Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7B0EB180561611EF957AD24F762E951A.roa
File:                     7B0EB180561611EF957AD24F762E951A.roa (raw, json)
Hash identifier:          YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=
Subject key identifier:   19:2C:92:94:63:A7:4F:E9:00:89:60:E1:61:3D:D2:E3:B5:19:89:B8
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       01F1
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7B0EB180561611EF957AD24F762E951A.roa
Signing time:             Fri 09 Aug 2024 06:13:23 +0000
ROA not before:           Fri 09 Aug 2024 06:13:19 +0000
ROA not after:            Wed 09 Aug 2034 06:13:19 +0000
asID:                     37105
IP address blocks:        41.213.0.0/17 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Aug  9 06:13:19 2024 GMT
            Not After : Aug  9 06:13:19 2034 GMT
        Subject: CN=66b5b382-a37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bf:76:3b:94:2e:03:08:82:3e:cb:be:a2:71:
                    a0:36:26:ce:95:71:3a:1b:28:9b:58:22:db:eb:c5:
                    6c:72:01:3d:a7:e3:f7:6d:e8:9c:9b:94:6b:ba:48:
                    13:aa:15:5b:28:f9:73:1d:f1:e3:6e:71:5d:39:ab:
                    b9:e0:a8:f2:a0:71:12:f6:74:a2:42:df:91:6e:35:
                    99:34:c7:5d:7c:90:e3:b7:00:4f:50:b1:39:79:76:
                    93:c5:19:6b:fc:7c:8b:74:6b:46:1b:02:6d:c1:c7:
                    16:68:c6:92:2c:7d:79:9e:14:65:81:39:1a:9b:f5:
                    0f:27:38:27:92:fc:d5:b4:5d:48:ee:4e:1a:22:18:
                    8b:c7:0c:b0:ba:74:d5:05:d6:c1:dd:e5:83:40:16:
                    78:38:15:11:eb:f5:b7:9b:a6:e9:ac:93:8a:a9:f6:
                    93:2a:6d:f0:0d:41:72:06:30:95:53:4e:12:e1:d3:
                    b3:2e:92:b7:4d:bf:d3:0a:53:6a:a8:15:94:ef:67:
                    52:cd:10:43:9b:87:6a:36:d4:22:45:bd:6a:da:fd:
                    7e:e0:83:c9:28:80:c0:72:70:3a:e9:8a:5d:83:37:
                    1c:65:ad:79:24:c3:de:93:14:08:58:82:73:26:07:
                    a7:dc:c1:00:1a:8f:63:f1:b4:15:af:c1:60:81:dd:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2C:92:94:63:A7:4F:E9:00:89:60:E1:61:3D:D2:E3:B5:19:89:B8
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/7B0EB180561611EF957AD24F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.213.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bd:32:3b:a3:7c:78:78:5e:a4:af:0c:f8:4d:7b:0c:5b:b6:84:
         82:f7:b0:be:7a:79:91:fa:31:cf:a8:7f:9b:18:af:17:9f:7c:
         df:c1:a8:58:32:39:7d:85:9c:37:d9:31:ac:51:c5:3f:87:43:
         bb:84:07:45:34:87:78:cd:c4:a3:2a:4e:4a:6c:ee:9c:f5:f2:
         7f:ae:bf:fd:79:83:93:f5:99:88:39:65:bc:d2:f3:d2:3d:29:
         37:40:97:91:16:22:ec:3d:d9:b1:2f:25:d3:75:99:5b:dd:87:
         83:0f:66:e0:c9:cf:eb:5f:ea:0e:16:28:bb:f7:44:c9:93:27:
         d5:5f:65:b3:d3:03:8e:7e:a5:09:4f:9a:41:d1:de:74:20:d4:
         69:78:9c:7e:92:d9:a1:39:18:19:8a:5d:d3:1b:0a:f3:c9:18:
         20:97:a2:73:fa:96:f1:30:91:47:46:8a:9e:97:73:ad:0d:90:
         b6:f9:7d:92:f1:de:ba:a8:02:8d:e9:e2:09:1d:fb:e8:d5:6b:
         33:92:d2:be:e5:c3:4b:c1:85:67:bd:21:7f:03:8b:b5:ff:89:
         af:f5:f2:17:78:14:7a:3d:31:01:84:8b:35:f0:09:a5:f7:0e:
         cd:06:8b:d0:5b:49:d5:2f:c0:31:24:44:1a:01:3b:77:87:83:
         5e:4e:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org