Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/2EE7164C058A11ECB6F9AA62D8A014CE.roa
File:                     2EE7164C058A11ECB6F9AA62D8A014CE.roa (raw, json)
Hash identifier:          CcLIHPn6ZOsBX+1ZIuoXXNmFVCmC/n53kGkDOTt2c14=
Subject key identifier:   17:5F:E6:30:AD:8D:11:E4:00:49:5B:D1:5E:DA:EE:09:64:D7:CD:C5
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       08AD
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/2EE7164C058A11ECB6F9AA62D8A014CE.roa
Signing time:             Wed 25 Aug 2021 09:52:39 +0000
ROA not before:           Wed 25 Aug 2021 09:52:34 +0000
ROA not after:            Thu 16 Dec 2049 09:52:34 +0000
asID:                     327767
IP address blocks:        154.73.32.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221 (0x8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Aug 25 09:52:34 2021 GMT
            Not After : Dec 16 09:52:34 2049 GMT
        Subject: CN=612612e7-a9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:b0:67:20:d0:17:5b:0e:17:be:0a:5f:18:
                    c0:92:5c:ec:1c:d1:c6:96:5d:10:6e:70:6b:db:05:
                    9d:64:c0:ee:7e:e2:8f:40:ac:f1:d4:96:ea:02:50:
                    e3:1d:27:9b:20:2a:d0:bc:a3:c1:94:70:42:49:dc:
                    11:e9:d8:96:60:30:f0:55:97:4b:f6:3a:9c:46:47:
                    b0:bd:24:1a:7d:b9:d6:ae:81:fc:48:9c:db:77:9e:
                    fb:a9:7c:00:bb:db:ba:91:99:1c:fe:72:50:2d:a0:
                    ab:5b:23:07:e8:c3:41:2c:d2:3a:41:98:73:a5:93:
                    7c:9b:59:8c:10:aa:76:80:9e:1f:fb:a4:80:0b:bd:
                    14:55:6b:68:d2:f8:6f:1a:92:99:ef:be:a3:cf:28:
                    be:a5:e9:f5:45:d9:5b:2e:d3:41:dd:44:c5:56:0a:
                    d7:07:5d:b0:c2:fc:fa:be:b7:1e:6d:b0:0f:3f:45:
                    fe:d8:fb:31:60:d6:2e:d4:27:91:d4:d5:86:c9:34:
                    2e:b3:65:ad:8f:17:61:8d:df:d0:09:84:04:4c:63:
                    a8:87:aa:1b:c0:6c:47:e0:66:82:77:9e:5e:8e:97:
                    1f:8b:d9:18:cb:c3:59:6a:60:44:fb:79:00:29:8a:
                    d1:d2:27:6a:f8:62:66:81:a1:74:1b:de:ed:62:d7:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5F:E6:30:AD:8D:11:E4:00:49:5B:D1:5E:DA:EE:09:64:D7:CD:C5
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/2EE7164C058A11ECB6F9AA62D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:6c:1b:e0:01:39:ef:c9:7b:97:e8:29:9a:ab:b8:f1:d3:
         6e:bd:00:05:2d:b8:15:12:3d:0f:b7:e1:1a:9a:14:82:9e:c5:
         cc:2b:91:7b:2b:84:1c:28:30:5b:64:46:f3:69:57:ae:bf:b5:
         86:fc:01:7b:db:26:01:fa:91:a5:22:42:b0:0e:c4:83:0f:63:
         62:69:82:b8:49:e1:bc:68:34:90:b4:6a:92:45:ee:10:00:ef:
         9d:ff:13:d6:11:fd:e8:05:30:d8:1c:c8:4a:1d:e9:06:d1:08:
         a8:bd:33:33:ca:0e:01:2c:d9:9f:95:cc:80:91:03:36:1e:5c:
         9e:0d:85:5f:27:f6:e7:76:16:11:a7:04:17:c6:ae:af:71:47:
         47:4c:04:bb:eb:c8:24:2b:18:59:57:d2:6f:c6:b7:6a:b8:cf:
         d8:d0:de:ef:8f:f0:87:bd:4e:55:b4:2f:f5:1c:d9:20:62:20:
         28:cc:61:f7:a3:ef:a8:fd:d9:da:c3:b1:9f:80:c5:8c:ab:3e:
         2f:19:e8:f5:31:84:1c:15:b4:4f:aa:11:2a:f9:7b:15:d9:96:
         aa:7b:8d:22:22:1a:62:f6:49:85:b9:62:90:a9:bf:9e:38:1a:
         e4:f2:4d:41:e2:97:f6:47:64:e7:bc:f7:f8:56:a6:38:0d:ff:
         d0:b0:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org