Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56A00ACE73511EE854F80C0775412E6.roa
File:                     E56A00ACE73511EE854F80C0775412E6.roa (raw, json)
Hash identifier:          i4UIt/PEyq2NilaB1bjAtHG7kG6WebUzwwDvaogHhNE=
Subject key identifier:   08:C1:1F:2D:BB:30:71:54:04:CE:49:A4:58:84:0F:A0:F8:18:0E:49
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A366
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56A00ACE73511EE854F80C0775412E6.roa
Signing time:             Thu 21 Mar 2024 03:48:36 +0000
ROA not before:           Thu 21 Mar 2024 03:48:33 +0000
ROA not after:            Tue 23 Apr 2024 03:48:33 +0000
asID:                     44559
IP address blocks:        154.207.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41830 (0xa366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 03:48:33 2024 GMT
            Not After : Apr 23 03:48:33 2024 GMT
        Subject: CN=65fbae14-0d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:27:e0:5e:ae:c8:fb:ec:04:9e:d4:a5:54:
                    2b:11:3f:d6:87:cb:01:8d:7a:7e:79:cf:76:7b:76:
                    07:ff:d2:d2:17:a4:68:02:1a:61:9b:5c:7d:f6:a2:
                    a0:8e:46:84:33:6a:0b:1e:bf:46:ea:e1:77:c1:a9:
                    d1:55:00:8e:bd:2e:dd:12:38:69:d7:43:4e:fb:99:
                    7a:7f:f9:96:54:66:31:b9:91:8f:2f:05:1b:b4:db:
                    cc:f8:ce:73:ec:21:2e:33:2e:76:35:02:af:b4:8f:
                    4f:24:de:97:1d:6d:f0:2b:76:5e:a5:54:d1:fc:59:
                    fb:d9:79:b1:55:02:6d:11:ba:08:1e:68:96:c3:65:
                    54:2b:cb:0b:9f:5a:91:6f:0f:4e:04:ae:d0:7c:58:
                    09:3d:4e:99:99:6d:18:b9:94:1b:a3:5c:89:33:9d:
                    3d:00:ba:00:15:9e:0e:91:3d:ed:d6:6b:ed:46:95:
                    43:5c:b3:63:94:d8:c9:98:aa:cb:52:27:79:f3:26:
                    a7:e6:1d:8e:f0:0f:98:5b:23:ad:b5:89:d1:26:f8:
                    77:8e:fe:41:a5:09:a3:45:3e:2b:80:5a:16:d1:d5:
                    38:df:e3:e1:8d:66:10:73:de:5f:80:cd:21:4c:d6:
                    38:0d:8e:7e:6a:bc:e7:6a:aa:82:42:6c:0a:6c:90:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:1F:2D:BB:30:71:54:04:CE:49:A4:58:84:0F:A0:F8:18:0E:49
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56A00ACE73511EE854F80C0775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:c4:20:04:b4:9a:33:9e:d0:b0:63:d8:52:83:36:b2:d6:
         36:db:90:aa:bb:45:b0:22:8f:18:0c:b8:1e:a7:37:17:8d:60:
         0e:31:95:27:d7:ab:f3:83:58:0a:e3:dd:28:5a:74:5b:1c:62:
         13:55:31:06:fd:82:ab:a5:dd:35:f0:cd:3e:4a:27:25:01:71:
         49:45:b7:e2:92:e3:b5:e5:fb:30:6b:96:d2:b7:54:70:37:ee:
         5c:12:2a:e9:93:83:cd:02:c8:08:9e:b0:66:46:b8:71:5b:44:
         3c:f1:c7:08:75:3d:b5:e7:8e:79:98:bd:28:71:74:14:89:ca:
         54:ba:5a:20:c7:63:cf:da:fc:e4:91:38:0b:d3:df:e7:72:ae:
         e0:a1:69:90:27:fb:89:8f:28:8a:e9:33:b3:bb:b2:65:69:12:
         3e:61:26:c9:48:6a:11:ec:13:33:64:e9:46:9b:53:46:fb:bb:
         55:26:5b:11:64:62:fa:be:10:70:0a:c2:bc:84:63:3b:69:1c:
         ff:37:0b:11:3d:ea:13:8d:ae:e5:4c:3c:3c:ae:10:00:68:4a:
         9e:49:6a:96:bd:c9:70:c7:95:fe:87:8a:8d:de:b2:8e:33:99:
         f1:d5:28:9e:1f:2a:94:6e:4e:c0:05:36:cb:db:4d:7c:3e:86:
         54:6e:40:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org