Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/4ED3C2482E5011EEB0CC41404AD9E6FC.roa
File:                     4ED3C2482E5011EEB0CC41404AD9E6FC.roa (raw, json)
Hash identifier:          LObZkQwjSE32M3qPS0S2D+zdmgfd6TgB2BN7BQ3SgkU=
Subject key identifier:   12:A1:0E:70:E2:B8:F9:A1:37:29:D7:02:10:AA:65:1B:7B:E9:4E:F9
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04BF
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/4ED3C2482E5011EEB0CC41404AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 20:41:35 +0000
ROA not before:           Sat 29 Jul 2023 20:41:31 +0000
ROA not after:            Sat 30 Jul 2033 20:41:31 +0000
asID:                     37119
IP address blocks:        41.78.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 20:41:31 2023 GMT
            Not After : Jul 30 20:41:31 2033 GMT
        Subject: CN=64c5797f-4e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:a2:bf:cc:9d:0b:55:2b:12:d5:8c:da:48:
                    87:9e:ee:b1:74:bc:ed:f4:95:f3:5e:80:d4:87:58:
                    41:27:65:32:9f:95:3b:25:54:2f:a2:59:e2:ce:08:
                    e8:66:0c:c8:e5:8b:b6:83:6b:3c:d8:67:c2:88:52:
                    cd:e9:ec:14:83:10:00:82:40:5e:2b:ac:95:f4:8d:
                    23:f2:95:29:ab:0e:c5:5e:a2:d8:76:c3:6b:b8:4e:
                    84:84:8a:ff:88:ba:1c:5b:3c:79:c4:5c:e7:e3:86:
                    10:a2:8e:e9:42:8a:1c:30:1a:ff:bb:ba:57:13:9a:
                    c3:85:e1:dd:3a:18:62:75:36:82:74:34:6f:2e:9d:
                    51:7a:d2:a0:51:19:5b:93:82:78:46:64:37:42:6a:
                    d2:bc:52:0f:ff:84:5b:48:4d:f4:1f:8d:d0:5a:dd:
                    65:67:91:24:8c:77:56:31:39:60:d8:f5:21:f5:9f:
                    7d:2a:21:70:f4:cc:32:a3:7e:59:a9:01:57:67:cf:
                    f1:9e:6f:49:02:bb:8a:cf:d5:b5:39:0d:57:86:75:
                    89:51:8c:95:f5:6d:7d:46:07:2e:4a:8b:b8:cd:7a:
                    3a:d3:b5:1e:50:82:6c:7a:da:83:6d:6b:a9:63:2d:
                    ae:91:41:2d:99:62:9f:3b:91:90:ee:34:4b:5b:71:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:0E:70:E2:B8:F9:A1:37:29:D7:02:10:AA:65:1B:7B:E9:4E:F9
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/4ED3C2482E5011EEB0CC41404AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:19:97:f5:aa:6b:6c:8e:41:12:52:85:78:57:92:3a:d1:
         58:bf:9f:f4:ea:e5:b8:aa:1c:56:e7:b7:2f:96:11:f0:13:46:
         aa:c8:2f:fc:99:c1:d7:93:fb:f0:08:1b:30:50:d5:35:14:a7:
         f5:a9:3c:d3:a5:22:43:8e:7a:82:fe:7b:b6:d7:c6:90:0c:c2:
         2b:e6:dd:1e:5c:7d:e6:09:45:60:3f:8c:c0:04:2c:44:8d:2a:
         7c:93:4e:d8:88:ff:56:fa:7b:7e:d5:11:d2:e4:92:37:98:cf:
         6c:63:1d:d7:08:18:0d:f0:e5:e7:78:f7:11:9b:ff:7b:23:97:
         8b:c7:9e:db:ea:31:df:8f:2f:ac:a1:04:c8:b6:43:46:34:0f:
         83:d4:4e:20:f2:ae:af:71:3e:5d:f2:1d:1a:1f:b2:f0:36:80:
         a5:76:a0:b0:4e:bf:7f:fb:4d:0a:8e:b0:36:1a:88:c4:47:83:
         72:2f:e8:35:6d:de:37:da:d0:bd:c9:9d:35:a2:fc:3b:8d:7a:
         7f:16:a3:e7:61:1f:90:5c:ad:82:aa:76:f2:ee:57:bb:70:f3:
         81:09:a4:45:6d:0c:6e:8a:fd:d0:3e:46:b7:f8:a2:67:1a:89:
         36:ab:a0:a7:56:8e:13:67:d2:25:5e:45:90:7c:8c:d4:e3:bb:
         e6:e9:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org