Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D1A446FAE911EE9DCB946D017001B1.roa
File:                     E6D1A446FAE911EE9DCB946D017001B1.roa (raw, json)
Hash identifier:          k/qzx99JpqHd/vPmw0V7PxnyM6xhsIBJXc21X79NngI=
Subject key identifier:   81:37:E0:05:BB:C7:8F:7A:A0:4B:87:0D:89:6C:82:D9:FD:08:6A:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       AC9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D1A446FAE911EE9DCB946D017001B1.roa
Signing time:             Mon 15 Apr 2024 05:35:00 +0000
ROA not before:           Mon 15 Apr 2024 05:34:57 +0000
ROA not after:            Thu 30 May 2024 05:34:57 +0000
asID:                     63139
IP address blocks:        154.94.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44186 (0xac9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 15 05:34:57 2024 GMT
            Not After : May 30 05:34:57 2024 GMT
        Subject: CN=661cbc84-fcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:66:3f:b5:ce:2a:6f:b4:6c:8b:07:2b:46:
                    26:ca:07:a3:a9:92:7d:b7:34:42:7b:47:b1:39:50:
                    2b:e5:ed:8a:ac:35:73:f1:36:77:64:da:3f:5b:27:
                    67:59:80:d2:3e:46:07:c3:8b:73:d0:3c:33:b0:ac:
                    8f:51:a6:0d:bb:bd:ea:e8:c2:49:77:38:d4:bc:d4:
                    0f:ac:a0:f9:ac:71:56:70:92:33:65:fd:81:e2:2a:
                    ff:72:37:5f:49:e1:ad:f5:1e:b5:cc:e2:84:7b:51:
                    05:24:52:54:b7:63:56:f4:09:4b:06:7b:7b:d4:1f:
                    6e:51:de:34:c7:9f:61:dc:19:92:be:57:67:54:1e:
                    4c:e3:b6:a1:62:58:83:77:89:e0:b3:5a:62:78:6f:
                    b7:50:23:e8:6e:03:b0:7d:6e:58:bf:8b:98:8b:bb:
                    e9:80:72:5f:e9:22:87:2a:62:03:91:2d:07:4d:92:
                    ea:cd:43:c9:2a:9d:3b:6f:fe:f4:3c:48:d3:70:70:
                    a7:c3:b8:29:04:2d:f9:ed:33:6b:33:8b:1d:04:0e:
                    44:07:98:30:1e:73:64:27:90:02:b7:e8:a6:16:f1:
                    ff:08:f6:5f:d8:09:6c:e4:fb:bf:cb:d2:53:cf:73:
                    07:40:e2:74:8d:f5:7a:da:ff:e1:67:b6:3d:7e:6f:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:E0:05:BB:C7:8F:7A:A0:4B:87:0D:89:6C:82:D9:FD:08:6A:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D1A446FAE911EE9DCB946D017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f8:1d:cf:ac:0e:f1:b7:0a:9e:c0:20:66:13:69:3c:19:03:
         07:75:ae:2a:25:d7:23:8f:13:d5:87:dd:f8:4b:31:1f:30:ee:
         56:92:75:0a:e8:ea:93:4e:7e:c3:c4:1e:37:57:05:41:95:15:
         c6:84:03:a8:83:8a:6a:42:48:b5:9d:b5:88:44:8a:5f:0d:68:
         23:96:d1:56:c6:51:12:9a:d8:38:be:f6:be:40:25:ae:4e:8b:
         21:39:d5:cb:e3:b5:c4:e5:76:61:e9:ce:9d:15:c5:09:62:80:
         d1:a4:54:65:b2:df:34:ac:6d:76:02:0b:c3:26:cb:58:74:fb:
         e2:fd:db:36:7f:c3:69:eb:08:5f:fe:df:0d:8a:d2:ff:46:d5:
         07:e7:4e:06:0f:48:fa:31:40:92:65:d3:b0:e8:5a:70:a8:c0:
         5c:4c:48:92:03:f0:dd:3d:14:4b:2f:8b:93:0a:47:68:0c:70:
         b1:01:20:78:5a:b1:21:5d:1b:15:a3:54:bd:07:92:6b:4f:a3:
         b7:d3:2b:28:90:93:9f:1b:5d:cd:96:1d:ae:46:92:d6:b3:e2:
         63:3c:eb:db:12:f9:7f:81:bf:8a:9f:be:09:b7:b4:06:61:e9:
         37:ec:11:80:56:1a:7f:c1:43:1c:a3:7e:c0:f9:2c:d4:5d:a9:
         3d:1b:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org