Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B79C23610DC11EE9962ED284AD9E6FC.roa
File:                     5B79C23610DC11EE9962ED284AD9E6FC.roa (raw, json)
Hash identifier:          E332PyoiCc23ar8USAG1mRIUhCnlgmzWLwN1lcUT8E4=
Subject key identifier:   7A:51:CA:50:F5:35:BD:1F:24:1F:7E:33:CA:9E:CE:DA:98:E7:B9:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B79C23610DC11EE9962ED284AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 09:08:31 +0000
ROA not before:           Thu 22 Jun 2023 09:08:27 +0000
ROA not after:            Fri 05 Jul 2024 09:08:27 +0000
asID:                     210334
IP address blocks:        154.89.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11618 (0x2d62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 09:08:27 2023 GMT
            Not After : Jul  5 09:08:27 2024 GMT
        Subject: CN=64940f8f-9d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:5d:2f:9d:8b:2b:64:f1:d2:6d:b0:25:1c:
                    50:4c:15:86:1c:9c:7b:6b:2c:81:89:df:16:b7:1c:
                    dd:95:ee:e5:ba:0c:d0:81:4b:52:e3:a5:d1:03:80:
                    49:45:3c:18:a5:5b:8d:12:79:30:ec:83:fb:37:1a:
                    7d:00:fa:df:27:e1:8b:8b:af:a1:18:2d:4d:86:ed:
                    7c:87:0f:39:a5:5a:bd:6f:c7:1d:3b:1c:bc:4d:99:
                    a6:14:1f:54:6a:44:f3:95:14:7e:ff:07:7a:08:d4:
                    0c:d0:ea:5f:2a:f0:07:e9:dd:27:07:d1:98:d6:39:
                    6c:9e:77:76:1a:b6:8f:dc:bc:12:6b:99:56:ed:2c:
                    5b:36:91:2b:cb:72:33:83:75:c7:ed:2c:e5:e9:e7:
                    33:92:6e:48:bb:1f:48:89:7b:e4:c1:c6:0b:1c:af:
                    ff:40:c0:c2:47:05:a6:09:47:3c:a0:7e:09:05:6c:
                    87:79:b1:3e:00:6c:97:4d:f6:1f:60:5b:97:1c:b0:
                    08:e3:43:8c:c7:5d:ca:f8:fd:cc:ef:f9:3b:6e:1e:
                    f7:14:72:85:de:13:88:f9:ac:d7:7d:7d:85:0f:48:
                    36:90:32:db:71:d8:fc:53:76:7c:cf:6d:ae:fd:f2:
                    38:1e:70:d3:7b:9d:0f:2f:23:10:45:95:0b:0a:82:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:51:CA:50:F5:35:BD:1F:24:1F:7E:33:CA:9E:CE:DA:98:E7:B9:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B79C23610DC11EE9962ED284AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b7:af:d2:eb:f1:45:bb:35:3c:10:cf:39:9f:5b:d4:85:64:
         a6:90:e4:8c:2c:2b:07:28:2c:25:89:c3:51:72:49:de:d6:0b:
         c8:eb:e3:9d:db:77:bd:c8:25:a7:f6:76:ea:aa:7e:0f:e5:ae:
         f9:0f:95:4f:14:5c:f1:f2:84:cf:90:f9:be:67:6d:43:2d:b9:
         12:8c:83:ae:8a:fe:49:e6:f5:e1:4a:fe:bb:5a:f0:75:79:a7:
         2e:dc:06:23:bd:8d:2b:55:d5:e1:5e:eb:ac:1b:36:f2:d9:31:
         ef:3c:7d:cf:50:81:20:a2:1f:66:e0:c2:31:b7:56:0a:47:b9:
         2b:bf:af:be:af:e7:a9:74:e4:d3:3a:06:e9:44:d6:35:34:75:
         45:a8:4b:97:47:f7:75:f4:da:1c:2b:52:e8:d1:95:70:60:6e:
         7e:c4:fc:33:e3:60:da:31:5d:5e:13:0e:a1:c6:e5:f4:f6:5b:
         7d:7d:6c:cd:da:3d:12:64:78:cd:0b:08:4f:21:be:90:c3:cb:
         49:de:6a:4d:34:90:ba:a5:70:b8:e9:6e:7c:50:d0:1d:d0:81:
         ca:63:4e:91:c7:50:bc:d3:89:ed:b5:80:3c:89:09:e0:b6:a6:
         e0:22:d7:86:d3:69:47:41:07:4d:17:70:40:13:fe:bd:18:72:
         a9:65:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org