Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/E8FB648603B911EF99896D42017001B1.roa
File:                     E8FB648603B911EF99896D42017001B1.roa (raw, json)
Hash identifier:          0LRPsqp/eBeRYaF8dUu/T+Twx9GeRodgR1TnQOXBJH0=
Subject key identifier:   D9:26:72:02:BE:3C:72:F7:CB:08:A7:D6:75:40:F2:83:9F:49:5B:2D
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       020D
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/E8FB648603B911EF99896D42017001B1.roa
Signing time:             Fri 26 Apr 2024 10:44:08 +0000
ROA not before:           Fri 26 Apr 2024 10:44:05 +0000
ROA not after:            Thu 30 Apr 2043 10:44:05 +0000
asID:                     30988
IP address blocks:        41.73.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Apr 26 10:44:05 2024 GMT
            Not After : Apr 30 10:44:05 2043 GMT
        Subject: CN=662b8578-1eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:7a:6c:99:9a:07:2e:50:b9:9d:5d:aa:92:
                    31:c9:14:6c:8c:0c:32:89:c4:1d:3d:22:3c:2d:48:
                    9c:1e:aa:e3:25:53:32:c0:6b:e1:26:f5:35:9e:39:
                    0e:c3:1a:32:24:cd:ae:f9:3f:6d:b3:d0:42:11:b6:
                    17:9d:41:2e:d0:64:16:bf:56:c1:d0:89:a3:f7:0a:
                    ef:0d:33:83:30:63:9c:e3:4b:8d:2e:8c:7f:90:d5:
                    18:d6:63:36:50:6a:22:e9:ed:3a:23:89:33:e9:a9:
                    e4:ca:ee:68:f0:99:12:43:ec:41:b0:e7:17:cc:5c:
                    96:9c:bd:58:20:43:96:c6:87:77:cf:ae:03:10:8a:
                    f6:04:52:eb:b1:db:1d:87:14:92:6a:95:cb:61:38:
                    37:5c:3e:d1:a2:a9:96:6e:f2:f8:91:3e:dd:33:cc:
                    fa:58:ba:00:76:a5:b4:a2:f4:a9:d6:f3:4a:60:5e:
                    3b:23:00:87:ad:c5:7b:91:b3:bd:cd:03:33:72:91:
                    1e:46:d3:81:5c:d6:60:4a:52:18:1e:75:14:6f:50:
                    9f:a0:71:f4:f7:c3:13:a7:76:51:d7:f9:57:6d:be:
                    f1:c9:c1:f2:fe:00:11:03:f8:ab:62:53:3e:42:9e:
                    85:fc:5b:9b:da:87:d0:c0:3f:ce:ac:6e:fb:5b:af:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:72:02:BE:3C:72:F7:CB:08:A7:D6:75:40:F2:83:9F:49:5B:2D
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/E8FB648603B911EF99896D42017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.73.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:06:92:d6:23:46:0b:6c:00:97:c7:ec:e5:7e:f0:b0:e7:f8:
         41:63:5b:17:5a:67:1f:16:04:42:1f:fa:dd:53:9c:24:83:65:
         c7:28:14:ab:6d:23:fa:b1:86:2a:19:be:b0:19:48:e9:af:bf:
         74:fb:a4:29:fa:84:18:16:94:75:a1:91:3c:32:5f:24:5b:1c:
         73:49:4e:39:9a:ac:e7:09:a6:41:e3:07:d4:b9:78:8e:93:6f:
         29:d3:ff:6a:12:1d:48:bb:f4:91:92:32:80:7e:63:ff:1a:f7:
         4d:42:3e:be:20:b4:f5:ae:28:ad:31:99:bc:29:65:48:d5:7f:
         26:38:21:1b:02:f9:77:e1:0b:fc:45:68:20:fa:d2:ff:63:f3:
         44:7e:7b:94:30:1b:04:21:c3:f7:e8:6b:27:0c:70:db:fe:ea:
         e7:e1:d4:7a:fd:a6:7c:53:2c:35:8b:d6:5b:4b:3b:20:fc:31:
         99:c1:2b:85:c5:86:02:6d:3c:49:fb:66:6d:e6:c6:c1:d6:a1:
         55:c5:50:94:fe:0c:9d:e9:ff:5b:46:7a:c3:5b:ea:88:2d:74:
         ba:ca:41:51:64:4a:63:57:2c:27:ab:91:ed:d3:ce:c0:e1:5c:
         3a:7a:47:77:79:8d:e2:9e:93:38:64:69:0d:80:1c:97:3c:87:
         1f:6b:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:39:23 2024 by rpki-client on console-ams.rpki-client.org