Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/269C65D4A71A11EF9F932650762E951A.roa
File:                     269C65D4A71A11EF9F932650762E951A.roa (raw, json)
Hash identifier:          9YQM72GiW6nta9heMnLKp6VqAocIF8xIFy/4htDxAfo=
Subject key identifier:   F7:C8:AF:59:85:D3:29:B9:61:F4:4F:D3:57:AE:51:A2:2B:79:31:D1
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       12CC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/269C65D4A71A11EF9F932650762E951A.roa
Signing time:             Wed 20 Nov 2024 08:33:43 +0000
ROA not before:           Wed 20 Nov 2024 08:33:39 +0000
ROA not after:            Fri 20 Nov 2026 08:33:39 +0000
asID:                     202656
IP address blocks:        102.165.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4812 (0x12cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov 20 08:33:39 2024 GMT
            Not After : Nov 20 08:33:39 2026 GMT
        Subject: CN=673d9ee7-3c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:e3:71:40:dd:5f:a5:00:9f:02:fa:2e:b7:
                    0d:10:6c:66:4c:a1:23:ee:3c:96:ee:05:e4:b6:7f:
                    98:cd:e0:92:04:c8:d9:67:84:9c:a4:76:41:cb:16:
                    ba:b6:dc:0e:1b:8c:51:37:42:65:40:1f:6a:26:15:
                    12:ae:10:ea:2a:69:2e:2e:40:ef:d7:88:58:73:87:
                    dd:ad:0c:da:91:cd:b1:6e:45:d3:3c:5a:e5:28:81:
                    a9:75:3d:d4:65:0a:14:04:4c:12:b2:25:0e:03:51:
                    98:f5:a5:29:a8:12:86:87:8f:54:f3:c9:7f:16:cb:
                    d7:de:47:64:c7:91:f6:9a:d8:d7:54:e4:30:d4:57:
                    25:0d:1f:fe:9a:b8:17:11:68:4f:5e:78:6a:be:ef:
                    fc:59:f6:4f:dc:68:19:bd:af:03:82:97:31:be:79:
                    f7:40:b7:3b:da:1f:4a:73:e6:49:59:f6:b6:3d:a7:
                    e0:d4:4a:1c:ab:61:86:60:ac:fa:56:c2:53:5d:1b:
                    c0:b2:85:09:2d:7e:21:b2:bb:a4:a2:8c:de:42:21:
                    35:68:59:49:a7:9b:c7:99:32:1f:af:28:9a:66:c9:
                    92:4c:b0:e3:e0:bf:12:4b:6d:bd:b5:db:2f:51:7f:
                    8c:2f:eb:70:f9:06:47:a0:1e:80:47:e0:17:4c:4a:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C8:AF:59:85:D3:29:B9:61:F4:4F:D3:57:AE:51:A2:2B:79:31:D1
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/269C65D4A71A11EF9F932650762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:b0:6b:ac:51:a2:25:bb:8f:a9:81:a1:18:cc:f0:28:21:
         02:95:7d:ca:0d:22:c8:4f:b1:50:79:fa:94:f8:3e:97:8d:42:
         72:cb:66:04:6b:30:da:09:b6:af:e4:99:d2:ab:2f:40:65:1b:
         13:55:9a:db:01:f4:87:35:41:f4:96:a6:9e:00:c0:21:f1:97:
         21:60:e2:9c:f2:af:e1:f2:a4:3c:30:6e:43:ea:fd:ae:c6:ff:
         8c:7d:08:b2:e3:ca:02:2c:d7:7e:ff:ce:e6:18:73:a4:a2:03:
         b3:a6:4d:fb:98:9e:76:5b:40:45:76:45:3e:c3:51:c6:96:7b:
         38:68:ab:9d:13:22:46:55:1f:eb:ff:31:79:f1:9f:84:29:05:
         42:11:cb:d9:43:84:6c:ac:d7:90:98:05:fc:3f:8b:ca:73:1c:
         9d:0f:2e:2a:df:cc:4a:6f:66:5b:95:50:d2:77:3c:23:3f:29:
         6e:66:0a:ce:2f:2c:2d:c5:56:32:99:a9:72:7c:65:72:d1:d0:
         8b:a4:9c:5c:07:c5:2b:97:72:d5:37:ac:ef:27:1a:f6:f7:f2:
         de:bf:50:46:db:cb:29:ed:05:bc:c0:6a:dd:2c:b0:b9:2f:fa:
         43:bb:d1:be:e2:ae:bd:ef:dd:62:8c:9e:03:2b:55:ee:7b:db:
         e6:f9:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:15 2024 by rpki-client on console-fra.rpki-client.org