Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2D7E30AF91611EDA1DE81164AD9E6FC.roa
File:                     C2D7E30AF91611EDA1DE81164AD9E6FC.roa (raw, json)
Hash identifier:          E2qjBOQsD/3541yCDu8qjpjbp73QIpcGpKWEQSdfqTw=
Subject key identifier:   1A:0D:F0:5A:F1:F1:CC:CB:4A:DB:2E:5C:FA:5A:10:57:62:18:82:53
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2634
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2D7E30AF91611EDA1DE81164AD9E6FC.roa
Signing time:             Tue 23 May 2023 03:06:07 +0000
ROA not before:           Tue 23 May 2023 03:06:04 +0000
ROA not after:            Wed 15 May 2024 03:06:04 +0000
asID:                     399674
IP address blocks:        154.94.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9780 (0x2634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 23 03:06:04 2023 GMT
            Not After : May 15 03:06:04 2024 GMT
        Subject: CN=646c2d9f-f804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:0c:7e:07:f0:83:10:48:2c:fa:a3:84:c5:
                    f0:b8:ff:65:32:c9:f5:ba:14:e5:db:a7:ab:ee:16:
                    ab:b5:b7:d7:49:5e:1d:9b:29:5a:a3:b5:12:cb:04:
                    e3:9b:57:07:e4:4b:66:6a:eb:82:12:27:bc:8e:26:
                    3a:37:bf:c7:00:bd:43:65:4a:6c:00:d5:0d:c7:23:
                    4e:94:38:34:6e:ad:ed:53:f6:60:d1:b6:4e:65:7b:
                    d9:6d:69:44:f9:93:b3:61:02:02:25:cb:8f:1b:ab:
                    f1:2e:bb:ce:2e:9e:c1:21:20:75:d2:52:ca:d6:fc:
                    6c:23:ba:f9:bf:18:9c:d5:89:e8:f6:eb:d7:db:f5:
                    af:b3:55:89:53:83:a6:b4:f3:f6:09:03:21:d0:da:
                    2c:f6:2d:95:fd:cf:69:30:01:32:97:7a:54:e0:6d:
                    a5:2a:b8:7f:e7:7a:e3:d9:14:87:ed:14:b6:51:1f:
                    e3:b5:a5:d1:36:68:03:75:aa:54:c9:82:64:69:f9:
                    2b:5e:54:6d:5e:ce:28:48:84:96:55:f6:cc:d9:d4:
                    ca:4b:22:03:0d:be:46:26:34:93:98:32:22:83:7f:
                    4e:b0:7a:9a:b2:82:78:d6:9f:5d:69:98:89:ea:f0:
                    3e:45:74:23:14:bc:54:7b:a2:c1:91:2d:61:a8:cb:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:F0:5A:F1:F1:CC:CB:4A:DB:2E:5C:FA:5A:10:57:62:18:82:53
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2D7E30AF91611EDA1DE81164AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:00:17:bd:86:82:b0:4b:86:5d:39:16:ec:44:26:6d:77:18:
         f9:a4:fa:e0:c3:3f:96:1c:31:01:e4:63:15:2a:65:c3:07:cd:
         64:38:b3:5d:98:f9:80:42:a3:e4:09:6c:cf:c6:97:5e:a7:78:
         2a:79:21:85:0f:e9:fd:cf:5c:45:9c:6d:54:3a:d2:72:1b:5f:
         98:d3:27:a1:e3:dc:46:cf:30:ee:c0:d5:f5:41:53:61:31:8b:
         d9:d1:1e:40:14:a3:8a:89:53:74:46:cf:94:54:5b:7c:5d:93:
         9c:96:36:ff:f4:1e:b9:cb:b7:3d:54:4f:70:84:72:15:e6:93:
         64:86:a3:84:c3:30:05:c3:52:0e:be:5a:c2:09:b3:ae:5e:96:
         b9:cb:60:3e:5f:00:f4:57:55:ec:21:f2:f2:47:0c:27:1e:2b:
         63:75:28:12:62:3f:7f:9b:11:51:3f:a1:5d:75:05:58:53:ba:
         a3:0b:05:eb:26:53:54:0e:dd:a3:b2:21:e2:fe:81:05:0b:83:
         0f:2b:78:46:6c:ef:6d:03:68:80:ab:fc:93:55:0a:2a:70:e5:
         c3:c2:95:87:6f:82:22:d8:2e:1a:a1:f3:98:66:8d:94:82:20:
         24:84:3c:64:7b:9a:ca:28:54:36:3f:74:4a:90:63:68:44:8a:
         11:ff:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org