Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/BE33BD827E8411EC957E08705A40D577.roa
File:                     BE33BD827E8411EC957E08705A40D577.roa (raw, json)
Hash identifier:          JUAehBmPRF+WNAGnPNSUQgNU5GqeNj9QZubk/JBwIJA=
Subject key identifier:   4C:29:0D:BE:91:66:24:87:17:35:3F:81:64:DC:F0:C4:74:3D:1C:83
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       013F
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/BE33BD827E8411EC957E08705A40D577.roa
Signing time:             Wed 26 Jan 2022 08:48:33 +0000
ROA not before:           Wed 26 Jan 2022 08:48:30 +0000
ROA not after:            Mon 26 Jan 2032 08:48:30 +0000
asID:                     327980
IP address blocks:        41.216.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Jan 26 08:48:30 2022 GMT
            Not After : Jan 26 08:48:30 2032 GMT
        Subject: CN=61f10ae1-bc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:f2:58:c8:1f:85:1d:8e:c8:58:c5:08:75:
                    e0:c1:99:19:3d:eb:47:a8:f7:49:68:95:bb:92:82:
                    5b:4f:97:1a:dd:2a:95:df:f2:5e:93:e9:e3:d2:35:
                    c2:e8:1a:e6:26:7f:af:59:02:dd:4e:7a:ae:b7:07:
                    58:b4:bc:5b:fd:ce:09:d3:11:17:3b:99:66:15:5c:
                    a1:58:77:72:ab:29:d8:69:50:6b:79:78:a7:f9:c6:
                    86:97:39:99:ce:95:57:36:c1:f8:d2:81:4e:ac:1c:
                    3a:4b:4c:a7:5e:cf:8b:8b:2d:c3:4f:18:03:1a:63:
                    b6:da:f0:d1:5d:c7:2c:8a:53:e9:5a:32:c1:bf:84:
                    7a:2c:d0:04:c6:dd:00:a7:f7:29:4f:e3:3e:dc:02:
                    e1:14:20:53:9c:9e:c9:68:07:59:27:76:59:5d:02:
                    34:fe:87:90:11:66:5f:f7:02:b0:4f:aa:29:41:fe:
                    d7:b9:8b:c9:ec:b0:c0:00:6d:62:f6:34:e0:3a:6f:
                    c9:e7:ad:09:3c:48:ff:34:01:ec:a2:78:a9:31:85:
                    99:c1:de:52:00:8a:bf:b2:eb:54:3d:de:16:8b:dc:
                    38:13:57:3b:9e:bc:b3:bd:8a:88:d9:e1:e9:a7:d1:
                    66:0e:d5:d6:11:46:99:97:f3:7b:6d:eb:74:f5:e8:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:0D:BE:91:66:24:87:17:35:3F:81:64:DC:F0:C4:74:3D:1C:83
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/BE33BD827E8411EC957E08705A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a6:9a:f3:e6:88:fc:de:22:9b:58:d3:2c:83:65:f2:2c:17:
         81:df:37:ec:7e:a4:d5:58:b1:c9:f1:bc:e5:1a:eb:74:24:10:
         46:d7:71:1a:62:c1:86:f3:17:d1:19:74:08:06:bd:81:ca:6d:
         1c:fb:1a:92:96:da:5d:ab:21:6a:d8:c9:41:39:d1:11:f1:ba:
         fd:92:eb:f5:f3:22:a3:5b:ac:b6:6f:f8:b6:3b:c7:cf:d6:59:
         f5:50:ce:f6:a5:60:28:0c:b7:ff:5a:01:20:a5:5a:2a:98:48:
         b5:fd:95:a8:1a:94:4d:2f:0c:ea:15:81:b6:92:53:ea:d8:69:
         f8:68:a5:99:a3:8d:d6:a2:03:b4:3e:dd:fc:5e:a5:29:42:fd:
         0b:b6:61:99:81:b5:8c:06:ec:23:d8:cc:dc:af:53:67:ca:6e:
         7b:37:83:58:fb:ab:8f:7c:35:d2:30:9b:7e:36:3e:05:c7:ff:
         a8:23:6e:7d:a9:60:2c:a6:d7:d0:c3:b9:c6:82:e9:0b:ea:12:
         ef:f6:6a:41:22:12:6f:3a:82:ea:a3:b3:35:7c:10:17:e6:eb:
         75:86:53:55:10:9d:c5:b0:7f:55:7d:ce:70:69:29:bc:00:fa:
         df:26:6e:70:e1:7d:d7:52:5b:2b:ee:e2:ac:f4:ab:cf:6d:a4:
         05:df:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:45:02 2024 by rpki-client on console-fra.rpki-client.org