Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/65660562B69811EAAC26BF1FF8AEA228.roa
File:                     65660562B69811EAAC26BF1FF8AEA228.roa (raw, json)
Hash identifier:          VIH+Uyp2iRMbrGnCMTVkoGZ68i3KOd6ztZgLPY+SoCA=
Subject key identifier:   72:42:7F:79:90:A2:8D:DC:0C:D1:8D:54:71:D7:57:10:E7:C8:3E:D1
Certificate issuer:       /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial:       9B
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/65660562B69811EAAC26BF1FF8AEA228.roa
Signing time:             Thu 25 Jun 2020 04:00:25 +0000
ROA not before:           Thu 25 Jun 2020 04:00:19 +0000
ROA not after:            Sat 01 Jun 2030 04:00:19 +0000
asID:                     328631
IP address blocks:        102.22.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
        Validity
            Not Before: Jun 25 04:00:19 2020 GMT
            Not After : Jun  1 04:00:19 2030 GMT
        Subject: CN=5ef42158-3fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:aa:f5:b1:3d:0b:1e:3a:76:7d:3a:69:86:
                    9d:7b:26:20:15:c8:f1:ab:ce:5b:61:1f:7d:7a:ec:
                    86:e7:21:f5:a1:cb:3b:09:c3:54:ac:0f:92:2b:3e:
                    b7:43:a4:5f:77:1d:c7:57:84:33:ca:85:b3:db:12:
                    26:16:65:e3:e2:65:5d:6d:3b:bc:62:fd:9a:b2:ea:
                    3c:51:11:75:82:b1:83:31:97:dd:fe:0d:2b:3d:e6:
                    6f:b2:9e:0b:f8:b8:e1:70:fe:66:65:f3:d4:62:d6:
                    da:ab:02:c1:52:4e:47:e3:6f:05:78:5a:da:c2:46:
                    65:79:42:11:79:0a:20:19:9f:ab:25:aa:94:79:a4:
                    0d:bc:61:14:9a:34:1a:c0:96:65:c3:7a:48:99:dd:
                    1e:1d:f2:81:03:48:66:57:f8:04:fe:a8:58:35:1d:
                    21:57:1b:bc:fb:bd:52:18:95:db:23:30:f2:4f:c1:
                    ba:76:2e:d5:8e:09:cb:f3:1d:9a:3a:2c:fa:87:b1:
                    54:de:7f:63:52:22:8b:91:59:64:5e:6a:dd:75:8d:
                    7f:2f:e4:c0:4d:98:80:0b:f9:31:40:8e:a2:8e:5e:
                    e9:96:8a:c8:c2:db:16:9e:4d:9f:57:61:9f:55:88:
                    16:79:f1:17:af:91:2b:0f:89:57:29:e2:bb:41:e2:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:42:7F:79:90:A2:8D:DC:0C:D1:8D:54:71:D7:57:10:E7:C8:3E:D1
            X509v3 Authority Key Identifier:
                keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/65660562B69811EAAC26BF1FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:80:09:d2:e9:60:39:71:ac:89:4c:62:5d:bc:86:ee:bc:
         a1:9b:d4:b3:1c:34:eb:25:23:7b:98:94:7b:11:c9:f7:cf:26:
         65:c0:24:53:8b:bc:72:57:72:79:51:2c:a1:9b:dc:1e:3d:ff:
         d7:e1:7f:7f:86:48:98:8a:7c:0c:82:ee:ca:b0:4f:d5:ca:2a:
         bd:b1:58:be:75:44:57:65:7e:72:01:87:f4:33:58:f8:41:ce:
         5d:0b:e5:77:db:a4:75:88:25:09:92:d0:21:30:11:9c:de:26:
         fe:34:3b:ce:41:b4:13:3c:0a:99:83:0f:02:58:27:3c:82:f9:
         dc:a5:11:d3:8f:ee:da:a0:b3:cf:e9:30:42:b2:16:64:2f:4e:
         09:ee:21:45:1a:72:4b:6d:7b:f4:a7:18:04:31:fc:f4:ea:ca:
         bb:c8:ab:6e:25:c9:98:d3:97:5c:09:2f:b3:90:f6:d2:f5:1f:
         eb:33:60:c5:cf:43:7b:ae:f0:4e:cb:20:67:0a:11:e1:ed:2a:
         01:d9:4e:b8:76:47:56:54:5d:9c:52:1f:c1:05:f5:7f:c6:2e:
         17:d0:9a:98:0e:64:ac:a1:97:03:85:43:90:08:9f:86:7b:d5:
         bf:c5:ab:4b:aa:1f:45:8a:bf:e1:e5:fe:5e:bd:d9:d7:58:c0:
         e8:65:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:19 2024 by rpki-client on console-ams.rpki-client.org