Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD5A261CDEA711EEBB55108B775412E6.roa
File:                     DD5A261CDEA711EEBB55108B775412E6.roa (raw, json)
Hash identifier:          6lOLblqCpVpDbSUnEW0dOJlbF42fdM5s/dsBrsub4dI=
Subject key identifier:   E4:6E:43:2E:E2:A8:5C:89:CA:0D:C6:76:1F:1E:F4:B4:D0:99:A0:ED
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A04F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD5A261CDEA711EEBB55108B775412E6.roa
Signing time:             Sun 10 Mar 2024 06:31:45 +0000
ROA not before:           Sun 10 Mar 2024 06:31:42 +0000
ROA not after:            Thu 29 Aug 2024 06:31:42 +0000
asID:                     45474
IP address blocks:        154.197.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41039 (0xa04f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 10 06:31:42 2024 GMT
            Not After : Aug 29 06:31:42 2024 GMT
        Subject: CN=65ed53d1-aeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:6a:01:18:d8:cd:eb:4b:96:43:ad:23:d9:
                    e7:2d:10:1a:3e:34:53:a1:8f:04:33:81:d6:8c:ad:
                    ac:bc:02:aa:fa:33:f3:c1:f7:50:02:c8:d0:06:b9:
                    2d:da:7c:68:b6:af:5f:4f:3a:f8:35:10:de:b6:23:
                    92:a6:a7:b5:c9:6f:c8:4c:30:c6:92:bd:63:ef:5b:
                    ab:5e:72:b1:8a:d3:4c:21:19:b5:03:d0:8e:0d:ea:
                    87:46:a3:33:3a:de:bd:ec:4e:b7:9e:16:6a:b5:68:
                    67:30:28:55:e2:95:73:92:c7:99:ea:b6:ad:c0:64:
                    4b:b4:75:05:b6:50:b1:a6:a9:04:fe:73:5a:a7:ec:
                    74:10:36:7e:82:77:23:41:06:ac:16:6d:75:a7:15:
                    1a:a0:a4:4c:18:8a:f5:86:6a:70:65:fa:f9:94:51:
                    e2:c6:a6:95:67:82:a0:6b:ae:51:03:a2:0f:d6:0e:
                    0a:bb:d6:fc:f2:db:0f:60:b2:fd:50:2c:b4:f5:d8:
                    b4:31:4f:db:76:2f:6f:ec:76:a3:c5:fc:41:b6:c9:
                    49:d2:80:78:26:2e:76:92:8b:91:3b:18:a6:9a:59:
                    3a:4c:57:73:69:3a:a4:20:c3:2a:eb:a7:33:4a:a1:
                    f3:4f:d4:3e:8f:84:a9:3b:97:49:97:a4:b7:89:a6:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6E:43:2E:E2:A8:5C:89:CA:0D:C6:76:1F:1E:F4:B4:D0:99:A0:ED
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD5A261CDEA711EEBB55108B775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:6e:8c:71:5f:bb:77:81:b7:b7:d6:52:53:c3:8a:02:e2:3b:
         af:b8:25:72:91:27:f6:30:4e:45:cd:b9:9c:1b:8b:4f:c9:30:
         d3:2c:6e:ff:ff:28:92:8f:ec:8d:26:4a:a1:52:ec:d4:ee:21:
         83:58:72:3d:6c:06:f3:1f:e9:c3:8c:9d:4f:f6:c0:4c:ba:01:
         ab:39:ca:01:1c:3a:32:72:9f:81:5b:8a:44:cd:f8:59:dd:2e:
         ea:8c:13:d9:c4:e2:4d:a6:55:f8:bb:42:d2:04:f1:67:14:e9:
         a3:64:d1:bb:38:92:35:12:1a:46:76:4b:ed:0b:d8:18:d9:b2:
         99:ca:c2:5f:4d:87:de:02:3e:6b:3f:b3:93:60:1c:c7:66:4f:
         db:a9:b0:5b:d0:64:f6:92:be:ed:f7:6c:a3:6f:2e:31:11:37:
         ae:e1:d3:84:ec:c5:dc:ee:10:cf:e1:03:39:44:b3:59:57:ec:
         01:35:5a:88:2d:85:82:5f:36:9b:c9:3f:76:49:ed:2e:73:7e:
         1a:ed:5a:ba:2d:e7:89:b8:e2:0e:d7:8f:d7:95:76:12:c6:d8:
         f2:6c:a4:58:26:ce:2e:87:db:53:03:02:f5:db:89:8e:b0:64:
         75:93:99:e7:4e:5e:bc:21:0a:c7:34:f4:46:65:2a:74:ef:4a:
         02:70:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org