Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A2F472A2C511EEAF064327D25BE465.roa
File:                     E3A2F472A2C511EEAF064327D25BE465.roa (raw, json)
Hash identifier:          XR5IOG9DzBTKwNUNM1tovZWeip3fktSowG09fLCcypQ=
Subject key identifier:   83:17:E5:19:97:ED:F8:9E:09:FF:7F:48:01:2B:4F:84:3D:BA:24:09
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       6693
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A2F472A2C511EEAF064327D25BE465.roa
Signing time:             Mon 25 Dec 2023 01:35:31 +0000
ROA not before:           Mon 25 Dec 2023 01:35:27 +0000
ROA not after:            Tue 07 Jan 2025 01:35:27 +0000
asID:                     139057
IP address blocks:        154.85.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26259 (0x6693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 25 01:35:27 2023 GMT
            Not After : Jan  7 01:35:27 2025 GMT
        Subject: CN=6588dc63-9990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:b8:60:1b:a1:27:1a:55:60:a6:d6:4c:75:
                    37:0c:89:58:83:90:25:f5:2f:de:0c:38:09:d8:3d:
                    6b:9e:ad:f6:61:66:c9:b0:0a:97:f3:e9:3d:29:20:
                    ff:d9:81:c5:20:4f:b7:83:13:ec:f3:d1:2e:dc:3d:
                    d2:2c:c3:11:2a:2e:1f:a8:0d:49:fb:43:68:12:94:
                    3f:81:c8:df:93:be:5a:58:8a:32:5c:b2:eb:8a:27:
                    fd:08:79:09:15:9e:ee:ce:78:13:c9:85:92:15:91:
                    9d:c2:ed:82:8a:d5:8c:21:eb:58:64:25:bf:e5:1c:
                    4c:1c:e8:37:8c:c4:f9:e6:03:46:a9:41:28:7d:27:
                    39:43:21:ea:ac:8f:e3:88:97:96:d5:b5:61:d8:6c:
                    28:f6:7e:d7:66:23:5e:b3:e6:08:ad:b7:e5:c5:ec:
                    69:42:06:57:28:23:2c:9d:e1:e1:a3:f2:98:2f:ed:
                    fe:5f:89:59:7c:99:81:b3:04:4b:d7:c3:7e:86:aa:
                    f5:e7:1e:ff:88:2e:14:fa:08:31:ed:4c:f0:26:a3:
                    db:9f:55:9a:cd:f0:a0:91:81:5a:82:12:78:c3:95:
                    c5:6f:ef:4e:37:71:a8:e5:07:9a:e8:2c:c4:78:d5:
                    65:1d:ba:49:17:f8:cc:47:e8:3f:5b:42:0e:6b:ff:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:17:E5:19:97:ED:F8:9E:09:FF:7F:48:01:2B:4F:84:3D:BA:24:09
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A2F472A2C511EEAF064327D25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:a6:47:00:e2:22:12:27:49:32:8f:14:86:d4:12:de:0e:
         92:88:0b:ad:d7:60:81:ec:f6:df:13:12:fd:ce:e3:e9:b5:83:
         6e:94:02:9b:2d:5c:89:60:11:b4:bc:3c:3d:2e:05:6f:30:be:
         2f:c6:18:de:3d:53:0d:ae:fa:79:42:df:55:d9:91:a2:c6:1a:
         20:96:c1:6b:7a:8d:fb:eb:9d:4e:2d:7d:62:25:ab:87:db:65:
         26:03:c3:60:77:48:dd:55:2f:5a:8a:29:b9:c0:1a:62:bf:51:
         7c:14:87:de:dd:fd:f1:c1:91:e4:69:cf:b5:4a:e7:90:cf:0c:
         7d:9a:36:2e:37:dc:c5:aa:9a:de:24:9b:0e:69:dd:bb:3e:6a:
         4e:e7:ef:39:34:ac:61:57:06:f9:dd:ef:c0:43:08:5c:98:8d:
         57:d7:47:05:49:fd:72:ab:f3:85:44:3b:5b:5f:47:d3:46:89:
         ae:08:4c:38:16:f2:79:bf:74:a9:a0:5c:2a:59:b4:db:14:6f:
         e9:6a:ab:49:2c:1f:03:59:38:6a:97:7a:4a:89:d9:89:11:59:
         e1:3e:24:a2:e5:ef:85:e0:60:1d:fc:1d:35:7d:d3:db:93:2f:
         4a:47:18:99:03:9c:f1:b5:6d:c5:5c:3b:06:d4:ae:6c:56:14:
         2b:1f:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org