Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/55658E129FF011EF840C519B762E951A.roa
File:                     55658E129FF011EF840C519B762E951A.roa (raw, json)
Hash identifier:          SQ6x/8wlXxQQhSUXwwgi7zRj4j3gnNlbtGPHAue35w4=
Subject key identifier:   DB:80:4E:BD:FB:F8:5E:23:FC:02:03:61:E3:E1:0A:67:B1:5E:AA:B7
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       0312
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/55658E129FF011EF840C519B762E951A.roa
Signing time:             Mon 11 Nov 2024 05:46:45 +0000
ROA not before:           Mon 11 Nov 2024 05:46:41 +0000
ROA not after:            Fri 01 Nov 2030 05:46:41 +0000
asID:                     328474
IP address blocks:        2c0f:ed60::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Nov 11 05:46:41 2024 GMT
            Not After : Nov  1 05:46:41 2030 GMT
        Subject: CN=67319a44-5485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:5e:4f:01:9e:7c:42:88:ed:69:54:f7:59:
                    1c:2a:d3:b8:1b:df:49:ce:53:64:13:36:48:d6:04:
                    59:7c:0f:58:ba:f7:ae:ce:ad:dd:ee:b4:52:45:e2:
                    f3:a0:8e:5f:f8:58:c1:7c:c9:25:d2:df:bf:0d:31:
                    c4:ca:f9:9f:ef:49:f0:7e:4c:5e:51:80:ba:5d:b9:
                    43:4d:52:79:ba:a0:af:68:08:96:5e:83:d9:3f:49:
                    5d:5a:34:de:87:e0:d0:bf:e4:55:c6:c1:b6:d7:cb:
                    ee:1c:30:d5:07:b9:c5:ed:86:96:54:32:77:d8:ba:
                    9a:ad:3c:60:07:1c:8e:bb:79:cd:57:10:22:b3:ff:
                    52:0e:14:d4:56:0f:12:e9:76:c8:96:01:52:42:33:
                    37:4e:3f:ae:71:20:f3:59:d6:08:53:73:9c:70:aa:
                    e9:3e:bb:fe:a6:57:28:15:69:fb:fa:5e:45:17:7d:
                    8b:e8:0e:a2:0a:6f:bb:71:df:da:bd:10:5e:ce:92:
                    03:21:07:7b:c6:ad:5e:74:fd:03:f4:12:c8:a9:1a:
                    9a:2e:3d:f1:69:a7:81:85:77:51:cf:2b:12:6c:26:
                    96:92:45:1f:44:c9:49:ef:00:17:bb:c9:05:41:dc:
                    86:ba:bf:89:0d:4f:35:47:75:a6:59:17:10:26:8a:
                    ce:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:80:4E:BD:FB:F8:5E:23:FC:02:03:61:E3:E1:0A:67:B1:5E:AA:B7
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/55658E129FF011EF840C519B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ed60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:8a:8b:23:a9:eb:06:d2:a3:1b:24:74:b9:42:b0:14:ac:69:
         52:b8:c0:86:bb:3c:eb:23:ab:dc:b8:b5:ea:f2:79:10:d8:1e:
         2c:9d:0b:b6:6a:a4:f5:bd:a9:05:05:2f:b9:50:8a:29:aa:05:
         4f:bf:2f:6a:01:c2:ae:c6:fd:ec:0b:33:68:b0:2f:b9:a2:16:
         4d:69:52:7c:f7:15:ae:39:92:91:23:be:fd:a5:2b:30:27:21:
         2f:cc:34:29:81:c1:e0:79:6c:f7:6d:2d:05:be:0e:e7:03:28:
         f4:44:d1:44:16:84:c7:59:83:48:c9:88:7b:d3:c4:51:86:a8:
         80:08:d2:99:bd:00:49:54:8c:e5:24:06:c3:3a:ec:8c:fc:e2:
         f5:11:e2:72:b9:03:f0:02:9f:5d:0d:1b:ae:9e:fe:af:08:8a:
         c9:8e:c6:9f:b1:8e:fa:32:20:30:68:70:75:ed:48:1c:81:c1:
         c6:27:e3:84:5e:9a:be:92:e1:90:5d:56:a2:b3:df:83:59:2b:
         84:c4:6a:93:ba:0d:3f:71:40:55:13:2a:df:ef:45:50:52:51:
         6e:cc:2b:dc:d1:79:81:84:7b:4d:3f:f2:06:95:de:18:e9:f5:
         a0:b3:eb:66:95:51:44:e4:22:fa:d3:f7:32:e1:30:2b:fe:43:
         03:cd:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org