Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE416FA271B511EF822DF16A762E951A.roa
File:                     EE416FA271B511EF822DF16A762E951A.roa (raw, json)
Hash identifier:          o/NL/ViFljPV2umYUqkDtCuY4rlYnFHwAw0UK0rsAjY=
Subject key identifier:   42:81:45:45:F4:14:A5:BF:A3:77:5C:0D:6F:C3:54:60:0E:AD:0A:08
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       11F2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE416FA271B511EF822DF16A762E951A.roa
Signing time:             Fri 13 Sep 2024 09:52:47 +0000
ROA not before:           Fri 13 Sep 2024 09:52:44 +0000
ROA not after:            Sat 12 Sep 2026 09:52:44 +0000
asID:                     62240
IP address blocks:        102.129.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4594 (0x11f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep 13 09:52:44 2024 GMT
            Not After : Sep 12 09:52:44 2026 GMT
        Subject: CN=66e40b6f-4adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:2e:33:92:a3:52:36:4a:4f:41:c8:93:34:
                    ea:55:1b:b6:1a:56:2f:64:50:aa:67:77:1c:fd:8a:
                    fa:de:a9:c1:64:57:bb:36:f4:95:a6:b6:49:22:58:
                    8a:55:2b:37:40:8a:68:43:06:3a:55:3c:13:4d:94:
                    c9:87:67:6a:86:10:b4:d2:c5:91:1d:be:15:3b:3e:
                    c8:c2:5b:50:9f:d1:68:a4:9d:66:04:1b:62:b3:3d:
                    bb:76:83:53:8d:38:cb:cb:8c:36:6e:f4:fa:fe:d3:
                    7f:6f:cf:f7:d9:2a:5b:5c:85:2d:e3:73:63:ae:4d:
                    a1:dc:19:b2:02:c8:3b:0b:e0:ce:71:23:6a:02:67:
                    53:db:f9:cc:f5:27:7c:00:44:e1:b4:5e:0b:f7:2e:
                    fa:25:72:fb:7e:64:23:38:ab:de:21:2c:13:01:cc:
                    91:97:1f:b1:82:a8:a4:58:9d:c8:8f:8e:e9:ed:c1:
                    eb:89:45:07:31:2d:74:c8:7f:72:25:4d:9a:02:bc:
                    3c:55:7e:7a:9d:d3:71:d0:9b:73:04:ee:cd:40:f8:
                    b6:ee:29:5e:2b:12:51:d1:64:e1:c2:90:02:08:6e:
                    84:96:7c:15:d3:27:f5:4c:68:29:51:8b:3e:ee:c4:
                    50:10:e8:47:57:6f:16:c8:60:0a:34:95:1c:23:97:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:81:45:45:F4:14:A5:BF:A3:77:5C:0D:6F:C3:54:60:0E:AD:0A:08
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EE416FA271B511EF822DF16A762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:45:d0:56:90:19:99:78:4a:cd:3b:12:56:d5:9d:23:ff:
         35:e9:5b:51:20:52:62:71:db:da:92:95:76:3c:5b:d9:68:ba:
         c4:e2:6b:29:2b:ff:60:31:59:3c:78:27:2b:06:01:3b:f5:d5:
         34:47:f4:73:e9:61:fe:14:6c:03:2f:40:9d:40:2b:1f:84:c1:
         97:e7:96:f5:99:e1:6c:87:3a:7e:49:df:40:f8:c3:ac:29:24:
         69:97:cb:7f:29:3e:2e:6f:ad:87:01:41:e3:8d:ab:af:a4:1d:
         a9:08:14:fc:0b:a3:11:5b:20:89:09:64:59:7c:db:e6:c9:e5:
         a4:d1:30:de:a8:7c:b9:5c:5e:bc:b1:4a:f1:a2:37:0c:6f:1a:
         b8:67:e0:ed:0b:71:68:59:70:0d:d6:05:af:24:8d:d6:93:0b:
         94:4d:5f:9f:24:54:00:1d:e6:c0:b6:ae:e5:15:0a:07:45:a2:
         39:50:d3:1a:24:b4:ca:3a:63:92:55:f6:ae:88:1e:89:32:41:
         fb:b0:cc:c7:8a:0b:12:0e:9f:51:e1:f9:b5:9a:93:ae:55:e8:
         f7:61:85:28:15:79:d5:86:d8:dc:ef:46:78:e9:66:e2:5a:52:
         95:39:07:06:ab:25:4d:1c:90:a8:c3:7f:24:ce:80:ff:93:bd:
         4a:56:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:47 2024 by rpki-client on console-fra.rpki-client.org