Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA7D084E552511EDAB774292F1222468.roa
File:                     EA7D084E552511EDAB774292F1222468.roa (raw, json)
Hash identifier:          8/3Ht57T2cNYnk5tttktmdJT2fEeWgye35OcL82TIuI=
Subject key identifier:   ED:AD:E0:EC:F2:86:14:95:DF:95:D3:16:36:F5:83:E3:F9:36:A3:41
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       087E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA7D084E552511EDAB774292F1222468.roa
Signing time:             Wed 26 Oct 2022 12:01:25 +0000
ROA not before:           Wed 26 Oct 2022 12:01:22 +0000
ROA not after:            Sun 27 Oct 2024 12:01:22 +0000
asID:                     11426
IP address blocks:        102.165.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 01 May 2024 09:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 26 12:01:22 2022 GMT
            Not After : Oct 27 12:01:22 2024 GMT
        Subject: CN=63592195-bf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:25:0f:d1:29:9b:be:b6:a2:d8:39:de:f9:
                    7a:1e:4a:43:72:14:a2:d7:a2:ab:53:3b:a2:ad:93:
                    40:8e:79:f1:f7:53:96:9b:2a:6f:84:7d:a6:1d:dd:
                    66:2f:51:31:cc:1c:8f:c0:69:60:67:7c:90:d0:4e:
                    5d:14:0f:00:80:db:bc:1c:db:37:8c:87:bf:19:81:
                    ee:a9:6b:32:75:42:44:26:72:14:74:9b:1e:bb:af:
                    2b:df:7a:2c:90:ab:3a:ae:4f:30:71:be:9b:59:46:
                    f6:84:f2:5d:ae:71:30:3d:94:d7:85:85:bb:68:d0:
                    e2:a6:68:fa:8f:9a:9f:0b:84:7f:21:41:94:62:2a:
                    c5:63:b9:fa:ad:ae:a4:1c:f5:d9:75:4b:b5:c9:1b:
                    fa:ee:43:8e:29:d2:ec:d0:db:d0:08:f8:87:bc:60:
                    89:9e:18:df:ec:49:fd:9b:45:77:8e:97:1e:49:ff:
                    fe:29:94:92:ff:30:57:34:aa:24:85:db:9d:fe:94:
                    6a:83:c3:68:38:1b:b4:23:33:5c:49:aa:9f:0c:49:
                    6e:1f:6b:c5:38:d7:46:0f:cb:f5:ce:fc:6e:70:93:
                    52:a5:b5:7a:90:b6:79:e2:eb:e5:f8:94:c4:7f:5c:
                    33:6d:62:9b:a9:45:c4:7e:e0:e3:89:8b:fb:12:e3:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:E0:EC:F2:86:14:95:DF:95:D3:16:36:F5:83:E3:F9:36:A3:41
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA7D084E552511EDAB774292F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:53:ec:ad:a5:9e:8a:e1:cf:be:1f:92:cb:c8:45:9d:97:b9:
         cd:61:a2:29:df:d3:3c:cf:9c:70:e7:cb:53:2c:91:8e:91:85:
         c7:d2:4a:eb:4f:e0:a6:92:10:be:ae:82:ac:9a:92:36:fd:c5:
         df:2d:9d:a5:f2:e0:92:86:62:3c:a5:35:9e:f6:35:d8:96:e9:
         37:31:c9:41:41:a6:bc:b4:5e:5d:4c:24:7b:96:3f:ad:32:1d:
         c5:54:87:8c:b6:c3:7f:49:3b:46:f6:c1:14:5c:9b:cb:aa:ef:
         0f:ce:50:01:e9:99:13:91:5e:49:41:4e:c7:af:63:6f:45:d1:
         f9:15:9f:5b:ba:06:f7:82:85:1b:c3:5a:45:94:ef:36:35:90:
         7c:9b:12:23:70:ef:0d:f4:11:d9:86:8b:3a:42:46:7f:b1:c1:
         e3:22:57:48:bf:ba:bd:47:57:22:21:f1:5f:f9:f5:02:f2:6b:
         f1:17:ac:55:b1:a8:9b:c7:cf:73:24:b1:e9:88:23:33:c3:b0:
         bd:89:ed:da:c1:1c:cd:dc:9d:6c:4a:ef:b1:ec:f9:ce:d7:d8:
         45:5b:5a:0d:1a:f2:da:d3:26:c2:9c:88:a9:38:2d:2c:24:61:
         cc:d2:09:02:f2:07:ed:e6:c2:28:59:c2:cf:50:fa:28:6d:bd:
         b5:ca:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:11 2024 by rpki-client on console-fra.rpki-client.org