Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9BDC42C612E11EF9A911495762E951A.roa
File:                     E9BDC42C612E11EF9A911495762E951A.roa (raw, json)
Hash identifier:          7CilQXfsHIpT+52ut5p0H6jYPCNmPnEh6rMMm9MZYVs=
Subject key identifier:   A2:07:0C:74:70:25:B2:2A:A0:81:29:B6:27:96:BB:74:E2:4C:E1:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       E45D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9BDC42C612E11EF9A911495762E951A.roa
Signing time:             Fri 23 Aug 2024 09:05:59 +0000
ROA not before:           Fri 23 Aug 2024 09:05:56 +0000
ROA not after:            Mon 25 Nov 2024 09:05:56 +0000
asID:                     213323
IP address blocks:        154.197.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58461 (0xe45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 23 09:05:56 2024 GMT
            Not After : Nov 25 09:05:56 2024 GMT
        Subject: CN=66c850f7-a394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f4:aa:34:68:7d:cc:76:ed:f7:4e:28:3e:7e:
                    d0:d1:37:59:70:0c:bb:66:63:eb:7d:3d:d2:b6:3a:
                    d6:1c:ef:a4:c9:5d:e1:fc:35:f1:6d:34:5c:a6:ba:
                    df:9f:39:e6:93:31:f3:09:51:73:3e:da:72:bc:9b:
                    5c:49:4e:67:71:2f:f6:94:02:75:14:09:3e:8a:2d:
                    79:1b:89:cf:f6:b0:69:d6:2e:50:7e:6f:08:cf:02:
                    18:ee:51:45:b9:15:93:6f:7b:6c:37:45:ee:23:8f:
                    f1:44:fb:88:8e:74:87:86:f3:c9:46:ec:fc:e7:66:
                    dc:e7:94:97:73:8d:86:3a:1a:f5:ce:1d:b7:d9:f6:
                    8b:b6:b1:8d:f4:a6:c7:cf:05:a9:09:4d:8b:db:c1:
                    9e:17:60:19:08:87:dd:15:7e:38:18:6d:cb:08:24:
                    15:2e:ca:5d:bb:31:16:fc:2c:cd:c5:0a:a4:ee:83:
                    3e:53:9b:0c:0a:0e:a9:89:95:eb:53:4a:5f:a7:62:
                    89:9e:ec:ca:0c:6d:21:0d:66:96:30:81:de:11:70:
                    0b:da:3d:65:02:f4:e9:d3:d7:73:76:5f:30:fc:31:
                    a7:62:8c:01:9a:c9:5f:65:01:75:dd:f0:11:14:f7:
                    cf:b8:7f:04:e1:ca:93:32:93:8d:49:cb:ca:3f:36:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:0C:74:70:25:B2:2A:A0:81:29:B6:27:96:BB:74:E2:4C:E1:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9BDC42C612E11EF9A911495762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:61:c0:36:95:1e:8b:f3:c5:b8:15:d4:6d:28:ff:cb:26:40:
         59:ca:af:57:85:16:a0:a7:5d:34:03:b4:79:49:da:aa:af:2c:
         f8:11:4f:b1:df:05:59:ec:29:5e:99:c2:56:93:df:78:9d:3b:
         b2:67:aa:ee:09:55:d8:15:36:f4:97:7f:6c:4f:ff:04:64:6c:
         ba:22:c6:c7:7b:66:3f:99:2d:84:d9:d4:8b:72:be:a7:52:16:
         63:ae:78:85:18:79:c6:21:2b:82:17:9a:6a:1a:13:e1:1c:0d:
         87:f0:04:23:b9:0a:ec:bc:b6:53:e7:07:42:ec:d2:44:c9:0f:
         c9:ab:09:70:89:98:75:0a:48:0f:63:ab:e0:16:3a:b8:ec:28:
         22:86:bc:01:14:d4:05:3c:52:d9:21:2a:98:7a:bb:0a:21:50:
         28:8b:bc:a3:16:01:c7:1d:fd:47:e9:b5:c4:39:c9:0c:1d:e7:
         38:4c:07:25:31:65:79:93:1c:d1:b5:73:e5:0d:cb:18:9e:1e:
         39:c9:51:a0:34:3d:66:7b:00:ea:92:4b:ec:b2:8e:39:f2:84:
         d1:68:93:5d:8f:52:df:8e:9b:70:0d:bb:f5:8b:20:30:7b:95:
         ae:46:6d:6c:63:a8:83:db:1e:0a:a8:82:f1:0a:6a:5f:35:5f:
         56:f1:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:29 2024 by rpki-client on console-fra.rpki-client.org