Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98250EDC2BE611EE9932B16D4AD9E6FC.roa
File:                     98250EDC2BE611EE9932B16D4AD9E6FC.roa (raw, json)
Hash identifier:          t6ZkW+Y21vkArTcetYHLIampcdIQbyGWAm1evjve6io=
Subject key identifier:   6F:67:01:2E:F7:CC:C5:E5:BC:93:3E:21:76:74:B5:4D:A8:AC:B0:4B
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0C99
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98250EDC2BE611EE9932B16D4AD9E6FC.roa
Signing time:             Wed 26 Jul 2023 18:59:49 +0000
ROA not before:           Wed 26 Jul 2023 18:59:44 +0000
ROA not after:            Sat 26 Jul 2025 18:59:44 +0000
asID:                     13876
IP address blocks:        102.165.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul 26 18:59:44 2023 GMT
            Not After : Jul 26 18:59:44 2025 GMT
        Subject: CN=64c16d25-c019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:19:12:cc:71:79:8f:df:64:71:f7:9f:5b:
                    13:85:73:8a:5b:90:7d:59:c3:10:35:38:9f:2a:13:
                    26:d8:de:a4:1a:43:c6:13:4a:27:de:26:d4:b8:dd:
                    32:d1:b7:b5:0f:e0:0a:18:63:41:ae:75:7e:03:07:
                    45:22:1e:02:d1:5e:36:0c:85:49:cb:0d:5a:39:9c:
                    98:47:84:1c:b3:9e:9f:b2:7e:94:9c:83:a1:28:19:
                    e7:80:7f:32:28:c1:b3:99:07:8c:78:d3:2b:58:2c:
                    f8:2b:3e:33:b3:c1:64:49:2e:dc:09:25:a8:2c:7c:
                    9b:0f:5b:20:db:41:20:44:95:6b:b0:88:0d:c6:6a:
                    be:4d:2e:8f:23:93:99:d2:16:f0:2f:6d:4f:bf:0a:
                    6f:f6:66:46:28:78:9d:47:12:ae:66:7d:09:81:cf:
                    58:53:f6:e7:7f:93:8f:7f:fb:8b:5d:73:c0:02:b5:
                    ba:eb:45:7a:fc:4a:91:f9:be:61:7f:70:9d:07:7d:
                    4c:a0:9a:e8:e6:49:4e:6d:fb:cf:77:75:55:0d:7c:
                    c3:85:13:c4:93:16:aa:9a:7f:29:61:ef:2e:1d:31:
                    61:b1:0b:7e:69:a4:af:d0:1a:91:da:02:d7:74:f7:
                    8d:70:4c:07:75:05:84:11:aa:89:6d:27:d7:e6:e0:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:67:01:2E:F7:CC:C5:E5:BC:93:3E:21:76:74:B5:4D:A8:AC:B0:4B
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/98250EDC2BE611EE9932B16D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:07:ad:47:fb:a8:54:11:97:8d:a3:01:14:ec:2f:82:40:83:
         fe:8b:09:b1:81:67:b3:c3:ed:59:8f:54:d6:2b:0c:f9:26:8c:
         41:3b:38:6b:02:51:bc:28:83:34:65:8a:1d:7e:e8:80:a1:58:
         45:a8:c5:39:7f:95:1e:cd:be:b8:80:01:6a:05:21:2c:af:8f:
         ac:fb:49:85:bb:b9:71:4d:e5:6b:0b:68:fc:9a:ce:34:9f:b0:
         00:06:ce:c9:57:f4:d0:f4:bc:1d:43:15:0e:cb:06:cd:ca:f1:
         f7:9e:65:8d:85:c5:a3:8c:1c:bd:77:49:85:29:55:0f:b7:bb:
         ed:42:69:db:2c:96:5f:33:67:c4:68:91:8a:79:12:24:17:c7:
         03:e3:8f:e4:c1:32:69:91:6f:3e:09:ff:09:36:10:03:85:c7:
         c9:7a:dd:95:fa:ee:27:b6:34:ff:cd:ea:35:86:5f:6b:34:8c:
         39:b9:50:10:4f:7b:d0:1e:0e:76:40:e0:a4:92:e6:18:b0:35:
         df:28:06:f0:7d:51:0f:a0:c7:ce:c7:b7:fc:84:82:52:a2:4d:
         1f:d4:18:48:ab:df:48:7d:11:f3:ad:30:7f:2e:95:0a:ac:89:
         84:52:20:0a:ed:8b:fb:26:62:68:e7:6b:c4:c9:c4:93:25:54:
         98:15:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:21 2024 by rpki-client on console-fra.rpki-client.org