Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE423F26D5D11EE909BF4654AD9E6FC.roa
File:                     CCE423F26D5D11EE909BF4654AD9E6FC.roa (raw, json)
Hash identifier:          cz6D2BWwOSqL8worpcd2yFycj9Lwm+yZDj0PfizEm4k=
Subject key identifier:   5E:23:48:95:4D:14:BC:91:20:2A:35:C5:AC:D1:86:A8:38:7C:7A:9B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       4669
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE423F26D5D11EE909BF4654AD9E6FC.roa
Signing time:             Wed 18 Oct 2023 02:26:53 +0000
ROA not before:           Wed 18 Oct 2023 02:26:50 +0000
ROA not after:            Wed 18 Sep 2024 02:26:50 +0000
asID:                     132513
IP address blocks:        154.215.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18025 (0x4669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 18 02:26:50 2023 GMT
            Not After : Sep 18 02:26:50 2024 GMT
        Subject: CN=652f426d-23cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:0c:6a:f1:ae:09:2a:8f:51:ae:93:a4:d7:
                    11:d5:f9:43:e4:0f:38:66:47:44:38:17:d9:54:3d:
                    a8:e7:54:13:f9:ed:3f:d9:70:66:23:34:68:1e:ba:
                    f7:4a:fe:e8:92:43:9f:b3:64:c9:ab:c9:89:86:b8:
                    e2:1a:cc:0b:cc:f4:81:be:0d:a2:1a:21:64:37:d6:
                    c3:84:f8:57:47:3d:9f:15:07:5e:f2:e3:74:c2:a9:
                    da:09:84:fa:1c:c8:1d:ac:18:c2:fc:12:54:91:2e:
                    a7:e3:57:76:7e:8f:c6:4a:8c:4e:ae:71:3a:35:82:
                    ac:47:4e:ea:69:3a:da:10:50:e3:91:12:39:ad:c7:
                    be:53:3a:fc:a3:da:0b:0a:64:26:66:f0:cc:08:9f:
                    06:d3:9e:56:fa:dc:1e:d6:09:fa:cc:a9:44:04:b8:
                    9d:21:0e:8c:21:34:19:d0:ae:8f:4b:ce:6d:75:b7:
                    37:3f:7c:a4:41:f1:81:e7:22:17:6f:9b:4b:5f:5d:
                    90:ce:15:00:36:64:3f:71:94:8e:a2:b9:23:cd:c5:
                    7b:ec:58:e5:1e:83:19:76:98:17:51:3e:eb:80:a0:
                    a9:ba:8e:3a:d0:7d:61:d7:75:6e:ce:ad:79:bf:42:
                    23:56:b6:93:29:4a:ab:08:60:98:e9:1b:c5:97:4a:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:23:48:95:4D:14:BC:91:20:2A:35:C5:AC:D1:86:A8:38:7C:7A:9B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE423F26D5D11EE909BF4654AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:51:42:35:54:73:cb:7e:e4:61:54:f2:77:3a:99:75:a7:b7:
         0c:a2:60:82:80:d5:c6:0a:1e:a0:13:f1:dd:3d:d0:d3:58:43:
         a1:94:bd:a9:8b:68:d0:66:b2:98:96:f9:45:41:28:2e:af:fd:
         ba:6b:1e:ce:19:ce:6d:df:a1:a0:63:31:b9:0a:55:53:c2:a5:
         b0:5f:89:3f:96:27:ce:0e:b7:89:18:68:57:41:be:94:3e:70:
         d2:01:a5:e9:77:5c:05:39:86:1f:39:e6:d0:67:bd:46:21:52:
         30:b0:67:68:18:0a:e6:98:81:12:68:22:d2:27:a3:8a:63:f6:
         8e:43:92:e2:e4:57:b3:74:48:83:43:22:cc:78:d7:fe:9d:80:
         3b:af:78:e0:a7:88:82:f7:75:41:19:2b:1d:49:54:b0:53:47:
         fd:4c:6d:81:63:71:07:5a:33:4c:9e:ee:8a:94:b2:b2:70:6d:
         e2:33:41:ac:de:75:d4:f2:ff:48:61:5d:39:e1:d6:ac:a2:8b:
         3e:d7:e2:c2:bf:71:64:a1:aa:4c:1f:63:91:c4:df:c4:df:8a:
         74:fb:17:7c:30:e2:37:76:d7:c5:4e:b5:c7:b8:4c:5a:64:b2:
         d1:6b:f3:1f:b4:6f:f8:39:8f:6f:af:d4:99:20:da:a3:c9:80:
         90:cb:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org