Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E51A9CFC1B4C11EE94EF90494AD9E6FC.roa
File:                     E51A9CFC1B4C11EE94EF90494AD9E6FC.roa (raw, json)
Hash identifier:          xgvB57oMcyf0oZ0IbWxG1VRy4jOuSGwDS7lE/6LSJHM=
Subject key identifier:   E4:E9:EC:3C:35:D8:FD:83:CF:96:41:44:6D:11:62:07:E2:58:3A:AF
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0C55
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E51A9CFC1B4C11EE94EF90494AD9E6FC.roa
Signing time:             Wed 05 Jul 2023 15:59:17 +0000
ROA not before:           Wed 05 Jul 2023 15:59:13 +0000
ROA not after:            Wed 09 Jul 2025 15:59:13 +0000
asID:                     212238
IP address blocks:        102.165.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3157 (0xc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  5 15:59:13 2023 GMT
            Not After : Jul  9 15:59:13 2025 GMT
        Subject: CN=64a59355-cc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:c2:36:99:26:5a:d5:59:c3:5b:e1:cb:08:
                    75:2a:82:78:a1:92:db:7d:dd:d7:99:97:15:4d:84:
                    ab:ba:13:53:f9:cd:3b:0f:3a:c7:47:98:87:8e:e2:
                    39:d0:24:87:b0:a3:b6:95:27:74:8d:b4:d6:81:48:
                    b5:65:1b:fd:df:7d:5e:83:40:e1:9e:28:cf:a4:ac:
                    da:27:3b:a0:36:0b:99:e4:82:76:42:fa:fb:b4:6f:
                    09:95:5a:47:d9:2c:c9:06:89:63:dd:b5:4b:7c:15:
                    ed:ba:06:ca:d3:66:83:ca:c6:1a:e7:71:97:66:23:
                    5f:65:63:49:57:22:e3:fe:64:23:02:2e:2b:67:1e:
                    03:13:27:1f:b1:79:54:bf:58:a4:40:e1:53:74:37:
                    dc:5c:a1:1a:fe:03:c3:26:fa:8d:b7:45:cf:21:eb:
                    f6:ec:44:0b:9a:1a:41:b7:ff:2c:af:ff:6f:4f:9c:
                    1c:29:2b:9f:b1:c4:19:25:61:e3:a5:14:2e:41:c3:
                    7e:af:46:b6:1b:8b:88:86:97:60:b5:6b:33:a5:0d:
                    75:cb:32:96:a8:58:63:12:81:14:6d:de:11:62:91:
                    f9:60:44:10:b5:96:35:f8:bc:60:ec:21:9d:ce:54:
                    f2:36:a4:d8:4a:55:54:09:63:3b:c0:b5:35:06:50:
                    94:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E9:EC:3C:35:D8:FD:83:CF:96:41:44:6D:11:62:07:E2:58:3A:AF
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E51A9CFC1B4C11EE94EF90494AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:28:18:fd:71:be:ff:20:bf:de:73:51:21:89:56:88:3c:bd:
         bd:64:c7:c3:b3:61:26:30:94:65:cb:a5:8c:41:9d:28:f7:31:
         a3:34:87:fb:86:9d:bd:1b:d1:d7:87:5b:b6:3f:4f:a6:57:24:
         35:63:43:7a:83:74:6c:a2:ce:f4:e3:8c:9d:e9:bd:b8:13:5d:
         15:92:0d:22:ce:ed:4d:8a:fc:fe:cb:4f:5e:1d:62:c9:93:f2:
         15:cf:c2:47:22:3d:41:7f:d1:b2:9d:8c:57:29:1f:bb:c9:72:
         67:77:ea:df:0c:4c:59:a1:99:43:58:9d:cb:1d:36:ed:e0:17:
         1c:1b:e9:34:2f:af:0f:4b:8c:dd:b1:16:dc:59:47:7d:c9:2f:
         c4:76:34:15:1f:af:d2:73:5c:bd:e0:b9:45:75:57:dc:30:c2:
         f1:68:1f:53:b7:48:39:75:c8:06:51:a0:88:2e:8d:5d:d4:97:
         97:8b:16:e7:c6:5e:e4:36:fe:ed:29:47:f9:21:a9:c9:63:ba:
         4f:7e:ba:1b:b5:4c:07:29:32:8e:b8:ef:1c:68:60:04:b9:55:
         66:f0:88:01:5d:14:f1:e9:14:8e:34:63:00:32:05:86:13:76:
         09:6c:3b:06:b8:a5:21:ed:f9:7f:84:3c:9b:9e:84:80:9b:f1:
         94:45:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org