Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5953159410DB11EEA692EB254AD9E6FC.roa
File:                     5953159410DB11EEA692EB254AD9E6FC.roa (raw, json)
Hash identifier:          J/90kH8dfMdqY1APj2NOoCO3clk2oSxpHJ2MryQBGHo=
Subject key identifier:   B9:74:4D:7B:D7:78:69:56:F2:29:5F:29:24:C3:4E:15:6B:63:CB:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5953159410DB11EEA692EB254AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 09:01:18 +0000
ROA not before:           Thu 22 Jun 2023 09:01:14 +0000
ROA not after:            Fri 05 Jul 2024 09:01:14 +0000
asID:                     210334
IP address blocks:        154.89.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11602 (0x2d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 09:01:14 2023 GMT
            Not After : Jul  5 09:01:14 2024 GMT
        Subject: CN=64940dde-45ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:02:3d:ef:3c:22:3e:45:48:17:b4:b5:67:
                    09:a8:63:26:2e:62:10:48:a2:cc:2e:e1:41:19:47:
                    fd:71:0a:a8:6d:aa:8a:8e:ad:67:d1:09:34:00:b1:
                    d1:19:c4:a8:7b:cc:af:af:84:7e:d6:36:8a:39:ac:
                    9f:75:33:e0:37:30:7d:44:c7:cb:34:9e:f7:af:ed:
                    62:0f:b7:5d:91:ca:a8:76:7a:99:ae:b8:56:b5:6d:
                    a6:34:24:80:66:6f:fe:64:de:1b:2a:9a:1b:28:97:
                    a5:aa:bd:5a:58:02:82:e1:db:37:f8:43:16:ae:00:
                    84:2a:09:31:b1:96:80:ae:05:78:f8:e6:a1:2d:c3:
                    b5:b7:19:35:7f:ec:7c:a1:32:1f:00:01:98:21:2d:
                    76:d2:22:69:73:00:bb:d8:e9:59:81:2f:61:2f:a3:
                    ee:b9:55:55:20:73:7b:d6:c6:dd:c8:fc:d5:e0:4e:
                    86:1c:70:3d:15:d4:ba:da:24:76:fa:77:9e:f6:f0:
                    62:7c:2a:17:76:fc:12:7c:f5:f2:5f:08:23:7b:06:
                    5b:4a:c7:52:4d:64:47:79:82:99:95:5b:e2:8b:1c:
                    00:82:6a:db:c3:e2:c2:12:44:71:d0:2b:01:2c:a7:
                    ef:c5:f6:47:0e:9b:00:b3:cc:b5:22:1a:0d:e5:c7:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:4D:7B:D7:78:69:56:F2:29:5F:29:24:C3:4E:15:6B:63:CB:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5953159410DB11EEA692EB254AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:ac:cc:91:b2:c5:9d:e9:66:da:b3:1a:e0:c3:2b:9b:34:7f:
         26:fc:28:c7:10:89:0e:b1:5a:b8:39:65:49:49:44:c4:0b:cb:
         3b:03:5e:94:8a:19:c3:58:4b:03:20:f6:87:b8:11:f6:6b:20:
         40:ff:5d:c2:74:5a:ea:08:af:2e:e3:8a:67:de:75:49:8a:f9:
         f3:40:ed:8a:54:60:c1:88:43:36:f3:b7:1e:bc:67:86:b9:c3:
         18:60:6a:64:12:40:38:3a:c7:3c:f5:8b:c0:91:59:3b:e1:c9:
         7b:54:75:a6:89:f6:36:c9:1f:61:89:40:db:71:43:5f:94:4c:
         b0:80:f2:5c:7f:10:d9:06:f4:29:db:38:32:f1:da:73:4e:e0:
         8a:2b:d4:dc:d9:f2:87:8a:34:bd:16:57:d8:63:18:5e:32:26:
         c1:44:16:3a:f2:e7:4b:3a:3c:d0:04:75:0d:10:ba:a9:a4:26:
         7c:e4:4d:a3:8c:6a:45:29:f4:73:93:e3:f6:fb:32:5e:15:4e:
         0f:3b:6c:28:46:dd:ac:35:64:f9:b2:32:4c:2a:3f:6b:c0:d5:
         17:55:92:8a:9a:47:d3:ff:0e:9f:97:7c:a6:fc:86:f7:46:29:
         b5:20:37:0d:3f:ea:ba:45:b9:24:c3:89:04:85:d6:10:f9:4e:
         87:79:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org