Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/BE1A524EBB0F11EC88DCF0C45A40D577.roa
File:                     BE1A524EBB0F11EC88DCF0C45A40D577.roa (raw, json)
Hash identifier:          oQGN0BRTI6ZglLf4IQsOiJFLwuWSpy1Ec45AeAPikeI=
Subject key identifier:   77:AC:85:A0:AB:6D:CD:6B:5A:84:E9:B0:EE:CD:23:32:13:7E:38:B3
Certificate issuer:       /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial:       07
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/BE1A524EBB0F11EC88DCF0C45A40D577.roa
Signing time:             Wed 13 Apr 2022 09:54:43 +0000
ROA not before:           Wed 13 Apr 2022 09:54:39 +0000
ROA not after:            Tue 13 Apr 2027 09:54:39 +0000
asID:                     51265
IP address blocks:        41.66.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 01 Jun 2024 02:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
        Validity
            Not Before: Apr 13 09:54:39 2022 GMT
            Not After : Apr 13 09:54:39 2027 GMT
        Subject: CN=62569de3-ef1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cc:ac:2f:1e:50:20:f2:02:0f:2d:db:ea:9e:
                    3e:73:bb:c8:9a:77:f0:86:71:c9:a2:98:5b:95:1e:
                    31:e9:3c:a7:c0:61:c7:df:e6:9d:b8:a5:52:f0:59:
                    c3:27:0e:56:14:52:4f:98:b6:19:74:4a:28:11:97:
                    56:8c:43:7b:ac:95:42:19:ba:23:47:1e:d8:dd:de:
                    c4:0e:75:f1:c8:3a:86:11:45:e7:73:a4:63:28:ce:
                    af:45:6f:fe:4e:2d:0c:b1:9a:6f:5c:8a:20:92:3e:
                    68:a1:ab:9f:e9:f0:5c:5d:d0:ae:ae:c1:42:2f:ea:
                    cd:a1:b6:64:26:0a:0c:e2:73:fb:56:04:34:6c:b3:
                    8c:d7:a0:12:15:63:fa:6a:ea:f4:3b:a5:cb:d9:70:
                    d8:21:e3:b9:2c:26:7f:27:99:5e:5a:82:32:c0:75:
                    b8:9e:4a:69:e5:6a:3b:0f:4e:bc:17:14:3d:ff:04:
                    9f:1d:c7:9c:3c:b3:82:2b:2c:97:a5:64:d0:42:c2:
                    3d:a6:46:4c:ac:ca:54:da:3a:37:69:a5:58:3d:73:
                    46:16:01:2c:da:f7:40:bc:61:69:20:25:4e:61:ec:
                    81:43:43:1d:12:7a:8a:83:87:53:c0:ea:12:6e:cf:
                    ce:c7:39:63:b7:6e:04:1e:00:c9:58:3c:28:c8:df:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AC:85:A0:AB:6D:CD:6B:5A:84:E9:B0:EE:CD:23:32:13:7E:38:B3
            X509v3 Authority Key Identifier:
                keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/BE1A524EBB0F11EC88DCF0C45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.66.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:14:46:aa:10:eb:37:17:ad:d2:f7:7f:ec:ac:d7:84:9c:
         ec:a5:67:19:dd:0b:8e:56:d9:66:8e:c8:6a:bf:43:f3:b4:9d:
         37:1b:37:8a:5f:89:4f:a7:72:a3:a0:9b:25:d1:c3:a6:32:d1:
         be:62:9a:ee:d9:a5:39:83:d1:1d:b5:c5:11:51:4f:98:c6:24:
         b7:e9:38:34:d4:e4:46:e9:0d:44:82:31:79:4f:fb:48:5d:bd:
         80:87:5b:60:3e:98:f5:c0:0c:0d:a8:b2:bd:51:f1:2e:31:a8:
         d4:72:59:9a:d6:96:b9:02:47:46:7e:d6:51:32:cb:2c:59:07:
         3d:03:ac:8c:a8:cc:03:36:68:72:2d:43:ff:a3:f8:b0:0e:7c:
         ad:b0:4a:f1:ad:5f:5b:94:18:ee:a5:06:b3:fa:b8:74:8b:bf:
         16:c5:85:d3:56:70:4c:e1:01:ee:37:94:dd:6f:9b:ae:7e:cd:
         b8:24:d2:03:0b:b9:41:98:ab:e9:e6:4d:8b:5b:7a:e6:39:7b:
         1b:d0:45:45:9a:b8:4b:a4:1b:c5:17:a2:35:c9:96:a5:2e:7d:
         05:f6:5e:3a:fd:06:ba:1e:c5:6d:a1:84:62:96:d4:cb:3d:cd:
         f1:54:c0:21:35:20:23:b7:60:5d:1f:eb:a9:f5:3c:d9:d6:bd:
         63:85:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 05:10:46 2024 by rpki-client on console-fra.rpki-client.org