Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15F31B6A71BA11EE84E3CD594AD9E6FC.roa
File:                     15F31B6A71BA11EE84E3CD594AD9E6FC.roa (raw, json)
Hash identifier:          Yzs0RtZvKg2QegNHnd+mQjpP3OAA2VxL7gtpEpbuguw=
Subject key identifier:   07:4D:93:D3:F9:C4:F9:AA:50:B0:D2:39:81:F3:3A:0D:9B:31:73:6E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       46ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15F31B6A71BA11EE84E3CD594AD9E6FC.roa
Signing time:             Mon 23 Oct 2023 15:37:34 +0000
ROA not before:           Mon 23 Oct 2023 15:37:31 +0000
ROA not after:            Thu 17 Oct 2024 15:37:31 +0000
asID:                     137443
IP address blocks:        154.91.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18157 (0x46ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 23 15:37:31 2023 GMT
            Not After : Oct 17 15:37:31 2024 GMT
        Subject: CN=6536933e-aba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:41:e0:5b:21:67:74:a4:c0:6a:9d:35:56:
                    b4:1b:c1:c8:4e:f8:26:f8:71:0a:03:2c:31:6f:c1:
                    22:3d:38:d2:2e:86:ab:fc:9e:bd:22:92:47:a5:c1:
                    21:bd:f1:0c:6a:13:f5:9d:44:53:53:04:46:bb:4d:
                    f5:70:88:44:1e:f7:a2:f3:f3:ad:08:93:83:69:f3:
                    20:6d:b8:02:46:2b:95:44:c0:34:f4:73:95:f1:5b:
                    41:d0:11:ae:bf:83:02:bc:69:d3:f2:3d:55:b4:9a:
                    66:c2:d5:e9:02:cc:b1:e8:ff:b7:c1:c5:65:3a:81:
                    95:16:72:90:a4:c8:cf:a2:ca:8d:19:b2:e8:8e:d5:
                    96:0c:da:77:b7:7c:13:34:38:4e:f0:f8:e6:16:3c:
                    32:75:0b:5a:8f:c2:b4:fc:9b:21:6c:23:05:da:f5:
                    eb:1d:6f:17:88:e7:31:f8:ed:cf:ed:b6:47:4d:67:
                    a3:61:76:b0:af:57:8e:8b:8c:0d:24:66:cc:82:ec:
                    bf:70:dc:23:18:50:4b:dd:bc:26:e5:9b:4b:18:4a:
                    11:cf:af:8c:51:d6:5a:6a:70:20:8c:23:be:83:16:
                    98:33:e3:d0:be:ad:f0:8c:a2:6c:f5:93:b7:b2:17:
                    59:b0:f2:2f:9c:1a:17:7d:97:6a:c1:ba:fd:f5:31:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4D:93:D3:F9:C4:F9:AA:50:B0:D2:39:81:F3:3A:0D:9B:31:73:6E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15F31B6A71BA11EE84E3CD594AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:84:00:aa:67:95:d9:1a:85:d2:3c:0d:50:38:65:2a:9c:ab:
         f3:54:24:57:6c:19:52:28:2e:72:3e:ad:06:3d:59:50:81:23:
         88:50:38:ff:ec:91:9a:d1:bd:47:76:59:f8:9b:cd:4c:71:4a:
         8d:81:4b:5f:e8:4c:bf:c0:07:57:63:8e:e2:3a:f3:1d:69:61:
         37:3f:58:fe:b5:55:ac:f8:e9:41:d0:e4:10:03:a3:c1:f8:f4:
         79:94:89:a5:65:de:f0:ad:f7:c0:56:19:53:06:a4:fa:57:5a:
         79:60:dc:a3:c3:65:94:34:aa:e5:42:b3:e9:46:81:3d:a0:34:
         14:58:a5:f0:26:9a:ca:f8:8a:96:a3:94:f4:00:e4:79:5e:d9:
         06:90:bb:ca:2f:3b:05:8f:e9:a3:d5:aa:b3:9a:ad:3a:46:5e:
         6e:d7:c8:a1:f2:6c:13:ba:8d:81:45:3e:3f:a7:11:14:22:86:
         5a:b9:cf:bb:94:33:66:8d:25:89:11:68:69:29:a5:a4:53:3d:
         f8:c0:28:18:aa:e5:b8:62:3d:fc:b5:d9:f3:cb:e6:93:c3:ca:
         8d:a7:66:4c:d9:4c:d6:a3:4b:d5:9d:b5:50:ed:90:6f:e6:7e:
         db:b0:07:d1:a8:2d:8f:e7:63:7d:a5:7d:99:37:be:a3:44:c3:
         87:39:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:58 2024 by rpki-client on console-ams.rpki-client.org