Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/18FDE308695411EEA213537A4AD9E6FC.roa
File:                     18FDE308695411EEA213537A4AD9E6FC.roa (raw, json)
Hash identifier:          V8odt/rDJ3OY5lY//c3mo3wITWeSjVt8toR6RRQBTto=
Subject key identifier:   C9:9D:E2:84:53:DC:06:87:36:F2:E0:B3:FD:75:06:28:E0:CA:91:85
Certificate issuer:       /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial:       01E3
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/18FDE308695411EEA213537A4AD9E6FC.roa
Signing time:             Thu 12 Oct 2023 23:07:21 +0000
ROA not before:           Fri 13 Oct 2023 23:07:18 +0000
ROA not after:            Sun 13 Oct 2030 23:07:18 +0000
asID:                     25818
IP address blocks:        102.177.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
        Validity
            Not Before: Oct 13 23:07:18 2023 GMT
            Not After : Oct 13 23:07:18 2030 GMT
        Subject: CN=65287c29-8818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:45:a0:45:83:9c:bb:39:ae:63:e7:2f:41:
                    c0:54:e7:12:14:25:1d:07:52:7f:ab:cb:23:34:ce:
                    69:5c:4b:e3:f5:c3:7e:2b:4c:06:80:f7:2e:5e:57:
                    de:d5:8f:65:85:bd:b5:e4:2e:f1:92:99:42:93:1a:
                    b3:7c:dc:d2:56:a7:96:fe:76:7f:af:c7:f9:a5:b5:
                    9f:b5:e7:35:ea:52:0a:14:1d:9c:3e:cd:9e:83:45:
                    ad:37:f7:80:40:eb:6f:b9:01:0c:3f:68:0f:a4:45:
                    7a:e2:1a:0e:a8:d0:b7:eb:5f:93:6b:64:7b:ee:c0:
                    72:ec:6e:69:0e:1d:03:d5:e3:8c:76:07:40:71:c2:
                    20:ba:84:33:0f:ac:ae:58:41:47:ff:6a:56:8d:d0:
                    6c:dc:7b:fc:08:23:f2:c3:a6:8c:05:79:bc:4c:f4:
                    e5:e2:f7:91:cb:85:82:5f:7c:a9:c4:d5:b4:29:76:
                    dd:9b:40:66:78:42:e8:e2:d0:2a:76:41:aa:54:b0:
                    bd:fd:50:c7:85:68:f6:3f:7b:0a:f1:fb:be:46:3f:
                    df:63:c3:67:2d:e5:eb:a7:c1:7c:b2:1c:53:c7:58:
                    28:68:3a:28:f3:94:25:30:fd:72:02:b9:53:01:69:
                    2a:7a:ce:9b:a1:22:31:34:dc:f5:74:f1:13:c1:f8:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9D:E2:84:53:DC:06:87:36:F2:E0:B3:FD:75:06:28:E0:CA:91:85
            X509v3 Authority Key Identifier:
                keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/18FDE308695411EEA213537A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:6e:4f:05:77:64:2e:5a:bc:c0:3b:34:9d:80:8b:79:9b:
         f4:e8:4a:58:91:7e:13:c7:e3:f1:ca:2f:28:90:e5:24:09:b3:
         6d:e6:b8:88:3d:d4:c0:84:5d:da:b8:c4:72:0b:50:c3:19:54:
         b8:24:90:f6:4b:d1:77:20:b1:c7:b8:4e:94:31:07:8f:b3:cd:
         de:0a:b0:04:52:65:b2:0b:30:e0:e6:16:12:aa:77:02:b8:37:
         76:5b:82:ac:fe:e7:f4:a0:b7:b2:e1:9d:9b:27:dc:86:2d:bf:
         f2:73:f9:b5:b4:58:c8:09:74:2a:3a:83:68:0d:8a:43:88:28:
         89:b5:c7:44:4e:25:36:ef:3e:24:50:39:1a:49:a1:bc:7c:63:
         0d:93:fd:21:52:62:f7:69:3b:53:e1:58:3f:58:02:17:80:6f:
         58:f7:71:42:74:4d:93:ea:11:30:30:b8:0d:e1:34:55:8f:06:
         f4:5e:86:78:40:7f:15:50:e6:a0:5b:26:5b:34:d5:25:15:7f:
         5f:ce:ad:1e:5b:bd:f0:ea:fa:9d:bd:c3:37:5f:c9:28:d3:99:
         f3:bb:ae:55:bf:b1:70:39:3b:d2:f0:cf:82:81:54:f8:09:fd:
         a2:fa:b3:8c:f5:3e:51:9d:e5:ee:bc:57:f4:98:ec:45:7c:cb:
         1c:b5:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org