Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F2AA5053A211EE82FB7B694AD9E6FC.roa
File:                     C7F2AA5053A211EE82FB7B694AD9E6FC.roa (raw, json)
Hash identifier:          GOOS46gigU1JY95LCM8EF/eW2ljRqjpLSv6MySa7BCg=
Subject key identifier:   05:C9:EB:C4:27:CE:6A:C2:43:72:68:D7:4B:94:32:34:0B:24:83:B3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       3DA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F2AA5053A211EE82FB7B694AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 08:35:10 +0000
ROA not before:           Fri 15 Sep 2023 08:35:07 +0000
ROA not after:            Sat 08 Jun 2024 08:35:07 +0000
asID:                     142403
IP address blocks:        154.211.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15779 (0x3da3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 08:35:07 2023 GMT
            Not After : Jun  8 08:35:07 2024 GMT
        Subject: CN=6504173e-c6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:d7:85:50:d6:44:f8:55:c9:39:25:40:da:
                    5a:01:af:a5:32:ea:16:51:29:2d:61:be:21:a6:8a:
                    25:0a:8a:3a:a8:c2:17:62:d0:da:00:30:66:ad:fb:
                    18:68:52:f9:e1:c1:b9:5c:7d:b7:81:5f:af:cc:57:
                    0d:bc:19:a0:ce:7d:76:d4:ff:27:07:ac:a8:74:be:
                    76:38:c2:47:d0:c7:54:e4:a8:52:0b:67:ea:63:7b:
                    b5:0d:53:88:d3:6c:3c:4d:69:2a:19:a8:87:59:85:
                    9f:d3:f1:c6:b0:9c:b4:7b:8b:ad:97:1a:73:0b:d8:
                    03:15:7a:a1:91:20:6d:ea:40:c2:e4:b2:cd:52:e6:
                    3e:05:71:ec:eb:2b:95:2c:e4:2a:b1:60:45:15:38:
                    0e:a7:fe:a1:fc:57:44:fa:44:14:50:a9:22:2a:1d:
                    aa:23:49:ee:5f:d0:e2:02:9a:71:c5:29:33:a2:a9:
                    bf:9c:11:a1:90:72:ff:42:f4:fb:25:b9:18:db:78:
                    c5:90:41:5c:19:c7:44:fe:2d:24:32:fb:6a:32:83:
                    4c:c1:e5:01:82:5c:57:c0:37:2f:6c:08:46:21:77:
                    bf:73:36:38:81:19:bb:07:51:7a:9e:dd:50:46:74:
                    8e:ff:56:07:57:52:71:81:12:07:4f:56:60:5a:b8:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C9:EB:C4:27:CE:6A:C2:43:72:68:D7:4B:94:32:34:0B:24:83:B3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7F2AA5053A211EE82FB7B694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ed:fc:07:ca:32:bf:ad:4b:b8:34:76:00:ec:2d:0b:46:6c:
         ba:e5:84:c4:e5:61:dd:23:65:43:ba:a1:75:e2:d0:d5:ab:5d:
         1d:01:f5:38:cf:3d:7c:4c:b5:4b:1d:35:7c:7b:1d:10:ef:57:
         8e:c5:6e:1e:91:49:3c:4d:69:be:9b:f8:ef:6a:bc:d9:ed:25:
         fd:9d:fc:c8:8c:c9:5b:cb:d4:7a:d7:db:ee:a9:c6:61:47:3c:
         6b:cc:f3:ea:ce:36:93:d3:f7:b2:22:71:84:98:60:13:18:21:
         91:9e:54:0e:f5:fa:38:74:bf:3f:c4:94:4d:e1:59:be:0a:89:
         b9:88:3e:22:86:88:35:24:17:41:e1:31:47:78:7c:ae:d2:3a:
         f0:1a:17:be:42:70:c9:c8:19:d2:d3:d9:a5:4e:9d:9f:55:b1:
         18:fe:be:4e:82:14:f2:6a:78:7b:f6:21:f0:58:a0:9c:2c:62:
         29:a1:53:72:37:c1:df:30:38:9e:9d:91:ba:16:f7:de:86:26:
         6d:c6:2b:35:06:5c:66:e9:40:a4:b8:b3:09:c8:1f:92:20:a3:
         a1:70:d2:0f:03:18:2d:d3:c1:8d:a0:87:46:78:9c:9a:f8:3c:
         ec:a4:31:e8:b5:04:6f:67:a8:fa:86:e2:4c:a3:3c:9c:99:d5:
         54:e3:ce:8d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPaMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTUwODM1MDdaFw0yNDA2MDgwODM1MDdaMBgxFjAU
BgNVBAMTDTY1MDQxNzNlLWM2Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD/NeFUNZE+FXJOSVA2loBr6Uy6hZRKS1hviGmiiUKijqowhdi0NoAMGat
+xhoUvnhwblcfbeBX6/MVw28GaDOfXbU/ycHrKh0vnY4wkfQx1TkqFILZ+pje7UN
U4jTbDxNaSoZqIdZhZ/T8cawnLR7i62XGnML2AMVeqGRIG3qQMLkss1S5j4Fcezr
K5Us5CqxYEUVOA6n/qH8V0T6RBRQqSIqHaojSe5f0OICmnHFKTOiqb+cEaGQcv9C
9PsluRjbeMWQQVwZx0T+LSQy+2oyg0zB5QGCXFfANy9sCEYhd79zNjiBGbsHUXqe
3VBGdI7/VgdXUnGBEgdPVmBauLpnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUBcnr
xCfOasJDcmjXS5QyNAskg7MwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M3RjJBQTUwNTNBMjExRUU4MkZCN0I2OTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0w0wDQYJKoZIhvcNAQEL
BQADggEBAHLt/AfKMr+tS7g0dgDsLQtGbLrlhMTlYd0jZUO6oXXi0NWrXR0B9TjP
PXxMtUsdNXx7HRDvV47Fbh6RSTxNab6b+O9qvNntJf2d/MiMyVvL1HrX2+6pxmFH
PGvM8+rONpPT97IicYSYYBMYIZGeVA71+jh0vz/ElE3hWb4KibmIPiKGiDUkF0Hh
MUd4fK7SOvAaF75CcMnIGdLT2aVOnZ9VsRj+vk6CFPJqeHv2IfBYoJwsYimhU3I3
wd8wOJ6dkboW996GJm3GKzUGXGbpQKS4swnIH5Igo6Fw0g8DGC3TwY2gh0Z4nJr4
POykMei1BG9nqPqG4kyjPJyZ1VTjzo0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org