Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9849646736511EF84661CBB762E951A.roa
File:                     D9849646736511EF84661CBB762E951A.roa (raw, json)
Hash identifier:          MBOhcosLVdxgP5hd0kk4wLzE9cvJoW7zuL5qbQwgAmo=
Subject key identifier:   27:91:B3:5F:27:F5:E3:07:4C:4B:64:74:29:38:2C:CD:CF:D1:CD:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       EF0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9849646736511EF84661CBB762E951A.roa
Signing time:             Sun 15 Sep 2024 13:24:35 +0000
ROA not before:           Sun 15 Sep 2024 13:24:32 +0000
ROA not after:            Sat 30 Nov 2024 13:24:32 +0000
asID:                     142403
IP address blocks:        154.211.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61194 (0xef0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 13:24:32 2024 GMT
            Not After : Nov 30 13:24:32 2024 GMT
        Subject: CN=66e6e013-08f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:08:ee:64:f0:69:35:33:b3:39:c3:ff:46:69:
                    cf:a0:e0:08:77:75:8a:a8:34:4c:bb:13:d9:43:74:
                    f7:08:ba:e1:bf:dc:dd:27:12:30:37:43:77:f8:05:
                    62:b5:36:05:95:fe:61:e7:6f:fd:71:a7:38:3f:b4:
                    ed:71:31:a5:60:39:13:9b:7a:f7:c2:48:29:b7:44:
                    0b:aa:3c:69:d6:c5:32:21:84:85:23:06:aa:0b:f3:
                    d8:6e:f1:a3:18:85:8a:f6:5f:51:0f:e5:98:e7:87:
                    a6:df:7e:b3:a3:2c:ff:ef:58:a1:df:54:e6:31:72:
                    49:01:7e:ab:62:a9:e4:dc:e3:a4:b7:ae:ea:5e:a2:
                    cd:52:b0:65:b6:7b:5c:16:19:4f:26:2e:34:1c:0b:
                    73:36:78:dd:48:81:40:c3:96:00:cc:4b:2e:37:f6:
                    1b:09:59:d8:fe:45:25:c6:07:f7:eb:8a:a1:b8:6e:
                    2a:e0:b9:33:c1:82:fb:50:08:71:e0:7c:56:3b:70:
                    d3:df:fe:e8:0c:13:0a:62:07:3c:d8:98:2d:37:37:
                    37:9a:8c:3a:39:38:8a:0a:ea:1d:a5:82:ca:84:69:
                    18:f9:10:04:03:e1:0a:50:cd:a3:9a:bc:07:31:6d:
                    f6:01:30:1e:e2:35:e8:2f:68:2c:2e:97:56:50:8a:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:B3:5F:27:F5:E3:07:4C:4B:64:74:29:38:2C:CD:CF:D1:CD:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9849646736511EF84661CBB762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:7c:4b:0a:d3:ed:05:9c:39:f6:9b:21:ec:5b:40:31:67:ff:
         55:83:03:01:c4:95:97:ed:f2:fd:36:94:06:6a:15:74:a4:45:
         3c:c4:ea:5c:d1:3f:14:61:ff:eb:80:0a:61:55:af:91:83:5c:
         0f:59:82:b0:b3:5d:1d:dd:b0:1f:c8:8d:4b:87:7d:88:88:22:
         85:d6:3f:a3:85:55:44:ec:78:bc:45:b3:f4:7d:dd:db:08:4f:
         98:44:c5:8d:d8:35:2b:ec:08:51:20:55:10:b9:2b:27:60:fa:
         02:37:a2:91:39:48:18:59:ac:00:c7:77:79:92:ff:de:a5:da:
         80:c9:45:25:30:7d:01:63:06:dd:8f:13:46:90:b8:50:40:24:
         ec:ce:c5:67:67:e9:5b:a4:4e:f3:0e:75:97:14:25:b1:2c:95:
         97:71:d8:b7:0c:a7:bb:70:81:ac:ba:1a:6a:75:0f:1f:2d:35:
         81:39:b6:3e:c1:bb:34:49:00:0b:7f:e0:68:16:8f:56:5f:93:
         1d:75:c6:68:fd:9a:60:a0:dc:b8:90:c7:f8:05:b1:7b:65:b5:
         66:1c:e1:14:34:ac:ab:28:51:60:ae:c8:5d:c1:62:76:dc:20:
         33:13:2c:8e:6a:42:1e:17:1a:3c:e4:47:bf:14:ad:01:92:6f:
         a7:e2:fa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:30 2024 by rpki-client on console-ams.rpki-client.org