Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E226D46640111ED961B5CE9F1222468.roa
File:                     4E226D46640111ED961B5CE9F1222468.roa (raw, json)
Hash identifier:          5ezygwQCsoXUoBzQYw/j9KSGiL6LOVhFM2CRZQJz94w=
Subject key identifier:   67:EE:4C:22:4E:2C:55:01:BF:2B:0B:7E:9C:27:AF:BC:EC:C5:35:8F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       08E0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E226D46640111ED961B5CE9F1222468.roa
Signing time:             Mon 14 Nov 2022 09:47:09 +0000
ROA not before:           Mon 14 Nov 2022 09:47:05 +0000
ROA not after:            Sat 16 Nov 2024 09:47:05 +0000
asID:                     174
IP address blocks:        102.129.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2272 (0x8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Nov 14 09:47:05 2022 GMT
            Not After : Nov 16 09:47:05 2024 GMT
        Subject: CN=63720e9d-b6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:b4:c5:af:9c:e6:b0:ff:e4:6e:ba:68:74:
                    1b:77:9a:c7:87:73:76:74:1a:ae:11:9c:16:02:e4:
                    d4:29:8d:36:c9:dc:ab:21:59:c7:9e:dd:d1:d8:1b:
                    0f:a9:2d:91:3a:ff:0d:89:1f:b2:be:74:e9:1e:3c:
                    13:7d:ba:95:ff:d7:f7:46:49:ea:99:d1:f9:da:a6:
                    4c:cd:2f:b3:d3:38:c7:c2:3a:2c:56:c6:20:0d:83:
                    23:20:39:80:7b:38:4f:10:fa:87:85:ca:65:06:11:
                    61:9d:24:31:10:25:93:b4:83:55:f4:4b:ce:10:f0:
                    5c:31:01:aa:ea:03:68:41:12:b4:99:c1:59:b9:0f:
                    2e:60:7f:87:01:c4:b7:e7:bd:98:d9:2c:f5:45:2d:
                    39:25:58:9c:61:a8:59:51:fb:b5:13:28:d1:38:fc:
                    e9:db:30:0b:8a:0c:9e:09:14:13:b3:d5:3e:59:e8:
                    b7:40:d0:92:eb:23:a0:70:dd:42:d4:8a:58:c5:9f:
                    a1:b0:e3:f1:a8:bd:02:63:01:dc:8e:7d:2b:49:29:
                    46:5a:4a:26:be:df:bb:e7:0a:0b:0b:b9:30:f8:58:
                    b8:7e:9c:f8:57:f6:07:e7:60:bb:09:cf:32:39:f7:
                    3b:3d:82:68:0c:b2:03:29:73:cc:24:49:9d:4f:09:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EE:4C:22:4E:2C:55:01:BF:2B:0B:7E:9C:27:AF:BC:EC:C5:35:8F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4E226D46640111ED961B5CE9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2b:56:0f:ac:92:31:95:b0:f9:fe:1c:ae:d0:f1:9b:72:b1:
         70:a0:09:90:85:29:8e:5e:11:d8:70:a3:dd:31:1f:31:4b:c1:
         96:38:26:15:d4:74:ce:a0:c9:94:04:86:6c:b1:fa:26:03:cc:
         92:c5:a8:a4:ef:1f:5e:82:18:27:e3:e5:4e:9f:92:be:65:53:
         96:f0:42:8d:9e:4d:af:53:e9:3a:44:7e:f9:57:62:ca:4b:fd:
         8e:35:d8:2d:4a:0b:ef:43:5a:5b:bf:a4:f8:85:47:84:74:99:
         d2:45:17:86:c5:18:78:df:47:e0:a5:65:c3:75:b4:e2:77:eb:
         53:4a:f1:c8:4e:45:08:c7:51:41:3d:c7:06:df:16:48:dd:48:
         05:4b:26:8a:82:08:84:16:fc:10:b7:70:41:ab:7f:ae:9b:54:
         12:cb:b3:f5:01:32:e2:36:35:ef:c4:bd:45:02:3f:2c:02:cb:
         f7:10:8c:47:66:9a:27:04:79:bc:45:df:a5:63:84:34:46:9f:
         a3:21:85:71:44:3f:b3:87:2b:f3:78:94:ca:3a:48:2f:7c:4c:
         79:86:1d:b8:89:13:c5:66:21:10:d6:ff:4b:b6:d7:90:55:27:
         4a:52:3e:4c:b8:7a:f8:83:52:e1:55:fe:65:eb:e3:e3:bf:35:
         e7:a8:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:16 2024 by rpki-client on console-ams.rpki-client.org