Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C7C168E2E4B11EEBFAFB1304AD9E6FC.roa
File:                     0C7C168E2E4B11EEBFAFB1304AD9E6FC.roa (raw, json)
Hash identifier:          /2oXUjkATQoR0k6YIuQ4T3yWN4VjuLmiZC4p4eBpnTw=
Subject key identifier:   BE:CB:68:55:61:B2:F2:E1:64:79:63:A8:48:74:29:8A:1A:70:7C:E0
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04A1
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C7C168E2E4B11EEBFAFB1304AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 20:03:56 +0000
ROA not before:           Sat 29 Jul 2023 20:03:52 +0000
ROA not after:            Sat 30 Jul 2033 20:03:52 +0000
asID:                     37119
IP address blocks:        105.168.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 20:03:52 2023 GMT
            Not After : Jul 30 20:03:52 2033 GMT
        Subject: CN=64c570ac-d703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:5b:79:cc:7d:da:11:af:1e:e1:88:a2:59:
                    47:c9:e0:d9:22:40:c9:ea:d4:c1:1e:dc:42:7a:9b:
                    6e:c9:65:13:65:57:53:07:38:b7:ce:62:d5:28:db:
                    d9:ee:5d:ff:44:ca:42:dd:6b:a0:e3:28:f6:59:48:
                    a3:2d:9b:9e:f2:7c:ff:48:b6:24:77:4d:c6:b3:da:
                    5e:cc:37:0e:6b:c5:13:aa:25:77:ab:7e:0b:67:0b:
                    8a:29:90:d4:e4:38:68:8c:3b:b4:0e:f8:f3:51:90:
                    44:9f:50:88:9c:f0:ec:18:95:e4:2e:81:aa:60:62:
                    a6:f7:fb:cc:d2:1b:b2:09:b0:55:bb:44:30:92:af:
                    3f:46:dd:b0:38:5b:15:87:4e:d6:9b:eb:b5:f1:50:
                    b6:ee:b7:e2:57:dd:3d:64:b2:db:25:d5:38:f8:81:
                    c2:3e:0c:17:80:ab:68:90:8a:f0:9f:d4:a8:ef:94:
                    22:7a:ab:85:75:69:50:29:a9:4c:e8:d3:3e:8b:b9:
                    53:e0:89:54:f2:eb:a6:7e:63:db:07:5a:6c:ae:81:
                    c3:32:b8:fd:69:32:49:0f:27:b3:cf:2e:6a:48:95:
                    42:db:a4:d6:31:ed:18:b4:7a:86:f4:41:40:93:d8:
                    07:b6:b0:cd:7d:fc:4c:be:33:60:7b:ef:7c:17:bb:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:68:55:61:B2:F2:E1:64:79:63:A8:48:74:29:8A:1A:70:7C:E0
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C7C168E2E4B11EEBFAFB1304AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.168.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c7:61:96:7f:f4:d7:1a:bb:43:89:d5:11:52:13:f5:be:5a:a0:
         d1:01:43:06:8c:73:1c:27:07:6f:78:44:2f:2e:86:50:25:da:
         fb:e9:1e:58:ed:3e:62:86:00:1a:da:1b:61:fa:01:33:5a:73:
         2b:05:d4:60:d9:f9:93:6c:6d:df:32:d2:98:b0:6b:6d:60:e0:
         5b:96:80:10:d8:87:63:78:1d:0f:33:e9:c5:09:7e:2f:31:54:
         0c:d6:0b:a6:3e:1e:d6:6b:fb:57:88:c0:ab:ba:38:da:3f:9b:
         8c:52:59:3a:d1:b7:3e:24:ed:9f:37:20:bd:67:fc:6c:de:f8:
         ab:6c:62:06:4f:fd:4b:96:b2:5e:48:79:83:1f:ef:99:1c:05:
         b6:d2:50:4d:b5:b6:b2:5c:26:c9:32:11:44:5c:26:a0:14:fb:
         18:8d:3e:94:b2:8b:ae:04:cc:96:d4:a6:b4:af:e8:f3:f7:30:
         d5:7e:6b:18:6d:02:81:11:ba:f3:2c:2b:16:cb:2c:e2:01:e4:
         da:1a:d8:0f:09:a5:9b:78:7b:a9:a5:ed:33:b9:b6:70:24:e2:
         b3:65:2a:c8:83:ef:61:44:34:2e:58:ab:c9:2e:08:ce:7d:4f:
         8d:2f:37:0f:d9:c3:02:4c:4f:50:02:c4:58:e8:e7:77:94:63:
         91:73:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org