Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FC726EC9E1711EEBAE8BB2FD25BE465.roa
File:                     2FC726EC9E1711EEBAE8BB2FD25BE465.roa (raw, json)
Hash identifier:          54nmOgGbVyTECofvjcBhI+OA4EBR+UF0fbABn94PRzg=
Subject key identifier:   59:D2:05:10:59:15:36:6C:AD:E8:D7:3C:92:F1:D4:5B:52:97:EF:13
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       62D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FC726EC9E1711EEBAE8BB2FD25BE465.roa
Signing time:             Tue 19 Dec 2023 02:34:52 +0000
ROA not before:           Tue 19 Dec 2023 02:34:48 +0000
ROA not after:            Thu 20 Jun 2024 02:34:48 +0000
asID:                     4755
IP address blocks:        154.81.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25298 (0x62d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 19 02:34:48 2023 GMT
            Not After : Jun 20 02:34:48 2024 GMT
        Subject: CN=6581014c-341e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:c5:c1:17:1b:56:d3:57:7b:29:14:e3:f3:
                    40:b3:7d:8d:c1:43:3a:67:69:24:05:77:82:8c:57:
                    80:8a:c0:0d:c4:67:c0:b0:97:dd:80:c9:14:d9:a7:
                    70:fb:95:e5:80:83:dd:9a:8c:d9:88:a9:22:38:aa:
                    ca:49:61:70:47:75:de:fb:fa:03:f5:66:d0:eb:b7:
                    f3:46:a2:3c:de:12:bf:fb:1b:88:20:fe:1b:1d:00:
                    ed:8f:9b:36:87:97:6a:f1:1d:c7:ad:72:42:04:02:
                    5c:a3:e0:82:61:08:f4:45:33:ef:83:4b:0f:64:37:
                    fb:04:4d:59:2a:5b:52:51:e4:0c:71:5c:6b:19:a8:
                    9b:9e:e7:d9:6e:94:c0:d0:33:69:ad:1e:cb:7c:c9:
                    1f:e8:22:a0:25:8b:5a:9f:8d:75:21:ac:a6:ac:d9:
                    30:30:72:a6:50:b2:6e:25:c2:ad:5d:51:26:51:51:
                    a2:a2:ad:6f:f4:0e:d0:12:49:71:d9:e9:0f:fb:df:
                    88:b0:d3:68:5b:6d:72:62:1e:bb:dc:9b:10:15:de:
                    23:a0:de:b4:9d:fc:e4:52:b5:1f:37:fe:e1:99:16:
                    df:9e:83:64:77:ee:9f:33:29:3c:41:ed:41:06:31:
                    32:26:c2:6b:45:06:4b:b4:b5:ee:36:43:a1:9b:d1:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D2:05:10:59:15:36:6C:AD:E8:D7:3C:92:F1:D4:5B:52:97:EF:13
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FC726EC9E1711EEBAE8BB2FD25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:fb:bb:d8:3a:2e:f8:7f:41:3d:90:78:01:b1:88:64:4f:
         55:d5:3a:a3:88:2a:a9:01:4e:12:f7:57:e5:a6:4b:19:dc:ab:
         e0:9c:65:43:1c:78:fe:2b:75:fd:32:02:39:f9:6a:69:16:88:
         67:c5:93:b3:a4:15:86:5b:5e:7d:47:dd:14:6f:f9:4e:71:46:
         2a:be:ec:8d:bd:77:6d:0b:00:30:dd:ba:b4:54:84:0b:5a:67:
         b8:81:43:20:f7:ec:7c:7b:03:65:d3:99:07:6a:ec:d4:b0:1a:
         67:1a:9e:82:60:4c:76:99:55:c8:ae:04:ec:4a:07:26:ae:28:
         83:1b:7e:2a:09:be:a7:e3:43:5d:05:f2:bb:ba:7d:b4:14:b3:
         25:50:17:b2:e3:3d:b1:b5:f4:d9:d3:1f:ec:52:32:b9:cc:03:
         bd:d1:70:50:94:30:52:af:9a:35:55:df:89:64:fa:a9:d3:7f:
         79:02:13:2f:bf:1d:76:04:89:a7:af:45:39:80:34:02:94:1c:
         df:3e:15:90:9a:56:55:26:50:2f:ca:6a:c3:16:ff:9d:5e:6f:
         84:89:b4:9e:54:cd:62:73:53:17:95:29:a6:01:79:5c:4d:d6:
         b6:d9:2d:34:c4:98:ad:98:1c:1f:83:da:f3:88:24:68:66:36:
         c6:4c:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org