Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/1C77837AEA6911EBB1386377D8A014CE.roa
File:                     1C77837AEA6911EBB1386377D8A014CE.roa (raw, json)
Hash identifier:          nonq4YKeFdyfGHlNe6qVL9cZdmNNsbyIqMggp/PfHrg=
Subject key identifier:   E6:EA:99:96:9C:41:9D:5A:B8:23:0C:C8:E4:A0:40:3E:59:23:12:94
Certificate issuer:       /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial:       0320
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/1C77837AEA6911EBB1386377D8A014CE.roa
Signing time:             Wed 21 Jul 2021 21:18:03 +0000
ROA not before:           Wed 21 Jul 2021 21:17:55 +0000
ROA not after:            Thu 31 Jul 2025 21:17:55 +0000
asID:                     37049
IP address blocks:        41.242.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
        Validity
            Not Before: Jul 21 21:17:55 2021 GMT
            Not After : Jul 31 21:17:55 2025 GMT
        Subject: CN=60f88f0b-a2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:0a:9f:08:00:e4:57:9c:72:37:8c:d4:97:
                    c2:3c:04:cc:7c:59:6d:32:cc:16:0a:c6:33:69:2e:
                    1b:e1:f6:91:24:b1:b8:32:28:f4:47:d3:0e:39:7a:
                    2f:85:d0:27:ae:ce:7a:35:b5:01:3e:0b:f8:12:24:
                    ca:5d:2c:0a:61:3e:2f:b4:00:64:eb:8a:fc:eb:49:
                    68:03:32:be:9e:57:b5:4d:e9:3f:63:37:e6:e6:29:
                    a9:3e:c5:88:03:e9:0b:de:d4:70:f0:a6:c7:16:40:
                    17:a8:85:00:ed:54:91:02:fb:ca:08:7d:b5:5f:d4:
                    b4:5a:86:bc:54:36:bc:27:ca:8f:33:d7:3a:bb:4d:
                    e1:16:a9:09:3f:4f:ed:f4:e0:5f:fc:c1:b5:fe:39:
                    7a:08:c4:1b:36:1b:fd:6a:19:4d:83:5d:3c:78:97:
                    49:e2:e2:91:9e:d1:1e:4e:1f:79:2a:4a:35:a0:92:
                    48:49:3e:6d:f8:6e:c8:b2:c1:94:5f:10:46:4a:19:
                    a9:70:b3:fd:f3:da:14:33:0f:03:89:66:a1:ea:a6:
                    0c:9e:c6:54:d4:21:e6:cf:8c:ca:c3:89:52:ad:7e:
                    f4:79:81:b0:a6:0a:c8:4e:e2:e5:69:ed:1a:ab:3d:
                    af:fc:52:1f:0e:3f:b6:22:5a:f6:ea:40:ce:fd:0a:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EA:99:96:9C:41:9D:5A:B8:23:0C:C8:E4:A0:40:3E:59:23:12:94
            X509v3 Authority Key Identifier:
                keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/1C77837AEA6911EBB1386377D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:32:38:2c:6f:2d:b2:91:8b:e8:76:78:b6:7c:02:f3:aa:40:
         61:e6:fe:d2:a0:78:4b:ff:b4:11:54:5f:9a:09:69:fa:8b:f3:
         da:f0:bf:93:18:10:f5:a9:61:a6:4b:d1:00:41:97:ff:96:df:
         00:78:47:66:ed:29:95:fc:e0:45:ce:de:f8:c6:78:cf:c0:f1:
         11:f5:0e:47:fd:2f:b1:75:29:7a:86:e6:60:b4:62:68:7b:a9:
         af:0d:b3:92:1b:9d:d3:2f:08:13:7a:9e:57:f2:4e:5a:aa:25:
         74:08:e6:4c:51:17:b7:24:ec:ad:25:cd:bd:66:7b:5e:e6:1d:
         bd:c2:b7:d2:01:ca:04:48:60:57:59:4b:c7:18:52:d8:0f:e8:
         f3:d2:23:1e:11:fa:7a:72:8b:9b:ed:d1:4c:5f:10:db:b2:5c:
         ae:fa:b4:18:37:4a:d2:47:e4:fd:a8:98:20:3a:eb:6b:ae:a9:
         2a:d3:ea:e2:ef:a9:ea:3d:02:fa:87:fe:58:99:40:38:2f:27:
         97:45:cd:52:5a:f8:b3:72:de:ed:35:d6:4d:81:ca:43:e7:a8:
         1f:df:6b:66:b3:a3:06:0a:2f:b5:73:38:de:d8:ac:a2:ce:e9:
         32:7b:27:d2:e6:44:fb:81:75:a3:a8:22:18:5d:a7:da:be:a1:
         ed:e0:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org