Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA54083274D111EF8F399262762E951A.roa
File:                     DA54083274D111EF8F399262762E951A.roa (raw, json)
Hash identifier:          Y5DcifNVMJ0/NwhDpW5xZBXay7pGikmXig7+KkwL43s=
Subject key identifier:   27:47:18:58:F5:A6:A2:5E:B2:1C:3C:6F:B2:D0:5F:8B:D8:43:F6:BF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       F02E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA54083274D111EF8F399262762E951A.roa
Signing time:             Tue 17 Sep 2024 08:50:13 +0000
ROA not before:           Tue 17 Sep 2024 08:50:10 +0000
ROA not after:            Sat 30 Nov 2024 08:50:10 +0000
asID:                     142403
IP address blocks:        154.83.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61486 (0xf02e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 08:50:10 2024 GMT
            Not After : Nov 30 08:50:10 2024 GMT
        Subject: CN=66e942c5-66b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:0f:54:53:8a:5d:29:da:1c:dd:c9:b6:51:
                    4f:d6:04:8c:34:45:a6:63:30:13:02:ed:1b:1c:52:
                    29:31:90:de:d6:b8:65:c1:2c:f2:25:df:11:42:e7:
                    b9:a3:da:fe:38:27:b3:03:da:0e:0b:de:e0:6c:ba:
                    de:c9:18:67:d9:a4:74:11:ff:d1:d5:6f:24:d6:38:
                    0c:13:ea:0e:33:c2:00:51:a8:9c:82:bb:19:5f:09:
                    0e:8b:fa:5f:a8:08:14:bb:bf:e1:bc:56:25:62:47:
                    4a:b8:fd:76:fd:a5:d3:43:b6:09:1e:1c:02:26:3f:
                    11:95:50:a0:98:e9:34:4c:a4:5f:f0:0f:f9:73:41:
                    53:5e:96:02:40:89:b5:6d:fe:65:bd:ad:14:8d:20:
                    91:97:be:63:00:27:cf:f5:06:66:2c:36:94:57:da:
                    4c:7b:77:5a:5c:bb:03:41:d2:ed:c7:4e:82:ff:a6:
                    37:1f:2b:3d:2c:ee:f3:b1:7c:0d:ca:51:c5:b8:f2:
                    a6:99:ee:a6:7f:1f:d6:93:4f:4a:87:1c:99:86:cd:
                    b8:25:e4:3a:36:b3:4e:41:e8:f9:33:48:82:9a:58:
                    1c:68:f0:25:67:00:54:a8:4c:b4:ce:57:37:52:c9:
                    a8:d4:5f:85:49:d6:40:75:13:5b:5c:88:ec:3e:eb:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:47:18:58:F5:A6:A2:5E:B2:1C:3C:6F:B2:D0:5F:8B:D8:43:F6:BF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA54083274D111EF8F399262762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:21:8c:4a:77:c6:f4:74:48:d2:0d:a0:ed:94:f4:c7:3a:22:
         60:d5:8e:73:0f:be:25:14:8d:6f:a1:bb:5b:c5:03:b7:02:64:
         fa:ab:ce:6d:26:9e:dd:e2:1a:c8:2d:95:27:a2:64:d6:c1:41:
         bd:36:30:00:94:05:c5:18:6f:3a:66:d7:28:f4:bd:1f:dd:60:
         04:9f:90:f3:b6:09:15:9a:37:28:f5:ce:51:ff:e0:3f:41:9c:
         ea:3d:39:2b:98:95:db:c1:78:d3:ca:0c:c3:8f:84:82:36:36:
         fe:e1:68:cf:96:34:87:dd:4a:4f:ea:7b:a4:f0:02:ae:a9:9e:
         07:d7:be:e3:b8:9b:c1:0b:9b:a0:fa:6c:cd:16:cf:ee:7f:05:
         68:07:5d:f5:98:e6:01:7e:da:70:d7:32:8e:db:20:03:b6:fc:
         32:79:18:23:62:0f:30:48:6c:aa:56:5f:69:c1:d5:57:16:f2:
         df:20:3a:15:83:49:ba:d3:17:1d:66:39:8a:aa:03:c0:a1:c2:
         67:57:8a:e7:66:26:89:c2:71:05:6e:2c:d7:57:9f:4e:5c:b7:
         53:7c:c9:90:c3:f9:57:78:b0:6e:45:2a:ff:95:06:4f:c1:ef:
         1b:10:8b:8a:72:4e:a6:4c:23:06:75:78:3c:df:57:51:af:55:
         17:71:f9:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPAuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDg1MDEwWhcNMjQxMTMwMDg1MDEwWjAYMRYw
FAYDVQQDEw02NmU5NDJjNS02NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAllAPVFOKXSnaHN3JtlFP1gSMNEWmYzATAu0bHFIpMZDe1rhlwSzyJd8R
Que5o9r+OCezA9oOC97gbLreyRhn2aR0Ef/R1W8k1jgME+oOM8IAUaicgrsZXwkO
i/pfqAgUu7/hvFYlYkdKuP12/aXTQ7YJHhwCJj8RlVCgmOk0TKRf8A/5c0FTXpYC
QIm1bf5lva0UjSCRl75jACfP9QZmLDaUV9pMe3daXLsDQdLtx06C/6Y3Hys9LO7z
sXwNylHFuPKmme6mfx/Wk09KhxyZhs24JeQ6NrNOQej5M0iCmlgcaPAlZwBUqEy0
zlc3Usmo1F+FSdZAdRNbXIjsPusuuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCdH
GFj1pqJeshw8b7LQX4vYQ/a/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQTU0MDgzMjc0RDExMUVGOEYzOTkyNjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMNMA0GCSqGSIb3DQEB
CwUAA4IBAQCQIYxKd8b0dEjSDaDtlPTHOiJg1Y5zD74lFI1vobtbxQO3AmT6q85t
Jp7d4hrILZUnomTWwUG9NjAAlAXFGG86Ztco9L0f3WAEn5DztgkVmjco9c5R/+A/
QZzqPTkrmJXbwXjTygzDj4SCNjb+4WjPljSH3UpP6nuk8AKuqZ4H177juJvBC5ug
+mzNFs/ufwVoB131mOYBftpw1zKO2yADtvwyeRgjYg8wSGyqVl9pwdVXFvLfIDoV
g0m60xcdZjmKqgPAocJnV4rnZiaJwnEFbizXV59OXLdTfMmQw/lXeLBuRSr/lQZP
we8bEIuKck6mTCMGdXg831dRr1UXcfmg
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:30 2024 by rpki-client on console-ams.rpki-client.org