Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/EB54553EC23111EBA9E0ED14F8AEA228.roa
File:                     EB54553EC23111EBA9E0ED14F8AEA228.roa (raw, json)
Hash identifier:          d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=
Subject key identifier:   AE:36:D2:33:60:7C:4F:93:E1:0C:5F:25:0A:B9:14:68:CE:B5:ED:35
Certificate issuer:       /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial:       01E3
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/EB54553EC23111EBA9E0ED14F8AEA228.roa
Signing time:             Mon 31 May 2021 17:02:02 +0000
ROA not before:           Mon 31 May 2021 17:01:57 +0000
ROA not after:            Thu 31 May 2035 17:01:57 +0000
asID:                     327926
IP address blocks:        2c0f:e8e0:110::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
        Validity
            Not Before: May 31 17:01:57 2021 GMT
            Not After : May 31 17:01:57 2035 GMT
        Subject: CN=60b5168a-8c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:f9:2a:ce:67:d2:be:11:8b:1c:a9:06:d6:
                    64:82:79:ca:1b:e9:09:b2:e4:c7:45:53:1c:d5:be:
                    ff:ca:73:39:eb:34:6e:ef:2f:7d:8d:16:73:6e:1f:
                    9f:93:81:40:84:88:fe:c2:4c:e3:ed:32:ff:1f:dc:
                    7c:2e:0e:dc:a6:c1:f1:e9:4d:d1:fd:73:f1:44:fd:
                    04:d8:03:ae:ef:6d:06:24:99:ea:27:09:c8:c3:ae:
                    ff:e9:65:ce:93:32:9e:b6:0f:66:a8:c9:ba:7c:f0:
                    36:a0:1a:c3:10:9a:0e:63:9d:51:aa:96:3f:17:49:
                    dd:d2:65:d9:8f:dd:b7:d4:1c:25:e6:33:43:23:63:
                    e6:c9:5d:8e:80:f7:4a:df:36:b8:ce:59:c4:c4:dc:
                    82:3e:ce:8d:06:69:95:ff:93:f6:2e:22:dc:40:80:
                    25:f1:4c:c8:d1:86:12:77:a0:87:59:89:32:09:98:
                    47:cd:62:c0:3b:19:12:5e:19:03:01:fa:ee:ea:fe:
                    dc:0d:0e:ba:29:da:c5:ce:e8:7f:b3:9c:cd:52:5a:
                    ed:eb:58:f9:0f:91:e5:20:26:a0:2c:12:74:40:7b:
                    79:bf:87:80:58:08:65:eb:ff:13:67:95:96:69:90:
                    83:72:4e:b7:52:8f:02:7b:7d:64:56:6f:97:93:09:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:D2:33:60:7C:4F:93:E1:0C:5F:25:0A:B9:14:68:CE:B5:ED:35
            X509v3 Authority Key Identifier:
                keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/EB54553EC23111EBA9E0ED14F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:e8e0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:f4:2b:1d:2d:fc:d8:8b:35:2a:f7:c2:75:a7:ef:a5:f7:
         3e:50:8d:4e:d6:0f:97:56:c0:88:7f:77:61:64:94:93:be:f5:
         3c:6a:bc:9a:a7:62:41:e5:db:83:ba:f3:58:0e:6e:cb:5c:7f:
         e8:25:e2:bc:c0:a6:51:40:1e:ef:55:9b:a3:c0:cf:91:e6:d1:
         e3:a2:f9:80:bf:ea:7b:5b:d2:23:ad:39:ec:b0:f3:2e:8e:c2:
         50:d5:42:fd:8e:4a:c3:48:69:de:f5:b3:48:c5:2a:59:74:b0:
         e7:0d:76:6c:e1:b9:1b:48:bc:02:7c:9a:46:10:45:cb:3e:f1:
         25:c0:55:a1:7d:85:5c:6b:d2:81:ba:48:f7:13:01:9d:63:18:
         c7:32:70:98:5d:db:45:7a:a4:41:60:32:55:43:38:63:8f:89:
         ca:58:81:20:cb:95:11:83:34:91:17:38:d5:ac:ee:09:c1:f3:
         96:82:9b:6b:a6:52:c6:bc:75:ba:52:23:96:7d:85:59:8d:21:
         4e:1d:48:b6:3b:e9:13:88:66:93:43:b8:02:f9:39:06:6f:cc:
         9e:39:f9:1f:8a:cb:85:1d:d7:8a:43:9e:69:24:f4:e8:40:11:
         d8:65:86:76:db:79:c8:ed:6e:cd:24:04:31:a6:92:6a:e0:7e:
         6d:74:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:12 2024 by rpki-client on console-ams.rpki-client.org