Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8415FCDCFBAA11EEB7A24E16017001B1.roa
File:                     8415FCDCFBAA11EEB7A24E16017001B1.roa (raw, json)
Hash identifier:          EXRrcHa0VUa2ipJx/5qi6toLBouuPHOXOxLR0+HkOBo=
Subject key identifier:   1B:F7:38:03:80:F1:20:6A:62:10:E8:3A:B7:C4:B5:C3:E9:A8:8A:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       ADA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8415FCDCFBAA11EEB7A24E16017001B1.roa
Signing time:             Tue 16 Apr 2024 04:33:48 +0000
ROA not before:           Tue 16 Apr 2024 04:33:44 +0000
ROA not after:            Thu 30 May 2024 04:33:44 +0000
asID:                     63139
IP address blocks:        154.94.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44457 (0xada9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 16 04:33:44 2024 GMT
            Not After : May 30 04:33:44 2024 GMT
        Subject: CN=661dffab-00fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:6f:29:25:ba:ba:ad:e6:be:11:a9:dc:b3:
                    c6:14:e2:5b:6b:b6:15:6c:74:e3:a9:66:69:fc:ba:
                    91:06:3b:1c:c5:6e:a1:d1:66:df:e7:54:92:5c:35:
                    ce:88:53:63:2d:58:5f:80:55:f2:27:5d:6c:3b:18:
                    86:28:f1:86:8d:0d:6f:2b:c1:28:df:fb:0b:5d:29:
                    0f:26:a9:c1:9e:b3:6d:70:ee:fa:0d:53:d2:ad:35:
                    80:e3:2c:3a:4f:32:9a:5e:49:75:a4:83:2e:4b:19:
                    9e:8d:c5:5d:98:8c:27:52:0c:39:4a:23:f9:37:d9:
                    32:63:5a:2c:65:ea:fa:b8:c5:c8:4e:fb:45:42:18:
                    8c:ee:54:b6:60:b0:2b:11:f7:82:b3:d6:47:e5:93:
                    2d:2c:17:5a:7f:24:7c:10:2d:f2:18:51:53:7a:da:
                    b8:53:50:75:1a:b0:37:dd:cd:d0:85:67:43:2b:a8:
                    f4:52:63:32:09:1c:0e:d8:e5:c2:49:e1:4f:14:cf:
                    9f:38:6f:78:d7:47:4b:8b:ab:41:65:e2:b8:1e:96:
                    ec:c4:e6:4b:f1:fd:e4:38:3f:bd:3d:7e:38:53:9d:
                    41:bf:9d:3f:fe:ed:28:d3:76:cb:36:7e:33:c9:51:
                    ac:77:b7:24:4e:e4:80:32:b7:27:5f:c6:55:37:e2:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F7:38:03:80:F1:20:6A:62:10:E8:3A:B7:C4:B5:C3:E9:A8:8A:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8415FCDCFBAA11EEB7A24E16017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:15:0b:fb:4b:07:b0:5a:3f:97:29:37:3b:8d:09:b3:46:ec:
         65:6f:77:e0:0f:0a:ae:df:ec:e7:ba:cd:69:6c:f0:ac:8b:07:
         2a:40:8e:df:3f:d2:10:95:8e:45:46:8a:05:c3:93:16:a8:74:
         48:a2:9a:e3:cd:a6:34:1c:d0:c1:b6:69:2b:8e:32:73:75:3f:
         f0:7f:58:e0:fd:1e:d0:31:ad:c6:95:01:07:f2:22:c4:f4:00:
         84:8f:6e:d4:d4:0d:09:06:18:69:58:7b:ec:9a:23:82:44:a4:
         44:70:20:d5:c5:74:ae:a6:4a:85:80:4c:8e:3c:e0:35:63:9b:
         c1:89:4e:fb:ce:de:91:c1:29:54:11:36:5f:da:79:37:d5:75:
         9b:b9:5e:73:41:66:d4:84:37:2d:a0:a5:4a:de:b3:44:10:79:
         36:95:92:35:80:56:e0:75:99:6b:36:c5:f3:de:51:b7:50:2c:
         c2:ce:6b:29:30:4b:47:ad:f9:4d:47:25:d8:91:d1:c6:c3:30:
         0f:2c:1f:61:78:ca:e5:d8:11:21:31:71:ad:ea:ac:b9:e0:4e:
         c9:68:72:d9:9a:62:e6:a1:66:b6:85:1f:bd:86:91:92:97:ac:
         fc:be:ce:a5:28:e3:2d:7a:8e:46:06:bc:74:03:5d:0a:fe:ce:
         ae:b6:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org