Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C93F14E856411EF90E059AE762E951A.roa
File:                     9C93F14E856411EF90E059AE762E951A.roa (raw, json)
Hash identifier:          jByyTLz3D4dVipDPTfhOscF3GvtZzGWCITN6QnAYQrU=
Subject key identifier:   FF:9C:56:6A:27:40:7C:11:E2:14:F1:BB:70:7D:01:DD:CE:9F:9A:30
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       123F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C93F14E856411EF90E059AE762E951A.roa
Signing time:             Tue 08 Oct 2024 11:01:04 +0000
ROA not before:           Tue 08 Oct 2024 11:01:01 +0000
ROA not after:            Thu 08 Oct 2026 11:01:01 +0000
asID:                     212238
IP address blocks:        102.129.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4671 (0x123f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct  8 11:01:01 2024 GMT
            Not After : Oct  8 11:01:01 2026 GMT
        Subject: CN=670510f0-6196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:3a:ee:9b:8e:95:71:e1:4e:82:09:1a:cc:
                    33:12:45:0d:8b:3c:e2:78:ba:b3:69:07:bb:3d:34:
                    b1:4b:e6:fa:a7:dd:9a:1f:69:dd:0d:20:f8:8e:19:
                    d5:8f:01:84:f4:75:ff:3f:f8:3d:6b:72:71:b5:a8:
                    55:08:54:bb:c7:79:ce:38:2b:cd:3c:ab:8c:1e:cd:
                    96:b9:c3:7c:00:c4:f2:bf:a3:39:03:79:58:86:53:
                    5c:58:a7:90:d8:7a:a2:19:46:d0:c1:94:46:de:36:
                    5d:ea:7c:83:37:bf:6e:b7:88:39:9e:0b:52:3c:dd:
                    07:34:0f:e3:b2:ff:07:b7:e9:eb:c4:da:99:06:ee:
                    aa:87:1a:53:5b:82:17:11:fe:f8:ba:cf:fc:ab:99:
                    e1:75:8b:75:18:6c:85:99:c5:a3:39:1f:d3:b2:26:
                    1b:75:00:da:05:a8:2a:bf:ce:c5:6a:44:57:ca:bc:
                    ef:db:bd:fd:85:15:b8:12:4e:bf:44:cf:65:a7:d3:
                    fa:da:ec:ee:8f:94:1c:e5:63:d2:db:67:57:b6:7e:
                    ef:1e:a8:8d:27:af:e4:53:5a:0b:d9:0c:be:ca:05:
                    6c:02:86:b2:86:3e:6d:e1:f1:76:b8:90:b6:26:2b:
                    b2:bb:52:a2:a1:73:9a:e8:78:bd:a2:60:a0:e3:18:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9C:56:6A:27:40:7C:11:E2:14:F1:BB:70:7D:01:DD:CE:9F:9A:30
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9C93F14E856411EF90E059AE762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:cb:5b:a2:cb:c7:66:0f:01:6b:cc:7a:83:b4:9b:31:55:e7:
         38:a2:1b:37:03:85:49:7e:17:d5:ab:5d:fd:5d:0e:74:3b:b8:
         74:5b:46:e9:b5:ca:8e:ac:4d:9b:32:b3:8b:a2:d7:ed:81:cc:
         a1:f1:98:97:cd:1d:d0:90:4e:e4:4b:12:c2:c8:a5:b1:dd:97:
         f3:31:b9:33:01:10:6d:73:15:ab:32:1d:3c:2a:95:9a:b1:8c:
         55:56:e1:30:18:4a:83:6f:a6:fd:d5:b0:d9:42:e2:55:55:9e:
         a8:c5:cc:e9:68:ef:b2:1b:90:59:4e:1b:11:4a:61:14:cb:70:
         1b:eb:3c:38:4d:c6:e3:af:89:3e:26:ce:16:f1:02:c1:99:dd:
         69:f5:a0:73:2c:b7:3f:53:32:2f:05:fd:8a:38:42:0b:95:4d:
         e9:6f:1d:71:59:83:68:09:ad:b9:ad:db:8e:07:de:ce:48:c8:
         74:38:a2:c9:f1:78:39:44:0d:22:df:3f:d8:8f:41:ab:e0:87:
         63:57:db:e5:67:a7:d7:9b:53:b2:28:ee:41:30:c7:66:23:da:
         f6:e4:bb:8e:bb:66:2e:75:49:e4:de:a4:46:40:fd:1d:89:da:
         dc:22:03:09:40:33:61:87:0b:35:cd:6e:cb:51:f5:a5:7b:4c:
         8d:a1:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org