Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C449040952411EEB41E1E77D25BE465.roa
File:                     8C449040952411EEB41E1E77D25BE465.roa (raw, json)
Hash identifier:          JWtkdX3UUT2yBe2P8Hn0vyHfdmKCa+sFObnaaH95bfM=
Subject key identifier:   61:7E:ED:7A:BB:E2:07:04:F3:8E:BF:37:10:AE:EA:A9:FC:9F:4B:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5E1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C449040952411EEB41E1E77D25BE465.roa
Signing time:             Thu 07 Dec 2023 17:17:50 +0000
ROA not before:           Thu 07 Dec 2023 17:17:47 +0000
ROA not after:            Mon 09 Dec 2024 17:17:47 +0000
asID:                     58460
IP address blocks:        154.81.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Nov 2024 00:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24095 (0x5e1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec  7 17:17:47 2023 GMT
            Not After : Dec  9 17:17:47 2024 GMT
        Subject: CN=6571fe3e-f2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:98:f5:40:49:5d:86:39:35:ee:76:93:38:
                    5f:28:dc:f9:49:c6:fb:7e:5b:f1:55:62:87:f8:12:
                    11:fd:49:05:76:64:15:72:1c:ed:a7:b0:03:09:48:
                    d4:82:e9:33:dd:56:b2:b1:d4:df:86:83:5a:ba:b7:
                    a3:4b:15:25:5b:eb:31:56:7f:23:96:5e:1c:67:40:
                    c8:ff:09:e8:77:ce:1c:47:e1:41:d2:8b:5b:fa:49:
                    ba:ef:03:35:01:6c:21:8d:bb:48:a1:04:7e:46:8c:
                    6d:f5:b3:0f:32:4b:b1:7b:dc:f3:ef:d6:ca:58:39:
                    9c:c6:ec:33:6f:04:09:d9:25:d2:36:ce:d6:c1:0c:
                    99:e4:a2:16:ed:4c:13:e7:fa:f1:58:0b:1b:0b:aa:
                    8d:c6:c4:30:b8:3f:14:f3:55:5f:44:b5:41:07:28:
                    0b:5a:62:fe:03:e5:59:51:0c:6c:df:4f:25:47:17:
                    c0:b2:fa:40:7d:83:8e:27:7a:91:80:c7:93:cd:78:
                    1a:d6:71:d4:bb:40:18:64:92:4e:f7:b2:4b:e1:e8:
                    c1:86:15:da:7b:ae:8c:c2:59:3c:24:d1:d1:ee:cc:
                    1c:c7:a7:27:2e:01:c0:a1:f9:81:a0:22:84:a5:ad:
                    8e:04:2d:ad:f5:ea:f7:80:41:8a:11:0b:99:1a:69:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7E:ED:7A:BB:E2:07:04:F3:8E:BF:37:10:AE:EA:A9:FC:9F:4B:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C449040952411EEB41E1E77D25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:a7:b8:66:fc:3c:22:b5:27:25:a6:30:69:c2:2d:05:1c:
         be:7e:95:69:52:96:97:65:21:1c:a6:3b:4e:02:86:c9:62:c6:
         7c:4c:5e:e2:36:06:73:77:c7:17:b0:11:dd:88:d1:43:39:97:
         b3:d3:b9:38:98:af:bd:6d:b3:29:d4:7a:f9:2a:54:eb:67:19:
         d6:bb:51:5d:65:7a:e2:3d:3b:c7:d2:49:f7:0c:af:c1:0d:36:
         09:e7:1c:8a:48:7c:5b:bb:93:65:71:73:80:d8:1b:6f:47:c2:
         ab:5b:b4:13:5d:0a:b9:7a:bf:00:0b:b1:5b:45:1f:1a:e1:e2:
         95:d4:80:b8:a1:be:f0:32:d7:3f:28:3a:af:c5:38:f9:c1:12:
         27:e0:4f:2b:93:1c:a8:73:11:0a:97:7e:4b:7d:b8:c7:cd:94:
         5e:ca:e8:b0:f0:2b:81:6a:ad:05:45:39:6b:45:45:b2:6e:4d:
         cc:60:2f:a3:de:f5:8d:8d:d1:38:b5:8b:e5:64:c6:82:e0:69:
         5b:0e:50:f7:88:9f:14:e6:4f:19:5b:2a:4b:cc:02:cb:46:03:
         94:69:46:80:b0:43:59:18:4e:44:32:72:40:8d:b4:a5:4c:37:
         3a:10:44:69:f2:74:54:76:76:a0:49:9a:5f:12:9d:06:f8:b6:
         00:43:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:22 2024 by rpki-client on console-ams.rpki-client.org