Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5099B592061311EF9987866E017001B1.roa
File:                     5099B592061311EF9987866E017001B1.roa (raw, json)
Hash identifier:          VyrE8P6S71pxOjByjbAIOrKOyQdd7N3acxli0LONpZA=
Subject key identifier:   B7:28:15:33:3F:AE:2F:DB:8A:FF:43:5E:65:0C:F2:E1:E5:1C:CA:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       B252
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5099B592061311EF9987866E017001B1.roa
Signing time:             Mon 29 Apr 2024 10:29:10 +0000
ROA not before:           Mon 29 Apr 2024 10:29:06 +0000
ROA not after:            Fri 07 Jun 2024 10:29:06 +0000
asID:                     138915
IP address blocks:        154.223.74.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45650 (0xb252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 29 10:29:06 2024 GMT
            Not After : Jun  7 10:29:06 2024 GMT
        Subject: CN=662f7676-b2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:ab:77:bd:a6:4e:57:c2:21:2d:c8:7b:6e:
                    1b:0d:8e:89:a0:23:7c:ea:6a:5a:a1:32:ba:e2:cc:
                    56:9e:a5:7b:d0:79:85:57:de:d2:46:54:59:67:db:
                    5d:49:8d:0d:d6:ac:05:b6:f1:fe:90:14:e3:84:50:
                    a6:ff:49:76:89:5e:e7:ad:d8:d4:f4:76:f0:a2:9c:
                    a7:83:3c:48:fa:37:a0:90:24:f6:16:7c:53:65:d2:
                    88:a9:29:74:be:05:d0:b8:58:47:70:b1:a2:3a:31:
                    13:cb:53:ee:1b:64:32:3c:de:65:14:d9:dc:3c:0a:
                    93:67:f3:78:92:86:05:22:55:60:3e:17:ea:00:a0:
                    2e:e5:80:cc:74:c4:36:91:fa:7a:08:68:01:18:dd:
                    4a:ce:9b:30:e5:27:19:45:8c:a7:c4:13:4e:ad:f5:
                    31:b4:ec:46:7d:60:57:c7:1b:8f:f0:f0:a8:0a:14:
                    27:9c:80:33:1f:bc:bd:49:39:22:19:a7:05:f7:fc:
                    cf:0d:44:83:66:32:79:c5:83:8f:dc:e0:ce:95:46:
                    a0:90:32:f7:87:54:79:bc:6a:66:13:93:e6:f6:6f:
                    38:b2:4d:50:02:c7:4f:5c:28:d9:39:28:7e:d2:5a:
                    0d:4d:22:06:c1:8f:77:4f:37:dc:94:c6:2b:e9:cb:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:15:33:3F:AE:2F:DB:8A:FF:43:5E:65:0C:F2:E1:E5:1C:CA:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5099B592061311EF9987866E017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:84:c6:07:f9:40:06:7f:e9:dc:96:03:c1:0e:44:1e:99:
         58:7b:f6:be:2e:40:4b:a5:fb:a0:63:9f:e1:3c:c1:14:a1:53:
         5d:5e:9e:4d:af:6f:a8:93:aa:1c:24:7b:5e:5c:00:8b:c3:39:
         02:7b:37:1a:15:9a:cb:a7:e7:71:b7:16:50:d3:2b:7d:1d:59:
         fb:4c:7a:4b:8c:b0:7a:3e:68:1c:d1:1b:0c:e1:aa:a5:94:79:
         c7:0d:40:e1:ad:7f:cc:b3:6a:19:b3:48:3f:b3:f3:12:9c:1d:
         9a:02:b7:4b:7a:18:e8:12:23:bd:f8:d0:63:94:e3:21:c0:c5:
         8b:28:99:1c:d5:08:d0:1b:aa:3e:53:1e:0c:ed:32:14:81:32:
         13:42:42:46:62:77:a3:00:65:20:19:03:f1:19:1c:8e:85:61:
         0d:9b:59:7b:fb:62:ab:cb:a4:de:7f:13:3c:56:63:4f:c8:2b:
         1f:e3:8c:ef:f8:e8:95:c7:bc:89:50:13:d7:57:11:24:95:78:
         dd:4b:fc:48:d9:ae:5d:63:30:3a:f3:fd:2a:2f:df:10:33:91:
         44:b5:8b:34:79:f2:fa:57:ba:0d:a3:65:6c:4c:8c:3f:28:7f:
         48:50:65:b9:a0:83:9c:c2:29:1d:0d:63:9b:83:ad:a2:85:e4:
         44:33:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:46 2024 by rpki-client on console-ams.rpki-client.org