Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/ACF559005F1611ECACD483C15A40D577.roa
File:                     ACF559005F1611ECACD483C15A40D577.roa (raw, json)
Hash identifier:          D1OnCIZ5022e3w4+9ObUZ/LgAcgYN2FaQ5kIXa0TIgA=
Subject key identifier:   65:3B:C1:DE:17:32:BD:AC:F1:82:76:96:07:6E:27:97:08:64:32:41
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       010B
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/ACF559005F1611ECACD483C15A40D577.roa
Signing time:             Fri 17 Dec 2021 08:52:34 +0000
ROA not before:           Fri 17 Dec 2021 08:52:29 +0000
ROA not after:            Wed 17 Dec 2031 08:52:29 +0000
asID:                     139989
IP address blocks:        41.216.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Dec 17 08:52:29 2021 GMT
            Not After : Dec 17 08:52:29 2031 GMT
        Subject: CN=61bc4fd2-107d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:b4:38:df:39:90:80:7f:13:23:09:2e:c1:
                    1e:38:35:bd:41:c1:15:fe:7e:0c:57:9a:d1:20:dc:
                    81:f9:b6:65:74:3d:c5:66:99:59:92:b5:a0:14:e3:
                    fd:0e:e5:bd:6b:e3:3a:ef:1b:08:45:cd:f0:1d:62:
                    77:0d:0a:a3:5e:e0:63:07:75:16:af:e7:5a:fe:50:
                    d4:10:5d:3c:18:ad:84:5c:62:af:d4:c7:15:13:cd:
                    7d:22:e9:91:d0:9f:56:4d:32:b5:3c:0d:5e:b5:5d:
                    22:b6:51:84:91:4f:eb:a4:d3:ec:41:2c:62:df:5e:
                    7b:89:c2:7c:eb:0f:f0:1c:b6:4d:d2:e6:44:d9:ef:
                    0b:d3:db:19:62:66:08:dd:05:a9:5e:8f:16:63:5d:
                    ce:3e:c8:c6:e8:7a:f5:8b:0f:44:1b:a1:06:72:f1:
                    7a:79:fb:2b:98:07:4d:e3:69:b1:49:ca:a8:e2:98:
                    5f:35:db:f9:46:22:02:f8:5f:a8:1c:62:b1:4a:d6:
                    29:3f:59:31:b7:fc:69:e2:a7:70:24:65:36:e2:5c:
                    6c:b6:d1:d3:41:45:a4:68:d9:4e:d0:55:e0:a2:d8:
                    9e:a8:34:e9:c7:df:ca:86:8e:d3:cb:61:85:eb:89:
                    26:49:4b:c8:f1:6e:1b:a3:fa:7b:7d:cd:d4:ce:c0:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3B:C1:DE:17:32:BD:AC:F1:82:76:96:07:6E:27:97:08:64:32:41
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/ACF559005F1611ECACD483C15A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d3:74:ad:cf:43:4f:ad:f8:2f:ae:3c:ff:60:ef:e7:a1:b5:
         32:b3:1a:2e:8c:92:09:05:97:e9:c6:51:ba:4c:14:91:f3:31:
         a4:f6:9b:87:6b:95:16:00:d4:1a:00:a0:ab:b9:b1:3e:4e:55:
         13:69:7f:e1:c9:d7:ef:98:6b:a5:7a:67:f6:de:62:0c:50:1c:
         2c:0b:62:20:d0:71:06:9c:6c:bf:21:fb:8a:04:7d:ea:93:01:
         ae:a3:1e:4e:d6:d6:f7:39:48:9b:82:6a:41:48:36:35:24:e6:
         32:55:fb:21:70:53:5a:0d:0a:17:b9:65:2a:97:20:b9:0f:e7:
         e5:02:3f:df:d0:29:c9:d6:04:2c:e3:0e:56:9a:5b:3a:a9:6d:
         e8:e4:84:c2:5c:5f:82:ce:7e:a2:a4:41:13:bc:a8:f7:92:6f:
         85:d3:36:6b:ec:a2:c7:07:0b:29:c6:71:4a:12:b7:94:8c:22:
         5f:3f:72:2a:aa:64:61:e5:31:26:d2:8f:ab:a5:e7:d0:1b:1e:
         9a:a0:92:9c:46:bd:8c:d8:57:69:4f:fb:3c:28:00:e0:89:d5:
         c3:fa:69:95:b3:7a:92:c1:81:fc:63:9f:5c:ca:b3:73:57:d5:
         c9:5d:27:42:0d:11:79:f1:ae:00:0b:ca:3f:cb:36:df:28:60:
         9a:31:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:56 2024 by rpki-client on console-fra.rpki-client.org