Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/EF61FD46917211ECB626B7875A40D577.roa
File:                     EF61FD46917211ECB626B7875A40D577.roa (raw, json)
Hash identifier:          yMtEtqwksBqdr8P02P5a1wWKENboO3gP4qLKp2M/yy8=
Subject key identifier:   DC:BE:00:EA:14:08:24:78:23:5C:9B:AB:58:66:01:34:41:7E:70:D1
Certificate issuer:       /CN=F369C0BEAF/serialNumber=BD8ED1794796FACD05AB8AB36E81828189834178
Certificate serial:       02CF
Authority key identifier: BD:8E:D1:79:47:96:FA:CD:05:AB:8A:B3:6E:81:82:81:89:83:41:78
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/EF61FD46917211ECB626B7875A40D577.roa
Signing time:             Sat 19 Feb 2022 10:58:57 +0000
ROA not before:           Sat 19 Feb 2022 10:58:54 +0000
ROA not after:            Tue 19 Feb 2030 10:58:54 +0000
asID:                     328578
IP address blocks:        102.217.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C0BEAF/serialNumber=BD8ED1794796FACD05AB8AB36E81828189834178
        Validity
            Not Before: Feb 19 10:58:54 2022 GMT
            Not After : Feb 19 10:58:54 2030 GMT
        Subject: CN=6210cd71-f5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:15:27:0e:5c:8b:33:7a:d4:02:1d:5e:16:
                    76:f3:93:b4:4c:1a:bf:88:51:09:3b:ce:c8:72:84:
                    df:70:21:b2:4e:65:c0:7a:0e:65:0d:b8:c4:a4:da:
                    d6:31:56:e5:b9:80:38:26:c3:e6:d4:a1:89:e9:44:
                    0d:49:57:7e:b2:ba:cd:5f:a2:d5:f6:8d:82:aa:01:
                    e3:51:c2:69:42:db:a8:b8:91:d3:52:4f:26:7c:1b:
                    6f:f6:f1:e7:ef:a2:61:87:61:89:d2:34:71:03:4b:
                    e1:d8:fb:78:6e:4d:44:4c:b7:b7:83:92:6c:a9:c0:
                    7d:dd:4c:0d:eb:5b:b5:ec:93:1b:b7:19:dd:fa:7b:
                    6a:6a:35:a4:51:3f:b4:2e:45:bf:5f:72:54:d8:c3:
                    88:fe:51:3c:01:e5:b0:1e:88:8d:5f:bc:f6:29:6f:
                    6b:9a:12:ef:fa:a7:74:62:73:b3:74:93:70:cf:a4:
                    10:d1:6a:51:bf:73:25:7c:73:e3:8d:92:7c:38:69:
                    17:44:79:ee:9d:b4:6e:53:8c:27:e7:13:b9:c2:b8:
                    fb:2c:e8:fb:54:47:af:67:65:f0:db:35:41:a0:fb:
                    21:a5:86:55:b2:e1:75:c5:c0:a7:39:c5:29:98:b2:
                    c0:92:c3:65:66:57:41:90:3a:f3:c7:17:02:45:bb:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BE:00:EA:14:08:24:78:23:5C:9B:AB:58:66:01:34:41:7E:70:D1
            X509v3 Authority Key Identifier:
                keyid:BD:8E:D1:79:47:96:FA:CD:05:AB:8A:B3:6E:81:82:81:89:83:41:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/vY7ReUeW-s0Fq4qzboGCgYmDQXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vY7ReUeW-s0Fq4qzboGCgYmDQXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C0BE/6338402078A911EAB80A662CF8AEA228/EF61FD46917211ECB626B7875A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:04:df:32:17:82:08:9a:a6:3b:c7:6b:eb:3d:95:0a:22:bb:
         94:a0:f2:bb:f2:60:15:2f:18:a5:1a:b8:1b:04:55:32:64:8c:
         16:bd:e7:6c:38:1a:da:b2:72:c6:c9:7f:b5:8c:a4:cb:59:d4:
         20:6d:25:96:75:1f:0e:9e:22:e0:be:e3:6f:2f:b7:79:91:1f:
         f0:2e:b4:a6:e3:a1:c1:72:78:d9:9d:0a:63:26:9f:66:32:77:
         b1:66:2d:5d:47:8c:6e:16:b4:e9:e2:ac:2e:c7:c5:df:9d:2a:
         62:35:d0:bf:a2:ca:f8:49:1c:24:b6:2f:01:ac:9a:cf:c5:ef:
         07:82:21:14:f5:b0:35:3e:09:ef:a1:78:91:21:ab:45:d0:ae:
         e3:60:75:7b:60:e4:1d:b0:46:3f:d6:b3:a2:77:75:b4:37:10:
         9e:e9:7e:0a:a3:25:e8:ef:79:c1:17:32:b7:e8:a0:68:60:7b:
         ea:9c:df:ba:ef:28:59:95:91:be:e3:cd:a5:30:26:3f:97:b8:
         51:79:bf:d1:e2:84:b9:33:dc:fe:b1:b8:c2:1a:67:c2:76:d8:
         b7:f6:f2:ef:d6:51:bb:b7:62:fd:f1:1f:d0:6b:06:7b:d1:d3:
         ed:34:13:73:66:5f:41:dc:64:46:48:e2:63:3e:7a:69:1a:f6:
         88:29:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:02:26 2024 by rpki-client on console-fra.rpki-client.org