Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1F42A8303D8111ECBAEA9658D8A014CE.roa
File:                     1F42A8303D8111ECBAEA9658D8A014CE.roa (raw, json)
Hash identifier:          wC19PkWgyl896qOSMpkxiXkAt+PiXv6abmP0pDef3WI=
Subject key identifier:   11:A2:8F:AC:CD:31:27:59:5D:15:30:11:35:81:E9:1B:4F:E6:E8:1E
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       D3
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1F42A8303D8111ECBAEA9658D8A014CE.roa
Signing time:             Thu 04 Nov 2021 15:08:53 +0000
ROA not before:           Thu 04 Nov 2021 15:08:47 +0000
ROA not after:            Tue 04 Nov 2031 15:08:47 +0000
asID:                     211138
IP address blocks:        41.216.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Nov  4 15:08:47 2021 GMT
            Not After : Nov  4 15:08:47 2031 GMT
        Subject: CN=6183f785-7111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:f8:f6:67:18:b2:1d:c4:47:61:f0:5b:89:
                    6a:8d:63:a8:67:ba:a3:6a:a7:ac:0d:66:d1:51:8f:
                    bc:f5:e6:93:b4:62:67:bd:b3:b6:61:35:63:7a:c1:
                    81:a1:9c:d4:6e:52:21:0c:c0:f3:ab:f8:95:e0:c1:
                    be:cf:32:61:ef:da:50:c7:ef:2f:98:7f:92:3a:65:
                    9b:4c:58:2a:34:9d:a7:b0:07:36:e9:fa:35:bc:b7:
                    45:89:2a:11:9a:61:4a:48:fd:ab:60:02:6c:02:77:
                    54:5a:cb:47:1b:ee:67:1a:92:e8:48:56:e5:2e:10:
                    39:4b:15:ec:c6:e3:f7:a9:e8:3d:fb:39:e4:e1:78:
                    69:ff:ef:93:73:c0:f8:09:44:0f:91:61:f0:5c:bd:
                    3d:3c:f9:72:b8:4e:20:32:3a:bd:96:a4:39:4e:f8:
                    d2:95:03:d8:43:fd:bd:71:c4:50:89:8f:9e:15:35:
                    d0:3b:c2:0e:b6:42:85:5e:7a:97:dd:b2:16:1a:4c:
                    22:16:20:0e:a3:e9:aa:29:eb:73:84:a1:55:ab:2d:
                    39:7b:09:95:20:6d:b9:ff:77:35:06:47:19:fd:4c:
                    de:84:22:bf:73:7c:65:e1:3a:b9:ae:14:30:d6:a5:
                    64:25:ea:51:78:ff:47:c8:ee:5b:53:5b:6f:f8:0b:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A2:8F:AC:CD:31:27:59:5D:15:30:11:35:81:E9:1B:4F:E6:E8:1E
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/1F42A8303D8111ECBAEA9658D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:64:2d:a6:0d:64:03:63:bf:09:49:9c:c2:fd:ef:3e:74:
         73:1e:38:49:54:ef:1a:d1:e8:f9:f9:35:f5:97:e6:a6:93:96:
         0e:1d:52:ad:5e:54:80:a1:34:6e:af:6e:78:de:c7:93:53:ba:
         e0:c1:f0:5d:79:6a:b8:d7:d8:c7:a9:ea:f0:2e:f3:7b:ff:0c:
         74:83:db:16:d4:14:49:f6:84:84:1c:1d:50:f8:aa:f7:a4:52:
         6c:88:cc:45:a7:1f:f7:f2:e8:24:10:c8:b7:c0:da:84:bd:fd:
         d7:2d:30:80:fb:3d:cd:a1:67:0d:34:20:b2:21:f2:7f:98:f5:
         db:1f:a8:08:50:48:31:eb:b9:47:f4:d6:67:be:a8:cb:74:d5:
         16:45:bd:fa:8e:76:c5:32:55:33:cd:d3:c4:80:3d:20:a7:74:
         db:fc:21:e9:f3:c5:65:0c:b4:ef:77:2b:c9:59:c4:b7:19:8a:
         0a:96:75:95:c3:b1:8a:27:4c:33:14:b1:a3:e6:82:99:57:61:
         8e:9f:ef:a8:8d:59:6b:8f:e8:82:21:47:4c:6e:40:0f:31:b9:
         3b:d0:6c:ce:fd:52:20:7b:1c:51:0e:32:d2:fa:9c:9c:7c:1a:
         d6:4c:af:9f:82:68:cd:65:2a:9f:ed:1c:14:5b:7c:c5:cb:a6:
         e2:fe:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org