:a3:f4:
                    17:e0:a2:af:14:37:04:9c:a6:c5:3f:bf:84:d0:7c:
                    db:66:6b:c5:c6:1d:0a:2d:67:79:6f:d7:27:ac:09:
                    c9:34:fe:94:2a:60:65:e1:5f:31:ee:13:2e:71:76:
                    21:42:59:0d:1e:f9:99:8f:60:d7:76:d1:83:ef:ae:
                    93:9b:81:ee:a6:b7:b4:83:7b:ed:b0:0d:c6:48:48:
                    1a:25:37:b4:88:23:5a:8a:04:d6:0e:d1:05:f2:45:
                    37:15:ef:68:cc:51:3c:ff:6a:cf:45:a1:37:9f:cf:
                    c7:b1:6f:9f:8a:26:35:9c:03:f4:65:a4:3a:e5:aa:
                    eb:3e:8c:82:6c:c4:de:b8:ef:77:d0:70:ef:f4:1d:
                    39:e2:75:44:df:8b:96:1b:ec:1d:51:a2:ab:f0:e6:
                    c8:b9:3b:ef:75:56:78:e7:38:7c:c4:d3:6d:8d:49:
                    dd:dc:13:5b:61:89:95:12:5a:83:5e:cf:8f:e6:ec:
                    94:ab:39:de:6d:df:8d:3b:bb:35:02:87:fb:0c:12:
                    cb:0e:67:53:ab:8a:67:5d:7b:b8:0d:e3:21:a6:1b:
                    ec:38:bb:c1:c3:64:97:d1:4c:fb:dd:be:f6:31:ac:
                    11:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:68:6D:87:91:94:BE:1E:04:AD:0C:9D:0E:CA:8B:BD:7B:3E:94
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B1862346862311EFBA58A563762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:54:2e:2e:3d:5f:ec:f9:ae:87:84:0c:66:db:55:fa:5e:b0:
         fc:9a:91:57:03:39:51:df:68:a6:b7:52:df:a5:12:76:64:8e:
         47:b8:b8:97:48:8a:eb:e1:81:71:bd:6c:44:aa:3f:14:5f:4d:
         5d:29:8f:8a:fd:db:cd:66:99:60:06:72:de:3e:dd:cb:67:23:
         2e:7e:2d:bd:e9:1f:9f:73:be:ac:e8:d4:84:c5:0d:75:99:11:
         92:95:e5:64:9f:1e:92:18:d2:a8:68:78:22:33:e5:cb:f4:39:
         38:31:96:2d:2c:bb:fc:12:16:ce:a9:9b:6b:5a:be:e7:76:d3:
         d9:99:1d:10:0a:f6:59:92:dc:28:38:c9:b0:ac:28:ce:f5:e1:
         05:a5:23:f0:f0:c8:d7:f1:f0:3e:3f:86:5f:04:a8:aa:79:ca:
         d4:a2:53:aa:97:9f:f4:e6:9d:fc:ed:b6:7e:33:35:95:dc:4f:
         af:25:34:c9:55:5d:a7:c8:37:c7:e8:6b:bf:90:95:48:07:8e:
         6b:cb:f9:3c:27:fd:cf:b9:5b:c8:6e:40:9c:cc:3b:94:76:53:
         30:18:bd:3e:7d:c8:d9:cf:f4:c3:47:74:47:c6:50:4c:63:1b:
         00:3c:17:f1:fe:45:3a:74:18:2f:5f:fe:82:f5:94:be:c8:48:
         c6:a4:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:33 2024 by rpki-client on console-fra.rpki-client.org