Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1C365EC553911EDAECF01BFF1222468.roa
File:                     C1C365EC553911EDAECF01BFF1222468.roa (raw, json)
Hash identifier:          aN6cz16CN+IEHBBDs8mTKFUhhCWDKobnLUk+WNmj5EA=
Subject key identifier:   75:83:40:23:33:51:5B:08:46:82:96:05:60:29:F1:EC:48:03:95:E0
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       089C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1C365EC553911EDAECF01BFF1222468.roa
Signing time:             Wed 26 Oct 2022 14:23:27 +0000
ROA not before:           Wed 26 Oct 2022 14:23:23 +0000
ROA not after:            Sun 27 Oct 2024 14:23:23 +0000
asID:                     61317
IP address blocks:        102.129.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 26 14:23:23 2022 GMT
            Not After : Oct 27 14:23:23 2024 GMT
        Subject: CN=635942df-3b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:eb:6c:d4:b5:3b:ff:a5:1d:09:6e:b1:42:
                    aa:49:f6:5e:bd:16:d2:bb:37:20:a3:a3:62:dd:83:
                    75:2a:12:fa:2c:78:7f:bc:dc:fe:b1:f5:2c:e1:27:
                    eb:c5:e4:bb:54:18:7a:72:13:44:30:67:6c:e4:c9:
                    4f:9d:97:78:ce:ce:83:5d:14:06:ee:ac:be:7c:31:
                    dd:e3:4f:bc:ef:16:49:8f:1b:d7:12:c1:4a:ae:d3:
                    99:49:71:c5:32:1b:5d:0d:9c:71:4d:f8:aa:13:ec:
                    36:43:55:3b:db:01:0a:3e:86:97:d5:6f:48:d5:95:
                    29:6b:d2:05:4a:c4:dd:2d:f4:ed:d9:fd:4c:68:4a:
                    0e:e8:b7:1a:26:da:50:0d:03:d0:df:4a:4c:ac:6f:
                    48:a7:08:c7:75:40:6f:24:2d:35:86:11:79:88:4f:
                    1f:31:8e:a9:8c:2a:8b:fb:44:11:c8:80:ed:ff:1c:
                    0b:42:cc:a2:e0:84:73:00:72:eb:fd:d7:7d:2d:10:
                    db:d5:0f:cc:ac:2e:77:ad:c3:4f:d4:7b:05:0e:e8:
                    49:f7:ef:28:fb:ec:e5:9d:f4:58:60:f3:4c:d0:4c:
                    7f:24:43:48:e3:68:fc:9f:ca:c2:d0:c1:45:38:ce:
                    18:5d:e4:c8:88:e1:b0:57:ab:1f:ec:b4:9b:1e:6a:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:40:23:33:51:5B:08:46:82:96:05:60:29:F1:EC:48:03:95:E0
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C1C365EC553911EDAECF01BFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c1:3c:49:e9:be:5e:c2:16:25:ef:65:92:85:96:34:49:a9:
         9e:52:38:dc:bd:75:6a:a1:79:ae:54:0d:79:f1:df:d3:f4:db:
         13:e7:4b:26:3a:40:f5:c7:3c:46:81:6c:1e:3c:8f:e5:c7:b8:
         47:48:58:58:8e:ca:c7:8a:22:fd:fe:ea:a1:8a:0b:d5:78:ed:
         cf:2e:eb:b7:fd:e2:24:69:c1:db:e0:13:79:d5:d3:40:c6:ca:
         55:ba:a9:39:d3:15:8c:ed:ab:1f:f3:3e:a0:80:df:ed:6c:3a:
         ab:98:80:5e:b5:70:ba:3e:8e:c7:58:e3:78:e8:25:03:a2:b7:
         8e:73:a4:ed:87:b7:00:98:2d:05:43:12:85:25:ab:eb:1b:38:
         0c:e7:82:17:07:ff:2a:50:a8:61:51:0b:8b:ec:65:6f:37:1c:
         fd:28:a0:e0:5f:60:05:71:67:c1:6d:a3:85:a0:0d:a7:5d:5d:
         98:de:09:dc:7a:fe:5e:0a:5e:bd:80:60:6e:75:36:28:34:a0:
         8e:d2:4d:d9:21:b2:c5:0b:48:a7:64:b4:6e:94:4b:37:fe:a1:
         79:e4:ad:55:2c:89:be:c4:82:6a:82:ac:3e:30:92:2b:73:5f:
         40:c6:a3:24:fa:53:1e:60:7c:91:e4:a1:4e:67:80:eb:e5:01:
         7d:5a:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:13 2024 by rpki-client on console-ams.rpki-client.org