Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEAD7DB8131C11EEBB6D087D4AD9E6FC.roa
File:                     DEAD7DB8131C11EEBB6D087D4AD9E6FC.roa (raw, json)
Hash identifier:          f0Xn/mH7WnkZH7Thomt3ON5YrzGYmHch18XnXLcnjg0=
Subject key identifier:   EC:77:CC:C9:56:92:88:1E:0A:FE:6B:77:33:AF:81:AB:71:B2:41:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEAD7DB8131C11EEBB6D087D4AD9E6FC.roa
Signing time:             Sun 25 Jun 2023 05:55:21 +0000
ROA not before:           Sun 25 Jun 2023 05:55:16 +0000
ROA not after:            Fri 05 Jul 2024 05:55:16 +0000
asID:                     139065
IP address blocks:        154.194.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11659 (0x2d8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 25 05:55:16 2023 GMT
            Not After : Jul  5 05:55:16 2024 GMT
        Subject: CN=6497d6c9-8fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:59:2a:78:27:cf:7b:f3:c4:0a:49:27:76:
                    4a:1a:14:85:97:59:57:52:77:65:2a:ba:e7:ee:2e:
                    b9:b3:c9:78:90:40:b8:51:31:da:83:12:45:c4:74:
                    b2:77:e6:29:17:5b:01:de:a2:50:6f:e5:53:02:67:
                    c2:93:78:40:30:5c:81:20:43:ab:63:16:37:86:fd:
                    d4:3a:46:dd:be:57:5c:1c:06:de:74:c2:46:fe:98:
                    dc:78:8b:90:5f:48:d6:23:b6:bf:73:44:bb:9d:7b:
                    3d:fb:9b:e8:e4:2a:4e:8b:d5:20:86:06:77:28:4a:
                    00:c4:3c:5d:dc:f5:67:64:5a:2f:19:93:8e:f0:9b:
                    f7:d0:af:a6:52:9e:d7:c0:22:d1:88:e4:48:d6:2e:
                    03:ba:aa:3c:6b:cb:94:aa:7e:ca:e3:88:8f:70:53:
                    12:02:40:87:2f:b1:44:15:00:80:f5:c4:8c:4a:a3:
                    2e:66:aa:6a:67:cb:6d:d6:56:1d:22:3a:54:49:af:
                    3d:31:a0:e5:99:11:ef:86:ef:d0:15:1f:aa:be:1d:
                    9f:1e:de:68:27:aa:65:22:be:05:6f:a4:5e:60:25:
                    85:a4:db:d5:24:bd:03:7f:0a:2b:ff:d8:78:0f:2b:
                    b9:3b:08:a5:d3:af:51:9d:cd:a1:0f:ba:3d:9b:f7:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:77:CC:C9:56:92:88:1E:0A:FE:6B:77:33:AF:81:AB:71:B2:41:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEAD7DB8131C11EEBB6D087D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:53:5d:23:b5:0c:a1:39:05:d4:47:35:29:bf:24:d7:1d:cc:
         af:07:a8:9a:7f:bf:96:85:97:df:f1:4d:cd:27:7b:d6:b4:09:
         03:8c:0d:64:1b:1b:b9:ef:68:81:28:5d:96:7e:79:e2:93:12:
         70:3c:12:7a:a7:d6:ea:39:28:de:7c:2f:91:88:0d:56:b6:78:
         87:1b:43:ba:da:08:ce:a8:ae:46:ba:99:22:7c:72:c0:33:71:
         56:5b:a3:33:2e:cf:61:f6:dc:8f:40:f8:11:94:d8:04:36:49:
         81:1d:e2:95:b6:10:c9:cc:9d:76:40:b9:ae:46:4b:97:39:7a:
         e7:82:69:23:48:01:bb:1a:ae:fc:e4:7f:10:ff:00:27:5b:53:
         92:d2:50:55:e1:e6:da:63:f2:77:92:da:5a:fc:0d:e2:3b:ab:
         6a:a2:80:74:ad:63:6d:19:f9:0b:d6:30:0e:13:11:ae:9f:9c:
         15:21:31:c2:be:da:e7:5c:45:54:16:21:d7:29:0a:0f:bc:22:
         e4:c4:e7:be:cd:25:57:37:07:ea:7b:28:fd:0f:be:99:8c:22:
         7b:80:43:c5:cf:1d:f0:ca:74:85:87:56:f9:85:88:25:a7:8c:
         17:1e:a0:31:64:8a:e9:a0:8c:a2:64:5b:d5:5e:13:8e:70:bc:
         4d:ab:c2:4a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLYswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjUwNTU1MTZaFw0yNDA3MDUwNTU1MTZaMBgxFjAU
BgNVBAMTDTY0OTdkNmM5LThmZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+qlkqeCfPe/PECkkndkoaFIWXWVdSd2UquufuLrmzyXiQQLhRMdqDEkXE
dLJ35ikXWwHeolBv5VMCZ8KTeEAwXIEgQ6tjFjeG/dQ6Rt2+V1wcBt50wkb+mNx4
i5BfSNYjtr9zRLudez37m+jkKk6L1SCGBncoSgDEPF3c9WdkWi8Zk47wm/fQr6ZS
ntfAItGI5EjWLgO6qjxry5SqfsrjiI9wUxICQIcvsUQVAID1xIxKoy5mqmpny23W
Vh0iOlRJrz0xoOWZEe+G79AVH6q+HZ8e3mgnqmUivgVvpF5gJYWk29UkvQN/Civ/
2HgPK7k7CKXTr1GdzaEPuj2b97wjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7HfM
yVaSiB4K/mt3M6+Bq3GyQf4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0RFQUQ3REI4MTMxQzExRUVCQjZEMDg3RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawh0wDQYJKoZIhvcNAQEL
BQADggEBAGNTXSO1DKE5BdRHNSm/JNcdzK8HqJp/v5aFl9/xTc0ne9a0CQOMDWQb
G7nvaIEoXZZ+eeKTEnA8Enqn1uo5KN58L5GIDVa2eIcbQ7raCM6orka6mSJ8csAz
cVZbozMuz2H23I9A+BGU2AQ2SYEd4pW2EMnMnXZAua5GS5c5eueCaSNIAbsarvzk
fxD/ACdbU5LSUFXh5tpj8neS2lr8DeI7q2qigHStY20Z+QvWMA4TEa6fnBUhMcK+
2udcRVQWIdcpCg+8IuTE577NJVc3B+p7KP0PvpmMInuAQ8XPHfDKdIWHVvmFiCWn
jBceoDFkiumgjKJkW9VeE45wvE2rwko=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org