Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/B1B22C14798311EEA5C954334AD9E6FC.roa
File:                     B1B22C14798311EEA5C954334AD9E6FC.roa (raw, json)
Hash identifier:          Pe3W5d67FeDOdg0O6CjHDs+dvLUaa9BBxTbqB+4ADZM=
Subject key identifier:   B1:29:4E:B8:F4:67:1F:0A:50:6C:C9:63:84:FC:CB:47:1E:1C:3A:1E
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       011B
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/B1B22C14798311EEA5C954334AD9E6FC.roa
Signing time:             Thu 02 Nov 2023 13:28:22 +0000
ROA not before:           Thu 02 Nov 2023 13:28:19 +0000
ROA not after:            Sun 02 Nov 2025 13:28:19 +0000
asID:                     15964
IP address blocks:        154.72.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 12 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Nov  2 13:28:19 2023 GMT
            Not After : Nov  2 13:28:19 2025 GMT
        Subject: CN=6543a3f6-e57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:81:c8:6c:4a:20:f3:d0:9d:6e:fc:df:d1:
                    71:2d:04:13:e3:15:d4:fb:98:67:0b:f2:3f:71:06:
                    4d:49:e6:69:b1:b1:52:21:cd:b4:9e:b6:61:33:b1:
                    f6:f7:7d:a9:a7:cd:4d:5f:db:54:e1:e7:db:be:bb:
                    aa:50:f2:b2:34:ff:de:7a:55:5d:7b:f2:2e:80:a9:
                    9f:53:01:88:93:61:a0:f6:03:6e:49:42:ae:97:6a:
                    2b:b3:27:e5:85:88:00:53:46:40:42:34:f1:b0:76:
                    c4:29:65:e8:07:58:8d:58:b5:c8:27:99:27:e3:b9:
                    09:23:b0:5e:0f:2e:e5:91:97:a0:a3:c9:f2:0f:6d:
                    76:e1:95:a2:15:52:b4:06:d4:9d:6e:18:28:b8:0c:
                    69:7b:ee:7b:b6:66:b4:cd:ff:f5:10:d2:97:fe:6b:
                    ba:fa:a6:3a:f3:71:02:08:26:7c:d9:f1:36:3a:7d:
                    ee:01:b0:f3:fe:6a:bf:b1:de:83:c9:d6:f4:f5:a8:
                    17:ee:43:75:8f:c0:dd:d2:b9:a8:9f:9c:e2:66:3a:
                    38:d7:93:a6:46:00:75:f4:27:21:7b:9e:bd:63:bd:
                    23:39:c6:58:47:51:f1:0c:f1:72:6e:d9:23:89:02:
                    96:49:0c:bd:80:a5:15:4e:01:d4:a1:bd:82:0d:48:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:29:4E:B8:F4:67:1F:0A:50:6C:C9:63:84:FC:CB:47:1E:1C:3A:1E
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/B1B22C14798311EEA5C954334AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.72.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:16:1b:c9:ca:fe:af:60:e3:c6:ed:87:92:81:ec:28:ff:
         c4:73:a1:5d:47:44:6b:9d:8f:42:64:79:07:0a:86:4d:b8:ee:
         b4:a5:4e:d4:b3:63:ce:0e:03:29:82:86:9f:03:fd:19:76:4e:
         e6:f2:4d:64:14:ab:54:88:19:51:03:78:b9:22:b1:a5:6b:26:
         25:78:04:69:fd:7c:b7:30:5a:65:af:8e:0e:8f:08:2f:25:08:
         a0:24:3a:c7:11:26:4b:21:64:32:06:6e:c6:2a:fe:b2:4c:8d:
         32:1e:fd:97:4f:a1:91:be:67:f3:2a:89:d0:3f:cd:aa:8e:ac:
         cd:14:ff:88:bf:0b:4b:cf:8e:33:7b:fc:1c:e2:20:d7:7f:8a:
         6f:98:b9:1a:84:30:32:15:8a:e0:d0:bb:a8:dd:d4:c7:68:d5:
         c4:14:11:ac:e1:d5:65:fe:94:21:88:fa:e7:2e:20:8b:77:97:
         c3:ff:f5:2b:5a:9e:58:60:52:1b:89:af:25:4d:20:94:d9:4a:
         20:34:e1:bf:60:f0:9e:ba:36:4e:d3:59:36:b5:ac:95:5b:ce:
         bc:8d:04:61:e7:ba:69:4d:93:ca:7e:83:57:d2:d8:5c:af:64:
         80:d5:0f:ba:ae:04:44:de:10:a2:ff:be:65:87:99:af:6f:ef:
         3b:70:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 02:53:49 2024 by rpki-client on console-ams.rpki-client.org