Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E42849B208F911EEBAA462344AD9E6FC.roa
File:                     E42849B208F911EEBAA462344AD9E6FC.roa (raw, json)
Hash identifier:          Syg56T/gsGH6M6YitJiH4D/1BcU61Tp2FkUr1cKyzh0=
Subject key identifier:   E8:53:EC:77:C6:33:A4:EC:FA:3F:90:02:1D:2A:66:69:81:2D:E7:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2B2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E42849B208F911EEBAA462344AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 08:19:46 +0000
ROA not before:           Mon 12 Jun 2023 08:19:43 +0000
ROA not after:            Sat 25 May 2024 08:19:43 +0000
asID:                     131178
IP address blocks:        45.201.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11055 (0x2b2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 12 08:19:43 2023 GMT
            Not After : May 25 08:19:43 2024 GMT
        Subject: CN=6486d522-ab4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:e1:da:91:8b:4e:41:e0:eb:ea:10:1a:fb:
                    bf:54:52:4d:73:54:21:04:b1:88:43:2f:ef:09:d0:
                    25:5c:5d:af:8e:3f:25:e3:e4:e6:c6:e6:d2:22:09:
                    90:a6:69:ba:52:29:23:26:cc:81:df:07:ee:2c:ec:
                    be:8a:4c:35:6c:ef:5a:bd:73:a7:7b:e5:41:7f:9b:
                    31:78:93:0f:a4:f2:91:ba:2b:7a:40:d6:1c:e1:d0:
                    5f:be:af:ec:c3:8e:32:39:ea:ca:f4:92:66:97:a3:
                    5f:01:2c:a9:eb:bc:39:7c:8e:6c:2d:65:a1:1e:c8:
                    25:a4:74:78:d2:72:16:de:83:65:49:a0:7c:c3:d0:
                    80:f1:13:f5:4c:50:a1:68:b2:f8:c5:7e:f1:1e:3b:
                    d5:91:9c:98:7c:8d:75:d1:76:2d:da:42:30:b7:ca:
                    08:40:20:07:23:6a:fe:cf:e7:e8:67:bd:06:b2:11:
                    c2:f3:47:c4:b5:c4:99:db:06:d0:8c:5d:10:bb:40:
                    ec:1f:d0:2b:e6:d7:a3:bc:ce:c6:4c:95:41:ad:82:
                    15:f8:cd:49:53:b2:65:48:5a:af:dc:b2:25:ae:aa:
                    65:dd:8c:85:c3:24:5b:b9:a1:eb:15:f3:a8:dc:f3:
                    c6:f4:22:4a:ae:96:ec:34:53:b0:0b:e2:5d:04:8c:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:EC:77:C6:33:A4:EC:FA:3F:90:02:1D:2A:66:69:81:2D:E7:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E42849B208F911EEBAA462344AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:5a:46:9d:98:50:71:d5:ee:88:c9:28:85:88:75:43:06:60:
         9b:da:7c:65:4f:d7:f1:b8:43:79:28:50:4e:09:c1:0e:49:b5:
         08:c2:23:9a:0d:9d:b8:0d:91:30:52:5d:b7:58:53:cf:09:df:
         d9:44:2a:17:d3:11:e4:e5:34:0a:a3:4d:2e:4e:76:ac:0f:8e:
         85:8e:df:4c:e5:f5:c4:0c:d4:23:22:01:78:c8:84:86:f8:40:
         29:60:28:e8:3a:12:cb:c3:4d:13:31:66:0c:60:40:3e:dd:bb:
         06:ae:69:92:3b:a1:2d:25:67:1b:a9:8a:d9:b0:34:2b:af:c8:
         2c:96:67:8a:d1:01:52:74:b7:a6:59:19:45:34:df:9b:7f:7b:
         34:db:d1:b6:01:29:b9:39:a1:26:cb:8e:e9:26:71:26:37:25:
         73:e3:da:95:5d:61:4d:b9:6c:73:30:16:86:8b:52:0c:5e:99:
         e4:19:2e:ee:29:9b:67:e3:77:5a:9e:2a:3e:04:83:1e:5e:88:
         87:38:7b:1c:8b:03:d8:36:86:c4:36:cf:e0:ad:8b:c6:54:a4:
         db:fd:28:9b:b4:d7:fa:04:59:90:b9:b1:03:24:78:35:77:fb:
         85:31:3c:41:4c:b0:bb:9d:7b:d4:90:19:25:f3:34:84:9b:5b:
         ea:0b:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:43:00 2024 by rpki-client on console-fra.rpki-client.org