Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD34EFC84F711EEB9BDE7554AD9E6FC.roa
File:                     6FD34EFC84F711EEB9BDE7554AD9E6FC.roa (raw, json)
Hash identifier:          4HrqXMi/myyLhqYbwSPrH+sZ7/xHYzdu0bdF9PrGLJc=
Subject key identifier:   4E:1F:4D:E5:1F:59:B2:95:8E:A7:AA:2E:AB:A3:6C:1E:A2:41:01:D5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       506F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD34EFC84F711EEB9BDE7554AD9E6FC.roa
Signing time:             Fri 17 Nov 2023 03:14:36 +0000
ROA not before:           Fri 17 Nov 2023 03:14:33 +0000
ROA not after:            Tue 12 Nov 2024 03:14:33 +0000
asID:                     54252
IP address blocks:        154.201.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20591 (0x506f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 17 03:14:33 2023 GMT
            Not After : Nov 12 03:14:33 2024 GMT
        Subject: CN=6556da9c-af78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:53:d0:25:8b:e4:39:59:ec:d5:ed:59:dd:
                    a9:81:f1:95:5d:79:c5:c6:d9:33:fa:c5:eb:a7:00:
                    bc:30:46:f7:93:af:36:ba:94:25:51:d8:b6:bb:a7:
                    26:18:90:e6:26:db:cd:22:31:1f:0e:44:10:76:9b:
                    50:00:66:be:e9:8e:32:16:13:e6:4e:f1:68:14:97:
                    1e:43:f5:a7:05:43:83:db:9b:df:16:d3:4e:f4:ba:
                    85:bd:f1:f4:e4:6c:99:c8:32:ca:68:3d:a0:7b:ab:
                    20:6d:41:c4:ee:9c:22:f5:d6:14:97:58:36:db:0c:
                    58:57:ef:db:9b:60:0b:2d:b3:dd:3c:af:84:c4:b1:
                    5f:8c:97:ce:98:ee:4f:95:ef:b7:ac:94:91:6a:88:
                    97:d8:de:2e:ee:46:b7:6c:b3:48:f8:45:ac:c5:be:
                    11:07:65:9b:c6:70:10:4f:85:3b:17:ff:41:97:f7:
                    95:99:83:70:0e:26:e3:d3:03:96:01:62:85:6e:b2:
                    46:69:4b:d4:19:5f:29:13:53:45:28:ed:3b:20:2d:
                    f4:d6:b6:bd:69:2a:e9:61:cc:cc:66:4e:a6:a9:fd:
                    49:58:c7:1d:97:a8:fa:40:02:0a:c4:9f:b9:af:df:
                    93:fb:74:04:11:3c:a9:4e:fb:b6:10:43:26:13:48:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1F:4D:E5:1F:59:B2:95:8E:A7:AA:2E:AB:A3:6C:1E:A2:41:01:D5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD34EFC84F711EEB9BDE7554AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:50:eb:dd:bb:f2:27:23:86:f2:98:54:45:31:73:bc:92:9d:
         73:67:bf:85:5c:ad:68:f9:d3:82:30:2e:e4:b8:e6:2e:30:9a:
         df:6f:67:52:33:20:b6:8c:78:08:ad:4c:ea:8e:83:65:60:07:
         6f:08:6a:ff:88:53:81:1b:aa:99:e3:01:9c:1c:4b:90:00:a5:
         1a:0d:8b:f2:ff:aa:08:7f:45:9e:0f:f2:f8:bb:a1:9c:78:1f:
         22:1d:63:84:c5:32:f7:06:ca:3b:1a:1f:90:aa:b1:66:b5:0a:
         db:0b:9a:8a:c6:fc:8a:f3:94:fb:dc:27:60:09:05:42:44:4e:
         5c:c1:9e:7d:de:6e:6d:4f:7a:46:34:09:59:3c:1c:61:03:0b:
         18:3d:85:a8:fa:65:38:65:df:63:24:60:c4:7d:49:23:be:7b:
         cf:8c:3f:84:56:63:f4:b3:28:2e:fc:10:34:6a:fa:fe:58:27:
         80:bd:1d:33:4b:ec:60:37:93:31:a7:7c:2e:70:ec:ed:78:17:
         fd:1b:33:b9:93:90:57:86:5d:d9:e8:18:5d:f2:2f:1e:04:30:
         36:2c:9c:25:43:dc:2f:23:e0:92:8e:29:13:8d:e0:70:42:e6:
         b0:2f:9c:72:1c:c7:b5:b3:10:08:22:98:ef:41:be:c9:ad:bd:
         8e:99:ea:0b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUG8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTcwMzE0MzNaFw0yNDExMTIwMzE0MzNaMBgxFjAU
BgNVBAMTDTY1NTZkYTljLWFmNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7dVPQJYvkOVns1e1Z3amB8ZVdecXG2TP6xeunALwwRveTrza6lCVR2La7
pyYYkOYm280iMR8ORBB2m1AAZr7pjjIWE+ZO8WgUlx5D9acFQ4Pbm98W0070uoW9
8fTkbJnIMspoPaB7qyBtQcTunCL11hSXWDbbDFhX79ubYAsts908r4TEsV+Ml86Y
7k+V77eslJFqiJfY3i7uRrdss0j4RazFvhEHZZvGcBBPhTsX/0GX95WZg3AOJuPT
A5YBYoVuskZpS9QZXykTU0Uo7TsgLfTWtr1pKulhzMxmTqap/UlYxx2XqPpAAgrE
n7mv35P7dAQRPKlO+7YQQyYTSKKRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTh9N
5R9ZspWOp6ouq6NsHqJBAdUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzZGRDM0RUZDODRGNzExRUVCOUJERTc1NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayTAwDQYJKoZIhvcNAQEL
BQADggEBADhQ69278icjhvKYVEUxc7ySnXNnv4VcrWj504IwLuS45i4wmt9vZ1Iz
ILaMeAitTOqOg2VgB28Iav+IU4EbqpnjAZwcS5AApRoNi/L/qgh/RZ4P8vi7oZx4
HyIdY4TFMvcGyjsaH5CqsWa1CtsLmorG/IrzlPvcJ2AJBUJETlzBnn3ebm1PekY0
CVk8HGEDCxg9haj6ZThl32MkYMR9SSO+e8+MP4RWY/SzKC78EDRq+v5YJ4C9HTNL
7GA3kzGnfC5w7O14F/0bM7mTkFeGXdnoGF3yLx4EMDYsnCVD3C8j4JKOKRON4HBC
5rAvnHIcx7WzEAgimO9BvsmtvY6Z6gs=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org