Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EF4EC3B2B42F11ED952FC182F1222468.roa
File:                     EF4EC3B2B42F11ED952FC182F1222468.roa (raw, json)
Hash identifier:          X2rSWruQtsJlY/WsfpZCWwRukA/Qr1tGykochZJ88Z4=
Subject key identifier:   B1:4E:11:55:BC:11:CB:01:7F:98:10:B8:62:50:6C:70:78:03:27:04
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0A94
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EF4EC3B2B42F11ED952FC182F1222468.roa
Signing time:             Fri 24 Feb 2023 10:42:29 +0000
ROA not before:           Fri 24 Feb 2023 10:42:25 +0000
ROA not after:            Sat 22 Feb 2025 10:42:25 +0000
asID:                     61317
IP address blocks:        102.129.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Apr 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 24 10:42:25 2023 GMT
            Not After : Feb 22 10:42:25 2025 GMT
        Subject: CN=63f89495-3a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:0a:59:1e:c2:f3:7a:6b:cd:12:f9:d0:8d:
                    e7:af:f5:4b:97:99:01:51:bc:83:6f:2b:d7:6b:13:
                    29:c9:72:49:b6:1a:c6:65:4c:30:ab:1a:06:ea:de:
                    f3:70:18:77:9d:46:62:c1:66:ba:12:a6:14:46:b2:
                    83:04:b1:f4:34:d0:47:15:42:a4:c7:c0:28:db:90:
                    a1:6c:4f:5f:a5:79:59:61:c4:aa:99:da:77:bc:ed:
                    03:16:75:5b:4d:95:7c:a3:62:2f:b5:42:2f:a2:22:
                    a5:1f:d0:40:78:70:23:21:26:a6:79:3d:07:87:ea:
                    af:a1:b9:bb:87:be:75:82:35:5f:84:4f:41:65:bd:
                    6a:c9:ca:27:6c:24:ce:8d:79:bf:ff:d3:84:4b:84:
                    87:bc:d9:6d:0e:8c:67:64:01:69:bf:bd:88:c6:9a:
                    49:c3:1c:59:0c:99:38:4d:b5:c3:35:6e:d5:6b:70:
                    10:5d:a9:ec:18:81:b8:8a:01:06:44:32:a3:48:16:
                    1a:70:13:9f:fa:c9:a8:fb:6b:34:fb:23:e0:b7:94:
                    17:67:2c:9e:f5:b3:ef:ae:34:be:2f:b1:8b:fb:0e:
                    9b:f0:9f:56:c7:5d:87:5e:06:eb:4c:f6:af:9f:e5:
                    02:06:40:d3:14:34:bb:42:33:f3:2f:7d:73:9e:6b:
                    a7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4E:11:55:BC:11:CB:01:7F:98:10:B8:62:50:6C:70:78:03:27:04
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EF4EC3B2B42F11ED952FC182F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:47:66:28:82:12:c9:5d:a0:29:9f:fe:d3:63:ab:ba:b0:12:
         cf:d5:5a:a0:a9:dd:97:ed:d0:92:e8:ec:27:7b:fa:ef:5e:0e:
         54:36:4f:60:0d:86:22:1f:b7:69:54:38:f6:92:11:ee:08:c9:
         a2:bf:a5:16:5a:b5:5d:ff:fb:de:7d:e7:6d:29:9e:77:27:b5:
         24:1b:e3:5f:98:48:98:a7:5e:9a:82:1b:b6:51:d0:96:7a:7e:
         6d:e7:24:3b:a5:5c:44:5a:0f:7d:2f:16:54:79:f5:5a:b1:43:
         49:1d:84:eb:9f:26:88:93:1d:43:96:73:ca:b5:41:af:43:35:
         43:f1:a0:67:4f:5e:0c:aa:85:af:0b:2e:54:a5:0c:79:2f:35:
         0e:68:7a:0c:1d:16:52:ad:27:b8:62:c7:5c:a0:93:58:5a:db:
         67:8e:fd:b2:59:a9:6d:c5:30:78:cd:7f:db:4d:f2:2e:6b:69:
         57:6a:1a:17:9b:4d:fb:57:5c:1f:66:d5:c5:04:e9:d9:60:49:
         cd:29:dc:10:fa:1f:be:0f:bf:2c:57:6c:0b:1c:e0:8c:30:78:
         92:9b:86:c1:96:ec:fd:3c:34:24:8a:04:36:8e:5b:34:67:9f:
         e7:bd:ff:9e:d6:a7:46:5f:fa:43:47:58:c8:a2:52:e8:a3:fc:
         5a:b0:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:45:17 2024 by rpki-client on console-fra.rpki-client.org