Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66817B98E5C411EEB186527B775412E6.roa
File:                     66817B98E5C411EEB186527B775412E6.roa (raw, json)
Hash identifier:          TobPaosEvzG93MvsiEZwm97NysAJIsCfKOccgNlOGyY=
Subject key identifier:   2E:C0:06:EA:90:97:B2:EB:2C:C0:6C:15:1C:EB:E1:E6:4C:15:D8:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A306
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66817B98E5C411EEB186527B775412E6.roa
Signing time:             Tue 19 Mar 2024 07:43:39 +0000
ROA not before:           Tue 19 Mar 2024 07:43:36 +0000
ROA not after:            Tue 30 Apr 2024 07:43:36 +0000
asID:                     63139
IP address blocks:        154.94.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 07:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41734 (0xa306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 19 07:43:36 2024 GMT
            Not After : Apr 30 07:43:36 2024 GMT
        Subject: CN=65f9422b-45a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:df:35:23:1f:f5:43:15:bf:18:4a:69:9e:
                    72:0e:85:cf:52:a0:9a:a1:50:aa:1d:58:99:f2:18:
                    53:96:29:7b:eb:73:1b:cc:66:39:34:61:b5:aa:4e:
                    d3:02:a1:b2:0b:63:3a:19:31:62:13:8b:56:5f:eb:
                    f5:df:5a:f5:53:cf:34:c6:76:73:b6:cf:6f:46:1e:
                    50:97:a7:18:5b:33:30:b4:7a:e2:75:25:8f:7a:e5:
                    47:05:3f:e7:1b:cf:1b:87:85:95:df:d5:7d:f0:6d:
                    3d:1b:f7:70:9e:d5:dc:05:9d:6b:db:5d:18:2a:ee:
                    d1:05:74:6a:94:e4:85:73:61:c1:a4:c7:83:ac:db:
                    40:fc:9f:7c:a4:b3:c4:31:a4:4c:bf:a9:ec:a2:a1:
                    8a:5f:75:76:eb:f8:5b:31:2c:e9:d7:57:0e:e3:20:
                    40:b1:35:fc:9f:da:d0:ee:20:ba:fd:da:cc:3b:ee:
                    2e:3b:8c:2b:6b:0c:8c:5e:a1:70:f4:43:be:15:86:
                    0c:2a:21:2e:53:fd:99:e8:a9:bf:65:da:cb:cc:c5:
                    85:e4:97:bc:b8:2e:80:ff:8a:5e:7c:68:8b:e5:b8:
                    8f:b2:53:b0:57:7b:18:75:ad:1b:e7:4d:cb:7c:d5:
                    2f:eb:9a:63:87:09:d1:28:07:42:cd:62:40:17:6f:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C0:06:EA:90:97:B2:EB:2C:C0:6C:15:1C:EB:E1:E6:4C:15:D8:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66817B98E5C411EEB186527B775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:7a:5a:f5:6e:ae:30:d6:a2:18:c8:8a:8f:01:51:e7:dc:
         9d:b4:54:64:ab:54:57:db:2f:e7:b3:a1:15:0c:56:14:8d:7d:
         0d:1c:15:fa:81:8e:92:5b:5e:20:49:17:a8:e5:51:91:d7:04:
         f2:ad:d7:f4:f4:a0:48:36:bd:ba:83:fb:15:e9:b0:f4:4b:22:
         04:e8:20:26:17:86:ed:eb:9c:48:af:0b:63:f1:88:fe:cb:31:
         87:a8:ff:99:9f:d5:c0:65:cc:24:33:31:a8:08:31:3c:91:dd:
         7f:eb:78:cd:c8:5a:00:bd:cd:b8:73:e7:0a:da:97:f7:f2:a4:
         b0:19:6e:33:8e:d8:4f:58:e4:0d:4f:af:a4:e4:84:42:a0:22:
         ee:aa:2d:e8:04:cd:34:3a:93:9b:d7:5a:d3:29:00:3c:ec:bb:
         1d:24:b5:00:67:b7:1b:2d:b6:41:a4:fb:d7:7f:51:80:fe:06:
         b1:f6:e2:71:8c:ca:3b:d0:e6:91:29:87:fb:75:6f:19:92:5c:
         8b:1b:e5:4a:87:9b:43:5d:91:cc:6a:b1:43:69:9a:c1:49:50:
         b4:c8:fc:88:7a:0e:c0:20:81:c1:61:af:9a:ab:0c:ee:10:c5:
         af:e9:ea:03:60:cf:88:19:ae:08:ea:01:57:00:7b:85:9a:75:
         07:c5:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 12:50:08 2024 by rpki-client on console-ams.rpki-client.org