Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2012F548A45411EFBEF1415D762E951A.roa
File:                     2012F548A45411EFBEF1415D762E951A.roa (raw, json)
Hash identifier:          WHqCsN96H5wwGXJxdpj2VgYdXRgfiDK0fcCjfCPudHo=
Subject key identifier:   A3:60:D7:9E:3A:97:32:64:10:CB:94:91:6F:3F:0F:21:90:70:00:7C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       D3E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2012F548A45411EFBEF1415D762E951A.roa
Signing time:             Sat 16 Nov 2024 19:51:09 +0000
ROA not before:           Sat 16 Nov 2024 19:51:05 +0000
ROA not after:            Tue 26 Nov 2024 19:51:05 +0000
asID:                     62816
IP address blocks:        45.205.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54240 (0xd3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 16 19:51:05 2024 GMT
            Not After : Nov 26 19:51:05 2024 GMT
        Subject: CN=6738f7ad-5670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:85:49:3a:a0:46:f0:4c:74:21:c1:20:fc:
                    0c:b6:a5:66:79:30:58:e6:ff:77:4a:24:6b:8c:42:
                    55:33:61:9b:74:f9:a2:e8:b7:d2:d0:e9:4f:84:a7:
                    62:fd:bf:79:0c:72:b9:7c:63:6f:db:55:02:81:9f:
                    27:4a:a4:b9:4a:06:87:1e:45:66:f5:64:a0:7a:58:
                    b2:7c:86:f6:98:06:88:0a:8a:b8:02:65:71:13:7c:
                    49:30:fb:e4:56:99:8d:3b:71:c6:40:30:38:7e:b9:
                    3b:75:1f:7d:17:ae:4b:cf:36:f6:c0:85:7f:81:d8:
                    86:46:aa:e1:c0:fe:89:60:0a:49:3c:7d:54:2b:d3:
                    16:91:41:dc:b6:b2:82:cd:e8:c0:d6:32:79:cf:77:
                    62:31:cb:3a:49:7a:b6:3f:fb:40:ca:7c:e7:b0:74:
                    3c:95:03:9f:5f:f5:fe:9b:5d:06:88:08:1e:48:0c:
                    90:7c:f3:c9:1f:0b:da:27:74:01:58:34:f8:03:d8:
                    9c:8b:d9:af:79:ce:a8:3c:26:7e:11:ae:f4:30:d1:
                    c4:b2:2f:0c:80:47:b2:6b:56:55:b1:46:52:24:ce:
                    57:47:ce:49:c4:bd:21:0b:16:16:80:3e:b2:07:a2:
                    1a:9e:9b:dd:cb:32:7b:bf:82:60:0b:aa:ec:1a:20:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:60:D7:9E:3A:97:32:64:10:CB:94:91:6F:3F:0F:21:90:70:00:7C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2012F548A45411EFBEF1415D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d3:e7:e7:f0:7c:12:92:90:30:da:77:17:e6:a5:6b:89:01:
         ba:be:92:e4:ec:2f:df:49:af:92:d7:29:d8:33:b4:a4:1c:0b:
         64:d2:f3:23:9e:48:0f:a4:64:7a:ec:53:8b:6f:ad:6e:3b:b6:
         24:4b:02:5b:e4:06:93:ff:bf:c2:13:38:e0:66:0c:e8:04:b4:
         52:9a:08:f6:14:52:8d:bf:8b:9c:6a:19:27:da:0e:dd:54:73:
         25:d8:4f:1e:08:ec:36:8f:7d:2e:47:c0:35:cc:23:35:9b:b4:
         48:2c:79:1e:f8:94:d2:f8:57:60:78:fa:25:8a:b7:13:a7:8d:
         38:ff:60:a9:21:cb:7b:3b:03:6f:91:b2:5e:a2:e7:62:96:76:
         19:d2:6d:52:b5:31:47:8f:45:c8:27:09:1f:8b:51:e2:61:26:
         df:07:9b:aa:1c:b5:1f:52:59:c4:3b:c2:50:56:a9:cc:a4:53:
         cc:61:48:73:7f:6c:61:7c:35:cb:94:ce:d1:c5:57:62:d2:1b:
         5f:4b:78:75:07:ec:d2:11:1a:bd:f8:9d:1e:49:6d:4f:31:dc:
         10:34:9a:92:1c:43:b3:ab:85:e0:5c:84:1e:d5:c9:00:46:f0:
         01:d0:e3:3b:d2:ff:2e:da:6c:cb:33:53:e2:6d:ed:c2:00:01:
         38:2d:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org