Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF5C358210D911EE856463214AD9E6FC.roa
File:                     DF5C358210D911EE856463214AD9E6FC.roa (raw, json)
Hash identifier:          66qLShL/ID/vxQHKoqgf78umIE7JX7Yg9iKP/LDxqKo=
Subject key identifier:   C5:07:42:E7:32:60:C2:4E:94:D7:FD:44:EF:92:B8:67:B6:4A:6C:77
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       2D3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF5C358210D911EE856463214AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 08:50:44 +0000
ROA not before:           Thu 22 Jun 2023 08:50:40 +0000
ROA not after:            Fri 05 Jul 2024 08:50:40 +0000
asID:                     210334
IP address blocks:        154.89.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11578 (0x2d3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 22 08:50:40 2023 GMT
            Not After : Jul  5 08:50:40 2024 GMT
        Subject: CN=64940b64-796b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:79:f1:bc:00:74:01:9d:78:a2:2c:7d:47:
                    69:fe:e7:73:5d:bb:09:3e:f5:68:61:ff:bb:be:f9:
                    cc:c1:45:55:2b:12:37:e7:1e:f6:9a:55:7b:34:38:
                    b5:2a:d0:3e:96:70:a6:4f:e9:dd:24:ff:83:22:e6:
                    1e:8e:64:d0:3c:1a:f7:45:fd:5a:09:74:8b:94:68:
                    c8:eb:5f:43:11:36:2e:17:f8:5c:bc:04:21:e1:fa:
                    14:0a:10:a8:29:e2:d8:58:8a:26:63:8d:57:38:83:
                    df:b3:9c:de:30:12:80:f6:c5:7a:23:1d:66:79:0f:
                    12:ff:a2:56:33:b9:d2:e4:73:fe:85:23:21:23:54:
                    3a:51:bd:44:63:07:97:3e:38:c7:13:49:73:06:40:
                    8c:a3:b0:76:ef:39:3b:37:bb:dc:2b:af:25:38:2e:
                    57:30:1e:b1:90:7d:5a:76:f6:c4:02:ff:4f:20:a5:
                    08:0b:13:96:bc:e4:5b:0e:0c:54:3e:ed:d8:13:e9:
                    b1:68:4a:37:c3:0f:23:8f:0d:76:11:81:0c:4c:cb:
                    a3:c9:c6:1c:19:f7:33:bd:e8:30:50:50:dc:3c:27:
                    44:ac:68:15:80:ff:b1:a7:02:2e:b0:43:0b:a7:66:
                    51:d7:6f:fa:45:03:63:fd:75:19:42:68:f7:7a:0a:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:07:42:E7:32:60:C2:4E:94:D7:FD:44:EF:92:B8:67:B6:4A:6C:77
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF5C358210D911EE856463214AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:0b:d3:0e:03:c0:47:a0:14:45:ed:1c:ef:ca:6f:0f:f3:f0:
         50:8d:e6:09:b4:4d:db:30:07:3c:b1:cc:5a:68:69:e8:50:51:
         ca:34:23:14:3f:d8:42:e6:aa:45:36:e6:bc:e6:59:3c:c0:76:
         21:ab:41:e4:9a:9f:75:18:8e:3c:99:44:db:92:2a:65:64:f1:
         10:77:6b:36:6e:27:5c:15:89:41:9b:7b:a7:df:4a:37:83:52:
         d7:16:8c:ee:01:93:52:c8:63:20:0f:63:61:48:9a:16:d3:dd:
         b7:c1:65:94:9f:7a:ea:81:e7:af:d6:f3:71:10:c0:b1:39:38:
         4e:52:7c:16:dc:5a:61:e2:e5:26:44:8e:9c:d5:b7:d5:e5:c4:
         f7:43:35:3c:cb:c9:36:82:5c:0f:2f:4e:91:4c:df:0c:0e:05:
         5f:59:73:58:11:e5:22:5f:32:c1:8c:51:59:9b:6f:63:fe:55:
         d8:9d:e1:26:42:db:5f:c7:58:96:03:cd:ae:76:7f:d9:1a:5c:
         dc:81:fd:65:eb:c2:fd:bb:22:a0:d0:4e:45:02:1e:29:a1:48:
         44:8a:f1:63:03:b6:e9:bb:b1:81:00:03:d6:79:5e:7a:4a:d8:
         89:17:b6:47:10:21:7a:80:f4:a5:c1:64:8d:93:17:4b:75:d7:
         e3:c1:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org