Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/02662AC6596B11EF900C9767762E951A.roa
File:                     02662AC6596B11EF900C9767762E951A.roa (raw, json)
Hash identifier:          aVMpGl/CGfxshLyuuzJXKaYTic8TVdKj6bOnFVJbulg=
Subject key identifier:   B3:4E:D1:BC:30:6C:6A:D1:75:9D:7B:4D:B8:7D:A1:43:CB:2F:A3:E5
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       11AC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/02662AC6596B11EF900C9767762E951A.roa
Signing time:             Tue 13 Aug 2024 11:56:01 +0000
ROA not before:           Tue 13 Aug 2024 11:55:58 +0000
ROA not after:            Wed 13 Aug 2025 11:55:58 +0000
asID:                     42831
IP address blocks:        102.165.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4524 (0x11ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 13 11:55:58 2024 GMT
            Not After : Aug 13 11:55:58 2025 GMT
        Subject: CN=66bb49d1-9312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:b3:91:97:27:34:68:85:5d:9e:69:d5:9c:
                    73:ce:cb:84:c3:d6:72:5e:27:81:df:f8:6d:43:fc:
                    cd:f6:90:db:c7:57:15:bb:76:83:de:fe:16:cb:a2:
                    90:14:b0:0f:3e:82:4f:5c:ad:34:3f:aa:8d:12:be:
                    10:bf:49:62:89:f3:64:14:2e:17:94:02:a0:39:cf:
                    c8:96:88:31:c9:19:30:ed:ed:4f:4c:97:e5:9e:06:
                    2f:04:2a:74:8a:e3:36:7b:4f:27:11:9d:59:c1:b9:
                    a5:26:90:71:d0:bd:32:5c:1d:88:91:70:d0:8a:ae:
                    d8:d6:8f:e1:dc:9d:24:4a:57:0e:70:23:3f:c4:f4:
                    ad:98:5c:c2:0f:ca:98:f8:ed:2b:52:8c:19:a8:fb:
                    81:a2:93:6d:a6:33:a1:1f:f4:3a:34:72:18:bc:3c:
                    f6:54:61:33:f6:ae:43:e7:23:bd:09:49:6a:c6:0a:
                    d8:0d:a7:2b:b2:c0:6e:8a:df:8f:9e:6b:8b:d3:6b:
                    87:a1:33:24:6a:be:ef:b7:34:85:51:79:3e:c4:4a:
                    79:fe:f7:d8:c2:f7:f7:9a:d8:14:b8:8c:c2:aa:0c:
                    ed:4b:b0:22:21:7f:1f:8b:ba:7c:7a:66:64:6a:ab:
                    68:a7:c1:74:00:c0:34:db:8a:cf:c2:60:a6:13:cc:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4E:D1:BC:30:6C:6A:D1:75:9D:7B:4D:B8:7D:A1:43:CB:2F:A3:E5
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/02662AC6596B11EF900C9767762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:b2:10:bf:e1:66:2a:f2:80:d2:eb:68:d2:55:f8:88:06:
         52:74:b2:90:7e:1b:21:e7:ff:db:3b:09:4a:1d:d0:1a:a8:9e:
         e0:20:04:02:40:9f:de:74:e2:88:85:3d:80:02:72:ef:0d:39:
         98:a4:77:07:cf:90:e8:62:22:c1:86:f6:5e:f0:16:3b:76:ad:
         3b:1d:09:62:3d:75:30:b0:c1:09:1b:5c:42:e9:b1:03:d1:85:
         33:36:61:be:ca:f2:49:cb:08:39:aa:6e:6e:2b:73:eb:5c:bb:
         2d:88:eb:38:bd:14:96:84:0c:7f:11:89:d4:41:2e:1b:e1:c5:
         28:f2:9e:0d:55:ae:ec:37:24:67:a5:0c:96:ee:0b:2a:9b:1e:
         c4:11:77:d1:ae:4b:d5:e5:04:83:1c:23:5b:3e:85:9b:8d:98:
         82:30:b6:b8:eb:2e:c4:3b:21:b5:cd:c3:bd:44:30:96:5f:67:
         58:a9:33:ce:75:6b:c4:d4:33:e6:39:71:65:a8:67:ff:79:28:
         82:09:f2:f1:f4:63:6e:12:82:41:59:c8:95:81:fe:09:a5:ad:
         0a:66:8e:95:e1:16:fc:4c:fb:fe:8b:8c:46:86:c8:dd:ad:52:
         34:1b:b2:b3:9b:42:05:95:07:10:52:27:05:3f:91:63:2e:a9:
         82:b3:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org