Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/02D884907E8511ECAB58C6705A40D577.roa
File:                     02D884907E8511ECAB58C6705A40D577.roa (raw, json)
Hash identifier:          SNdeKruEw+F1muT3aoOijqqzBEOfZy5fqMGm9iEDOmk=
Subject key identifier:   D3:24:AA:3D:C7:69:6F:F8:B4:9F:81:2E:08:14:6C:E1:84:71:60:7C
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       0141
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/02D884907E8511ECAB58C6705A40D577.roa
Signing time:             Wed 26 Jan 2022 08:50:29 +0000
ROA not before:           Wed 26 Jan 2022 08:50:25 +0000
ROA not after:            Mon 26 Jan 2032 08:50:25 +0000
asID:                     327980
IP address blocks:        41.216.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 26 08:50:25 2022 GMT
            Not After : Jan 26 08:50:25 2032 GMT
        Subject: CN=61f10b54-e45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:d4:c2:04:a6:d7:79:58:05:64:8a:57:13:
                    a2:01:0a:e3:ff:c8:87:3b:86:25:53:10:92:4d:10:
                    7b:dc:2f:02:ac:96:c3:af:ba:18:ad:11:6f:0b:1b:
                    c8:36:13:c1:c1:8c:43:ec:4f:e6:ca:f3:3f:45:54:
                    77:ed:48:94:fd:bd:b6:db:02:a3:a5:51:a1:c5:9e:
                    0d:a9:63:8a:49:66:6f:e4:34:9b:02:a3:59:4b:8a:
                    ab:19:45:be:d0:ad:68:18:c5:b7:6f:30:4c:82:56:
                    60:78:a2:6e:6f:e8:90:76:79:a4:b1:48:ae:b0:86:
                    47:ad:f4:b5:9b:60:48:48:cc:d8:39:5f:4c:f5:63:
                    31:00:be:f5:e4:c3:0c:5d:05:94:66:48:f5:c5:87:
                    11:de:e6:3f:f4:b9:2e:b9:63:3a:e2:9d:de:a5:c7:
                    d2:9c:24:d7:9e:20:16:e2:50:04:e2:89:84:e4:61:
                    73:de:06:c3:99:e0:b1:93:4c:69:67:2c:86:f6:d6:
                    59:78:b0:24:b7:91:1b:cc:c1:e3:14:be:64:a5:65:
                    bc:6a:bc:d8:c2:08:be:02:73:bc:98:47:fe:31:f1:
                    70:a0:22:fc:f3:c9:ba:a8:a7:a5:c3:f6:81:8b:e7:
                    4c:0e:60:7a:77:ea:58:41:eb:7e:a2:13:62:8b:02:
                    4d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:AA:3D:C7:69:6F:F8:B4:9F:81:2E:08:14:6C:E1:84:71:60:7C
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/02D884907E8511ECAB58C6705A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:56:31:64:7d:71:1f:45:34:34:c2:82:df:f3:85:be:fd:61:
         12:25:23:6d:ee:45:56:b0:19:06:04:56:67:90:41:fc:f5:10:
         bb:7a:72:6b:cd:71:4c:63:5d:9d:52:13:01:18:fd:3f:e9:30:
         9e:47:a1:22:a7:02:67:68:91:81:bc:5b:40:03:48:a0:0b:ac:
         fb:4b:98:c6:4b:49:6a:f5:ad:7c:45:22:49:4c:58:0f:92:26:
         75:be:59:5e:51:8b:79:4c:5c:48:00:c7:43:fb:69:37:3b:1c:
         6d:76:ba:75:a1:70:80:6b:1b:f6:9d:59:ec:53:f2:46:36:6a:
         97:8d:00:d1:84:49:28:4b:f8:af:78:3d:6f:96:2a:c8:4f:77:
         fc:6d:63:49:ff:91:2d:9e:85:2e:83:13:75:6b:2c:81:04:bc:
         5e:c8:fb:52:17:05:05:05:e8:bd:12:ce:79:f2:9b:ca:dd:8a:
         e6:46:70:d8:2c:67:9d:fe:3b:bd:3e:b5:b7:17:41:c7:e4:fc:
         91:51:ee:e0:78:62:e1:00:5c:97:8f:83:7b:f4:06:5c:b2:b4:
         56:70:d6:df:b4:29:74:24:b4:04:75:69:60:b9:73:54:e0:fa:
         eb:10:13:ba:11:83:78:fa:80:46:09:d9:c4:bf:51:03:80:76:
         8f:2c:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org