Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/75003F36428711EFA3917E69762E951A.roa
File:                     75003F36428711EFA3917E69762E951A.roa (raw, json)
Hash identifier:          YrqehZ9aTTD1SJptceMXxXj5BazN802PieW8aLLUgFI=
Subject key identifier:   2A:3D:6D:88:A8:74:C5:BB:DF:AE:E7:81:12:4D:65:28:C6:56:E4:8A
Certificate issuer:       /CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
Certificate serial:       06
Authority key identifier: 6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/75003F36428711EFA3917E69762E951A.roa
Signing time:             Mon 15 Jul 2024 08:51:42 +0000
ROA not before:           Mon 15 Jul 2024 08:51:39 +0000
ROA not after:            Mon 31 Jul 2034 08:51:39 +0000
asID:                     49902
IP address blocks:        62.61.192.0/18 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                          rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
        Validity
            Not Before: Jul 15 08:51:39 2024 GMT
            Not After : Jul 31 08:51:39 2034 GMT
        Subject: CN=6694e31e-ddd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:43:51:50:07:56:0a:94:ee:41:fc:ad:cb:
                    b8:b3:7f:40:50:06:c8:34:47:7a:e5:09:bd:ee:49:
                    90:4d:b1:c5:bc:e5:76:74:88:5d:dd:d6:4d:40:01:
                    2d:bc:ee:fa:20:2f:70:6f:55:44:51:6c:89:ef:30:
                    91:a0:83:03:a8:3a:6c:52:ce:f5:38:08:bb:2e:14:
                    e5:e6:8a:1d:ef:b0:10:e7:4a:06:f9:66:53:4f:a8:
                    25:46:64:08:ea:e3:cc:a2:af:e5:14:ca:c3:ad:36:
                    08:00:bf:0d:ab:e4:eb:39:a8:0e:cb:a7:be:77:b9:
                    88:b9:c9:d5:30:6f:1a:18:19:4c:4b:9e:38:f2:22:
                    8f:b4:ad:7b:c2:5e:55:c7:3a:9c:3c:3f:6a:77:09:
                    00:4d:9d:93:1f:b9:35:35:c4:d6:00:b3:0b:84:97:
                    6c:f8:21:fe:1f:a7:c2:6d:63:70:52:a7:6e:1c:a4:
                    c2:c8:f7:3f:4f:33:dd:6e:ac:d6:e3:da:18:95:a0:
                    ee:c2:03:87:6e:75:a5:7d:c9:5e:e0:67:d5:be:01:
                    7c:b8:06:f3:9f:81:39:5f:f8:cb:ef:b0:5a:ef:ff:
                    84:c0:81:4b:30:47:1c:5f:6e:26:c2:43:7f:12:a1:
                    04:83:4f:1e:b1:64:02:c3:4c:b5:56:af:55:42:dd:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3D:6D:88:A8:74:C5:BB:DF:AE:E7:81:12:4D:65:28:C6:56:E4:8A
            X509v3 Authority Key Identifier:
                keyid:6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/75003F36428711EFA3917E69762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.61.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:a3:bf:e0:f8:0b:11:56:00:50:0e:a6:96:f1:26:bd:1a:
         bb:eb:3a:96:6b:1e:15:05:0b:4a:67:0b:0d:3a:b2:7a:72:d0:
         14:d1:c5:1e:59:73:14:91:60:75:99:d3:37:c9:5c:1d:3c:2f:
         6a:68:e4:67:fe:26:7b:f7:bd:23:47:1d:f9:19:8f:0d:79:f0:
         b2:63:bb:46:c6:7a:b3:f3:ed:e4:69:78:9e:e8:76:d9:38:47:
         e5:42:6a:11:40:86:d3:2c:4f:49:bb:d2:6d:d9:d7:ac:a7:5f:
         e2:91:06:3d:5b:15:61:f8:ae:3e:ed:07:c6:33:0f:19:18:aa:
         9e:de:99:31:e3:35:b0:63:d1:6d:7d:8f:8f:90:c8:c9:a1:86:
         42:0f:4c:b4:09:9d:50:4c:37:1b:16:1b:cb:d2:8d:6f:84:1e:
         da:29:8b:f1:42:a5:1f:ec:34:b0:8b:0f:93:04:d7:8b:98:c9:
         fe:5b:94:24:01:ca:36:63:be:31:6c:a9:08:90:8f:a1:f0:1d:
         56:23:fe:9f:e6:3c:b6:84:1e:ed:1b:be:d9:42:79:7e:c1:0a:
         28:20:22:f1:a3:67:2a:10:c3:fc:8c:73:ab:c9:f2:30:59:de:
         6b:28:ce:b7:a7:b1:2c:ca:c9:16:c5:d6:6b:e7:8e:12:10:0f:
         de:5a:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org