Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7931790C482311EFA8AACF54762E951A.roa
File:                     7931790C482311EFA8AACF54762E951A.roa (raw, json)
Hash identifier:          tpiAHLQvlOd2Di3lAAp5pDmmsOTaSvJNtmbcRjCBBGM=
Subject key identifier:   EA:67:EC:EA:7D:58:CA:2E:4A:3D:3A:D0:B1:BF:EE:36:F2:2B:8C:7F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       117E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7931790C482311EFA8AACF54762E951A.roa
Signing time:             Mon 22 Jul 2024 12:11:07 +0000
ROA not before:           Mon 22 Jul 2024 12:11:03 +0000
ROA not after:            Wed 22 Jul 2026 12:11:03 +0000
asID:                     11170
IP address blocks:        102.129.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4478 (0x117e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul 22 12:11:03 2024 GMT
            Not After : Jul 22 12:11:03 2026 GMT
        Subject: CN=669e4c5b-a242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:1d:86:88:96:8e:7c:71:44:fd:d9:f6:69:
                    48:7c:07:50:e7:99:a8:04:8a:bc:96:b5:3a:8c:6f:
                    1c:34:04:8e:ac:be:b0:c4:2e:e5:a6:d6:0d:80:6f:
                    d2:78:22:68:68:4b:aa:5c:39:18:50:68:44:69:08:
                    82:9e:37:42:f1:f7:82:3d:58:87:b2:ad:da:09:be:
                    19:ba:1b:19:d5:f3:d8:2b:13:a2:47:9c:a9:4f:6a:
                    94:6f:aa:b4:59:c8:3e:46:b6:8c:ff:11:62:b6:d7:
                    14:c2:69:d5:e7:db:71:16:a0:45:bf:e7:94:54:56:
                    0c:03:1a:5d:18:27:22:62:e4:c2:aa:f5:64:27:2e:
                    06:44:43:53:50:7a:64:9f:76:ea:c7:8a:7d:fe:5d:
                    41:6e:1c:24:48:10:12:16:2d:66:51:a7:65:5e:a7:
                    fc:17:20:9b:0a:6e:5c:00:52:76:39:67:57:f8:fe:
                    72:51:61:11:da:d3:cb:3e:cf:7a:df:1d:03:b8:20:
                    d2:38:df:b7:40:e7:1d:54:f1:3a:78:1c:d1:ab:a4:
                    b9:30:eb:d9:0a:2c:57:fe:85:e0:09:b1:6f:42:4b:
                    93:bc:b0:4d:d1:0d:c8:f6:03:9d:c1:5b:9d:3a:83:
                    71:51:10:a7:ea:04:7b:54:2a:68:eb:97:a3:24:1e:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:67:EC:EA:7D:58:CA:2E:4A:3D:3A:D0:B1:BF:EE:36:F2:2B:8C:7F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7931790C482311EFA8AACF54762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:4c:db:aa:0e:b4:a6:08:b2:5d:74:75:03:3a:08:7e:48:ea:
         1c:bc:86:f9:1e:be:e4:96:c8:43:cc:94:e5:e6:c3:99:ec:f8:
         57:8c:2e:d3:f8:bf:03:7a:a4:d5:25:32:f0:65:42:42:bc:f7:
         75:aa:b3:a4:43:9e:d8:0f:ba:7f:e6:d3:98:40:87:94:3d:60:
         9e:b2:20:ef:c7:2f:86:87:98:22:d0:a9:c1:7f:af:1f:39:b5:
         3d:b4:5a:96:d5:00:0d:79:0a:d8:9d:c1:fd:8d:1a:d9:d5:64:
         0a:83:50:df:8a:33:9d:30:ae:82:1b:a6:d2:1b:2a:d9:a7:58:
         4e:6c:a9:23:e3:42:38:2b:2e:63:00:4b:80:a4:a0:4b:7b:b1:
         59:70:71:bc:51:f3:ab:a2:b9:dd:cd:58:a2:66:3b:75:90:b3:
         9c:c6:69:8b:e0:9e:84:00:ed:bf:7c:ed:80:39:2a:eb:a7:65:
         b7:ae:b3:89:a5:4d:18:a9:7d:b7:39:6f:8b:ca:53:79:d4:54:
         d0:54:83:a2:28:03:ad:59:16:26:5d:fa:d3:07:29:9c:7c:66:
         e4:62:9c:5e:a4:3a:14:e5:e2:5c:ac:60:4c:40:b6:e6:37:e1:
         9d:aa:95:71:04:6c:1c:75:c9:ba:6e:aa:99:79:c0:e1:35:97:
         ea:96:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org