Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/EF2771B6058C11ECA6D7D166D8A014CE.roa
File:                     EF2771B6058C11ECA6D7D166D8A014CE.roa (raw, json)
Hash identifier:          YXkfLDI74TP0qwy/qoiGoDbGmfH/eQYKC6MdPvzecGo=
Subject key identifier:   2F:E9:B6:36:89:37:69:5B:14:BB:56:92:D0:5E:4A:1F:70:6C:AF:B9
Certificate issuer:       /CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
Certificate serial:       0307
Authority key identifier: 0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/EF2771B6058C11ECA6D7D166D8A014CE.roa
Signing time:             Wed 25 Aug 2021 10:12:21 +0000
ROA not before:           Wed 25 Aug 2021 10:12:16 +0000
ROA not after:            Thu 16 Dec 2049 10:12:16 +0000
asID:                     327767
IP address blocks:        165.16.200.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                          rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
        Validity
            Not Before: Aug 25 10:12:16 2021 GMT
            Not After : Dec 16 10:12:16 2049 GMT
        Subject: CN=61261785-c792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:25:79:2b:3d:6f:25:39:dd:81:26:1c:06:
                    f6:34:2e:70:7e:63:87:93:4a:73:8e:86:5f:23:79:
                    45:05:41:76:90:e3:d1:af:7a:19:9b:28:a6:72:36:
                    76:ba:86:86:6f:47:8b:ed:8b:3b:81:e8:d5:f2:1d:
                    f0:e0:1e:7f:06:fc:8d:63:42:2a:68:3a:94:49:cd:
                    31:70:49:ed:45:89:43:ba:1d:18:fd:67:50:09:74:
                    11:61:c5:de:6d:16:df:b6:4d:dc:96:f9:05:93:3e:
                    63:40:9e:ba:90:02:bd:32:cd:e9:8a:12:5f:4d:da:
                    1d:02:71:fe:d3:c4:8e:14:c1:75:95:d2:7d:c1:63:
                    f5:73:ed:e9:3e:df:38:b0:67:11:d3:f2:14:f0:40:
                    88:d4:1b:14:7d:72:39:7c:81:31:9a:b7:c6:35:9d:
                    9b:6b:e4:3b:c6:69:2f:b6:3a:75:cb:8c:33:b9:c2:
                    fd:b4:c1:16:06:d3:1e:ce:db:50:7d:dd:bc:43:a2:
                    73:4d:da:de:01:f7:e2:17:f8:c2:71:af:90:e6:a2:
                    e4:89:11:99:fe:a7:3e:c7:82:60:f3:7f:dd:5e:8e:
                    62:6f:be:9c:99:67:a7:c7:40:50:e2:f5:87:4e:ee:
                    8b:1b:4d:da:9a:70:0a:2d:d6:4d:7f:4b:91:7c:51:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E9:B6:36:89:37:69:5B:14:BB:56:92:D0:5E:4A:1F:70:6C:AF:B9
            X509v3 Authority Key Identifier:
                keyid:0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/EF2771B6058C11ECA6D7D166D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:fc:91:d2:98:d5:9a:68:fd:04:4c:f7:18:7c:d9:bf:23:
         5c:bc:9a:92:ab:fb:ae:61:99:ed:cf:d4:89:b4:b7:fb:18:40:
         f0:a5:82:d8:1c:e9:e7:ec:34:56:c8:c9:36:21:f3:cf:6b:69:
         88:b5:a0:37:e4:08:75:ca:e9:04:16:98:a0:9f:37:ab:a3:e9:
         44:9e:f7:5c:24:dc:51:b8:8c:79:4a:d7:38:7b:d2:8d:44:7a:
         30:5e:e1:12:f1:a5:60:78:9d:87:bb:ba:38:e0:08:1a:d2:0f:
         10:5e:84:f6:e3:91:3e:09:ed:c7:37:6c:00:26:d9:c4:e9:ed:
         4e:86:99:d7:f5:25:35:63:b1:81:7c:0c:90:5e:74:98:a1:06:
         ea:72:4c:72:5b:c8:77:fb:a6:35:49:c1:aa:a7:c7:a2:22:05:
         d6:65:40:df:b3:2f:ab:30:cc:78:e6:fa:ff:3c:ec:73:82:79:
         e2:42:52:33:5c:24:36:03:69:2f:47:ac:8f:4a:a3:a5:9f:12:
         a0:5d:07:aa:c8:f2:b8:8b:41:e3:c3:16:dd:36:5c:c7:d9:9c:
         98:65:e1:0f:fa:e1:c8:6d:20:36:e7:ae:92:c0:bd:82:88:37:
         dc:0a:34:20:59:fc:74:62:cc:bc:02:81:d8:af:b6:d3:b3:c6:
         0f:e9:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:14 2024 by rpki-client on console-fra.rpki-client.org