Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE149F9CBBEA11EEBA4A17B8775412E6.roa
File:                     BE149F9CBBEA11EEBA4A17B8775412E6.roa (raw, json)
Hash identifier:          22Ni1+Da4AKX6gQHEf35J57kKHQBOQH+n9hAlxQVdhA=
Subject key identifier:   86:FA:AC:D0:5F:EB:E2:AE:C9:C1:44:4C:9F:CA:59:7B:A4:08:C2:02
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       7D26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE149F9CBBEA11EEBA4A17B8775412E6.roa
Signing time:             Fri 26 Jan 2024 01:32:18 +0000
ROA not before:           Fri 26 Jan 2024 01:32:15 +0000
ROA not after:            Sun 15 Dec 2024 01:32:15 +0000
asID:                     38264
IP address blocks:        154.198.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Nov 2024 00:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32038 (0x7d26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 26 01:32:15 2024 GMT
            Not After : Dec 15 01:32:15 2024 GMT
        Subject: CN=65b30ba2-580a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:da:fd:db:f8:f3:a1:34:22:c5:3f:fb:80:
                    22:72:87:e9:3a:78:d7:23:5a:54:7f:b4:4a:67:10:
                    48:58:75:ac:9d:28:9a:31:95:c4:e0:4f:8c:d0:ea:
                    03:99:a6:83:ff:e9:4c:8c:d8:fa:5e:d1:8e:d3:ba:
                    8e:a9:45:ac:65:fd:c6:5e:40:7b:a5:ae:c2:95:b2:
                    69:7a:b5:29:e2:bf:13:a7:54:4c:15:20:c1:2a:e8:
                    68:ca:55:1a:64:a2:0d:7f:64:e8:3a:79:a9:10:c9:
                    51:fc:24:aa:ee:7d:b0:d9:4f:bd:5a:61:47:ac:8a:
                    bd:80:e1:00:57:17:ed:71:71:2f:a2:30:08:cd:d8:
                    c7:4a:a4:fa:ca:ea:db:20:57:1c:03:1a:62:15:43:
                    dc:35:30:f0:c9:a8:9f:76:12:78:62:23:41:2f:5e:
                    68:e6:4f:a9:b8:f8:43:20:f6:2c:42:59:18:a7:90:
                    a3:16:f8:7d:00:98:6f:72:93:d6:8d:1f:91:f0:c9:
                    ee:b2:f0:a2:a3:2b:3c:06:e7:9a:0b:11:c8:65:40:
                    8d:e3:f3:ff:f2:09:77:6e:c4:e1:1b:6e:49:7e:27:
                    78:6c:f5:c1:d7:66:0f:ab:a6:47:86:5e:78:54:48:
                    24:1d:ef:7e:b9:f9:2b:0a:64:5b:9c:f8:80:9b:88:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FA:AC:D0:5F:EB:E2:AE:C9:C1:44:4C:9F:CA:59:7B:A4:08:C2:02
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE149F9CBBEA11EEBA4A17B8775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:77:db:22:6b:f3:e0:cb:00:bf:17:c1:53:67:6c:09:a3:8e:
         20:8c:db:ea:76:16:8b:6e:ab:7f:8f:93:03:cf:36:a1:91:3e:
         35:f1:f1:aa:aa:76:90:99:91:86:81:76:e5:9e:94:23:72:57:
         83:84:40:75:2f:4d:67:6b:27:28:28:f6:18:81:06:8a:ce:89:
         93:d8:1f:61:31:c6:ee:5e:b6:bb:7d:bf:d3:0d:f5:5f:53:89:
         18:7a:83:a8:a1:85:49:cd:3f:6d:b9:ce:e0:9d:81:61:01:23:
         f7:03:d2:ea:a4:57:76:4c:74:1c:33:b7:6c:4a:7c:88:05:e5:
         66:3b:a1:c2:4b:8f:02:73:f7:bb:a6:47:e9:03:21:73:b0:3f:
         39:a6:3c:c9:61:7a:78:c7:2c:61:7c:b9:38:06:bc:2d:15:44:
         5c:8a:2e:35:dd:74:51:de:ef:de:ec:01:12:09:38:40:15:75:
         cd:32:be:88:a6:85:c2:b2:4b:79:99:8b:c0:40:20:e9:a1:81:
         e2:d1:5c:f7:bb:37:81:86:19:24:52:69:f7:15:80:5d:af:67:
         d1:3f:4e:c9:02:c6:fa:96:a7:a4:1a:a1:bf:2b:d1:54:91:11:
         ed:07:c8:3f:a6:6f:f8:e9:c9:46:3c:be:1c:21:2f:19:77:91:
         e5:4f:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:57:26 2024 by rpki-client on console-ams.rpki-client.org