Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE39932473611EE86D30C504AD9E6FC.roa
File:                     7EE39932473611EE86D30C504AD9E6FC.roa (raw, json)
Hash identifier:          70khiExZpqJTzzluHmyc1uwSE7OKXGFH22fgsPRU/6s=
Subject key identifier:   27:DB:56:6B:70:22:2C:0C:22:A4:67:9E:6C:74:C8:0F:06:94:58:4F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3ACB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE39932473611EE86D30C504AD9E6FC.roa
Signing time:             Wed 30 Aug 2023 13:09:48 +0000
ROA not before:           Wed 30 Aug 2023 13:09:45 +0000
ROA not after:            Thu 08 Aug 2024 13:09:45 +0000
asID:                     139659
IP address blocks:        154.204.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15051 (0x3acb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 13:09:45 2023 GMT
            Not After : Aug  8 13:09:45 2024 GMT
        Subject: CN=64ef3f9c-17f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:24:3b:2d:00:5b:45:6f:9e:21:ee:f0:bc:8a:
                    58:a9:1d:7c:73:b9:75:5b:4c:97:b0:cf:82:cc:98:
                    c6:8b:38:8a:36:f3:41:cf:a9:75:24:91:9f:0c:ea:
                    2f:7b:6a:d3:46:13:7d:47:ea:ed:fb:b0:5b:af:9e:
                    f9:ba:bf:28:2a:68:37:73:85:b5:e6:ea:99:f2:2b:
                    42:c4:8d:10:a0:0c:1b:ae:5e:4f:6f:c3:51:76:95:
                    ee:fe:4d:8c:a9:e8:a3:23:b0:1e:b3:a3:02:1b:d2:
                    71:87:75:15:32:13:ce:19:d2:7a:bb:0c:1a:fd:2f:
                    e7:70:ba:a1:b9:3d:5e:42:cb:45:11:76:89:fb:f4:
                    5f:b9:2f:18:d3:e2:df:34:a9:34:92:2c:b4:ba:26:
                    36:d5:59:95:0d:8c:dc:1a:52:6d:83:59:d4:42:69:
                    09:8d:64:2e:04:97:4d:c0:fc:f5:23:fd:a1:29:39:
                    50:7d:c9:58:bd:71:ef:5b:17:69:19:ed:c1:5c:ac:
                    f3:4c:4e:b4:f5:34:ae:e1:bd:20:42:0c:ca:3c:c0:
                    df:3a:3e:79:d5:3c:48:1b:a4:a7:e0:d0:0e:80:ea:
                    d9:d0:0e:93:00:82:cb:1b:0a:31:c9:25:4f:69:fd:
                    2b:40:94:8a:13:a4:64:37:be:4e:f8:f7:cd:4c:44:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:56:6B:70:22:2C:0C:22:A4:67:9E:6C:74:C8:0F:06:94:58:4F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE39932473611EE86D30C504AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b4:1b:f4:a5:36:ff:30:2b:ab:e2:b4:d8:68:0c:37:b6:d9:
         32:f6:a1:e1:07:20:f1:44:cb:80:81:8f:6c:72:f8:7a:06:8f:
         b9:52:7e:bb:92:21:04:04:73:fb:1a:0b:55:35:19:a6:77:71:
         d1:4d:5e:0c:90:07:cc:b1:a1:45:b4:7f:36:73:35:a9:b1:1f:
         9f:9d:01:e1:ae:cc:1f:6d:b2:72:95:09:8b:af:55:79:2b:c4:
         59:51:50:51:ad:2e:80:cb:cc:8e:88:f1:90:94:a8:de:99:96:
         3d:80:79:c4:1d:f0:58:e8:05:f7:47:8f:44:6e:21:15:35:3c:
         3e:aa:89:47:bd:b9:35:ae:53:ea:0b:21:42:27:23:dc:28:d1:
         7d:dc:99:72:b6:2a:4c:67:f7:73:73:27:10:70:f4:f6:2e:16:
         fd:71:7c:d7:a8:f9:da:bd:27:fb:aa:60:82:3e:ba:28:0b:03:
         6c:a8:98:69:33:d9:5b:ca:22:14:7f:76:ab:5f:30:cb:ae:a5:
         08:a0:10:75:9c:76:93:c4:23:ee:ec:ad:9f:55:a8:e8:8f:75:
         1e:d6:ba:b9:55:d7:d7:1e:81:23:4e:d2:6f:a4:d7:39:d7:4b:
         48:63:a6:c2:4f:f8:a8:fa:f7:a0:7f:94:26:34:ab:48:f5:7a:
         7b:b6:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org