Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/FA517E3A23C011EDA50A83C8F1222468.roa
File:                     FA517E3A23C011EDA50A83C8F1222468.roa (raw, json)
Hash identifier:          xQyOqRSRtBnzYBtEnci3/fZ1gbPy5vNLel67f1qXTlM=
Subject key identifier:   6A:1E:CF:10:02:7D:6E:E0:5D:D4:C4:80:0C:99:FD:DC:3B:F4:76:2F
Certificate issuer:       /CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
Certificate serial:       01DA
Authority key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/FA517E3A23C011EDA50A83C8F1222468.roa
Signing time:             Wed 24 Aug 2022 15:25:26 +0000
ROA not before:           Wed 24 Aug 2022 15:25:22 +0000
ROA not after:            Tue 31 Aug 2032 15:25:22 +0000
asID:                     327901
IP address blocks:        102.217.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C65C6AF/serialNumber=C08F3EDC59158942C2DF39F1425E6EB82168BE3E
        Validity
            Not Before: Aug 24 15:25:22 2022 GMT
            Not After : Aug 31 15:25:22 2032 GMT
        Subject: CN=630642e6-9544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:05:07:cc:38:11:f3:30:89:46:f0:e9:f6:
                    76:70:cf:d9:f0:15:bc:14:be:19:ab:b8:ce:29:9e:
                    eb:46:e0:20:0e:10:7c:2d:e7:d2:91:41:b3:e3:ed:
                    52:ed:a6:e1:30:24:e9:18:b2:96:fa:75:f4:42:9c:
                    c5:26:6a:87:f8:e3:1b:13:be:80:5c:61:af:36:c4:
                    b1:95:53:7d:68:38:98:f3:02:bc:b9:33:b1:f3:5c:
                    a3:43:eb:ea:54:63:33:b6:ff:ad:29:52:c2:c4:22:
                    94:10:7d:72:0b:5e:da:81:11:37:67:72:7f:0d:c1:
                    da:58:fc:4e:7a:a8:ae:9c:4f:44:58:11:76:b7:41:
                    ec:d4:42:70:7a:d8:57:56:64:cf:fa:f3:07:f4:ca:
                    25:cc:d6:27:d9:8c:db:7c:6c:b1:13:83:12:3d:46:
                    18:5d:c1:db:1b:ae:c2:ff:58:a2:2d:81:ae:9d:0d:
                    94:73:4f:e1:4a:0b:cb:bd:3c:91:0a:2c:5d:fe:47:
                    5d:51:f8:0e:63:0b:fa:bd:79:1e:71:2c:b8:8c:07:
                    2f:d9:e1:eb:17:49:32:0b:eb:f3:33:92:43:59:43:
                    3d:08:71:86:68:7c:03:ee:0d:90:50:d3:cf:3f:d6:
                    bb:c7:ee:a0:7f:16:15:9d:d0:44:66:ec:ff:54:24:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1E:CF:10:02:7D:6E:E0:5D:D4:C4:80:0C:99:FD:DC:3B:F4:76:2F
            X509v3 Authority Key Identifier:
                keyid:C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/FA517E3A23C011EDA50A83C8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:29:56:21:e1:76:cf:42:a7:08:b4:96:73:ea:76:ee:cd:7b:
         9a:1c:02:8e:43:a0:fd:90:15:f0:80:d1:cd:43:f4:c7:97:63:
         54:f0:1e:de:d3:fc:e4:12:9e:c1:e5:a4:d4:c7:dd:2f:3a:1c:
         1e:d8:fb:44:b5:1d:da:8e:ad:f9:a1:ad:dd:27:34:c5:41:e2:
         07:ff:41:b8:7c:0f:36:b8:2a:c5:da:40:ce:7c:13:cb:18:db:
         d7:5e:38:69:87:61:32:98:71:dc:69:22:e4:9b:5f:c8:40:05:
         ec:88:23:61:bb:99:af:7f:20:94:0c:46:e1:8b:c1:e3:18:dc:
         70:53:fd:f1:2f:91:11:78:2f:6e:7e:05:24:92:a8:01:a2:d5:
         67:a1:fb:24:d7:12:6f:de:cf:fa:b4:1a:f1:05:6f:5f:a6:0f:
         54:b8:e4:42:51:ea:91:ce:cd:5c:98:df:9c:c2:13:36:6a:be:
         98:7e:fe:7f:01:4a:75:ff:21:6a:ef:05:3e:6f:54:4d:fe:77:
         aa:01:d8:79:e6:76:95:f5:c1:e7:54:3b:14:8d:49:c4:c3:44:
         49:ea:1d:40:37:10:92:9b:1b:bc:05:af:9e:2b:30:e8:4e:5d:
         ff:42:1c:4d:f8:ba:de:25:12:5d:ed:54:32:a1:2b:12:d9:5f:
         e2:fd:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org