Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/0EB33C3E515B11ED8AE4D0AAF1222468.roa
File:                     0EB33C3E515B11ED8AE4D0AAF1222468.roa (raw, json)
Hash identifier:          eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=
Subject key identifier:   9F:E9:0B:15:65:99:A5:C7:8D:3E:45:54:57:DE:4F:FA:46:4D:BD:05
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       01E8
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/0EB33C3E515B11ED8AE4D0AAF1222468.roa
Signing time:             Fri 21 Oct 2022 16:11:45 +0000
ROA not before:           Fri 21 Oct 2022 16:11:40 +0000
ROA not after:            Fri 31 Oct 2025 16:11:40 +0000
asID:                     328840
IP address blocks:        102.220.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Oct 21 16:11:40 2022 GMT
            Not After : Oct 31 16:11:40 2025 GMT
        Subject: CN=6352c4c1-fe4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:ce:2d:47:3a:e6:84:29:dc:9a:bc:af:46:
                    de:b6:a1:66:71:87:42:b6:5f:51:f1:b4:14:2a:07:
                    a1:8f:c2:d7:0a:c9:1c:d5:98:f4:87:24:0c:dd:64:
                    f5:44:f7:ad:14:e4:b4:e2:2b:33:34:8c:ac:2d:75:
                    e5:c0:89:7e:f3:66:89:f1:ec:b3:e5:d5:d3:c6:ef:
                    09:fb:78:15:2f:51:c3:5c:18:bd:ed:fc:7f:81:26:
                    2c:92:6e:54:8a:a1:6d:3c:c7:5d:ba:c8:f5:eb:5d:
                    eb:df:37:4f:d4:1c:21:f8:40:09:63:c7:1c:13:a4:
                    31:c4:e9:2c:3e:91:11:43:26:4b:0b:d0:fa:46:e8:
                    b0:b7:81:76:7a:a4:94:ab:81:1d:8e:dc:aa:45:40:
                    da:28:bf:40:88:9e:f2:2e:9a:7a:42:0b:3e:8a:c7:
                    33:b1:d5:41:e4:e1:08:cf:9f:25:0a:80:1c:1e:64:
                    f3:fd:20:2f:be:4a:2b:94:b1:da:3a:6b:b6:fd:4b:
                    95:92:0c:35:e7:41:77:a1:18:d6:80:f7:b7:9a:b7:
                    57:87:85:4e:c4:b4:6a:fc:b1:cf:bb:29:a4:aa:30:
                    e9:94:47:0b:e6:15:7f:07:84:18:a1:66:4c:a5:10:
                    44:48:99:4f:a4:94:1d:47:89:15:b5:83:70:6e:27:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:0B:15:65:99:A5:C7:8D:3E:45:54:57:DE:4F:FA:46:4D:BD:05
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/0EB33C3E515B11ED8AE4D0AAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:11:61:33:af:4f:89:01:fe:04:50:58:58:dc:6d:e8:35:84:
         4f:c5:eb:18:f8:4d:69:57:1c:f3:d9:ad:91:b8:89:61:cc:40:
         c9:33:53:92:26:fd:76:3a:e2:97:ec:34:b3:05:2d:d6:cb:d5:
         09:1d:bb:17:c0:fa:e3:c0:18:d3:90:8d:9b:3f:b8:7c:87:4d:
         e4:c4:c7:25:f2:88:59:3d:b6:d8:b2:59:7e:2d:7d:e5:95:fd:
         44:3d:b0:98:3c:fd:e1:10:0d:12:e4:2a:e8:9c:ea:d0:87:1a:
         81:13:d9:e7:47:09:32:ae:43:fd:13:1b:05:74:ca:20:dc:8a:
         99:dc:4e:40:3a:a1:52:70:c5:3e:84:61:e8:1f:af:3c:38:26:
         2f:a4:59:4b:0d:2c:0c:0e:c9:77:03:28:96:ff:11:ab:1d:50:
         db:5c:4e:13:ae:62:3f:f0:fb:61:b6:71:a2:e9:41:18:3f:38:
         8b:8c:4f:4a:3a:ba:e2:6b:34:3c:3d:16:0a:b3:a6:4d:7b:52:
         c1:5c:fa:d2:d2:4d:2e:7d:33:47:34:7b:a1:19:7b:e8:0b:bb:
         35:94:7d:26:14:8e:d2:85:0f:b0:00:cb:88:21:75:c7:92:58:
         be:21:50:03:5f:13:05:9f:ae:94:c1:c0:ed:c6:93:92:46:c7:
         5a:4f:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:53 2024 by rpki-client on console-ams.rpki-client.org