Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/F4EFE80A8D1D11EF8C1A4C79762E951A.roa
File:                     F4EFE80A8D1D11EF8C1A4C79762E951A.roa (raw, json)
Hash identifier:          d4jMMXQH77HWq36R3oaT7HPszUjBz6mQV4jIDt9d5aE=
Subject key identifier:   31:F6:B9:D0:7A:A9:70:4F:F9:D7:6D:60:91:BE:26:7C:31:39:FF:D5
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       0596
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/F4EFE80A8D1D11EF8C1A4C79762E951A.roa
Signing time:             Fri 18 Oct 2024 06:55:27 +0000
ROA not before:           Fri 18 Oct 2024 06:55:24 +0000
ROA not after:            Wed 18 Oct 2034 06:55:24 +0000
asID:                     139989
IP address blocks:        41.216.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Oct 18 06:55:24 2024 GMT
            Not After : Oct 18 06:55:24 2034 GMT
        Subject: CN=6712065f-df70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:b5:1e:6b:47:1f:b7:a2:56:2d:49:dd:98:
                    88:3e:db:86:24:a8:5c:2e:6b:d0:95:4c:3f:d4:e5:
                    ce:51:a2:a7:70:7a:3a:12:2f:b6:26:0a:2b:1c:2c:
                    53:7b:35:30:bd:4e:a8:a0:24:7a:b2:3e:64:e3:4d:
                    3c:9c:41:f0:80:25:7c:36:5f:55:31:c8:fe:c8:2d:
                    fe:ca:d1:74:cc:6c:d4:c1:25:c1:26:5d:7e:cf:63:
                    8e:05:6c:2e:2d:73:cc:f1:55:f6:f6:b7:f1:70:dd:
                    61:2d:82:64:0d:26:bc:57:24:0a:76:11:24:7a:fe:
                    97:5e:47:8f:03:50:8a:2e:bf:b4:9c:2b:bb:8b:ba:
                    00:90:9f:62:19:02:85:c9:34:00:d3:96:f5:3e:53:
                    8a:ab:55:7a:75:a1:d9:c9:bd:23:11:9b:8e:dd:79:
                    1f:44:9f:73:ae:22:1a:be:a9:6c:ac:16:6f:3b:8f:
                    40:c0:aa:82:ea:f7:c9:9c:e0:75:8c:92:bc:f5:98:
                    f4:3a:5f:91:9a:00:3c:a2:72:7c:a3:14:a4:65:dd:
                    a9:b4:54:6d:46:59:7d:a6:32:e8:f1:cb:7f:4f:aa:
                    c5:01:0c:bf:7a:45:ae:85:c1:85:19:cf:b2:5b:77:
                    cf:5f:34:84:94:50:c5:8e:92:ee:5d:fe:3a:91:8e:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:B9:D0:7A:A9:70:4F:F9:D7:6D:60:91:BE:26:7C:31:39:FF:D5
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/F4EFE80A8D1D11EF8C1A4C79762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.216.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:f8:51:44:5f:9c:87:f9:08:4b:17:ef:df:f0:6a:20:27:2b:
         96:ca:6b:ba:98:47:71:1d:98:a7:e2:72:fd:26:57:84:92:9a:
         bf:a3:d6:86:a3:2e:43:48:23:2b:8d:78:6f:af:e9:85:68:25:
         89:20:54:c5:eb:ff:61:ce:ca:1b:ed:76:07:7f:b8:f2:5b:06:
         c8:f6:9a:f0:2e:82:ef:6f:7f:ad:f1:a6:85:70:77:e1:9a:a3:
         dd:88:08:d8:8e:2c:85:5a:02:30:cb:02:71:7e:a1:d9:26:ca:
         c0:d9:92:ed:18:c8:e0:f3:2f:50:57:e1:a6:f1:e5:59:1b:1f:
         5c:b1:32:94:a5:cc:fa:a0:ad:fd:df:53:11:20:82:c8:7f:62:
         47:1d:72:2c:bd:2b:eb:e3:23:54:da:86:6a:01:ff:54:48:e8:
         e0:4e:9f:22:d4:63:ea:0a:2d:26:91:64:c8:8f:61:05:77:b3:
         ab:8c:41:8f:d6:45:dd:ae:4a:cc:e1:e3:b6:16:6f:85:33:a4:
         31:d4:24:61:9e:b1:64:e4:f8:ae:d7:ee:c4:87:ff:ad:1f:5f:
         de:01:d5:7f:11:e6:29:7c:2c:14:7a:1a:a6:e8:4d:61:01:1a:
         ac:de:82:d9:fd:ca:1e:ba:ac:c5:48:ce:10:67:59:27:5c:e9:
         ea:21:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org