Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6D7D4D7E2E5811EE9822B5574AD9E6FC.roa
File:                     6D7D4D7E2E5811EE9822B5574AD9E6FC.roa (raw, json)
Hash identifier:          zsv+4jA7qLkOVZxb0FH+KHBuPR818/ol5o0wklM+DkY=
Subject key identifier:   24:CE:8C:78:9C:43:1B:71:C8:F8:F4:57:E2:DF:B1:79:6C:C7:89:9E
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04D9
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6D7D4D7E2E5811EE9822B5574AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 21:39:42 +0000
ROA not before:           Sat 29 Jul 2023 21:39:38 +0000
ROA not after:            Sat 30 Jul 2033 21:39:38 +0000
asID:                     37119
IP address blocks:        105.173.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 21:39:38 2023 GMT
            Not After : Jul 30 21:39:38 2033 GMT
        Subject: CN=64c5871e-2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fb:c0:7b:97:9e:82:a7:b2:dd:28:8c:09:a1:
                    2a:66:47:8e:d7:b1:1c:b4:69:c7:01:ef:ab:ad:88:
                    b2:52:28:c0:e4:9c:6a:c4:6c:41:02:51:24:af:3f:
                    8b:60:cb:6a:fc:3e:6a:ca:87:a1:76:88:8e:35:ec:
                    1b:cd:aa:b2:b1:30:26:52:47:c4:22:b1:4b:bf:78:
                    16:22:da:ed:53:0a:d6:69:5f:a5:9f:fd:59:5c:ca:
                    6c:1e:c9:db:22:81:7f:57:96:08:01:9f:ec:dd:47:
                    ec:8a:dd:43:07:a3:01:05:d7:6c:68:5c:ef:73:86:
                    b6:02:c8:e4:f1:17:c5:38:4a:09:e2:3c:5e:b0:21:
                    3a:dc:75:56:3d:e4:3b:3c:ae:71:dd:58:58:fe:5d:
                    4b:28:57:53:29:63:fb:b5:55:95:66:03:71:ca:81:
                    f2:13:37:8c:90:08:21:f0:b6:f0:c8:f4:5d:6f:29:
                    db:34:84:78:5d:36:6a:86:f6:1c:e8:b9:f4:81:2b:
                    59:a1:b3:1c:79:f1:35:38:16:d8:bb:a4:14:5d:34:
                    dd:79:d5:9d:e1:f7:29:2d:31:fc:c2:9f:b8:64:2e:
                    11:e8:74:72:e0:9c:47:0c:ff:a7:0e:2e:18:a1:b6:
                    52:9c:4e:d8:80:64:03:9b:e4:25:82:44:fe:0f:45:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:8C:78:9C:43:1B:71:C8:F8:F4:57:E2:DF:B1:79:6C:C7:89:9E
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6D7D4D7E2E5811EE9822B5574AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:6b:9b:88:01:d7:17:e1:1b:78:0c:ad:b3:5e:b3:30:74:92:
         7d:4c:d2:a7:78:81:3d:e9:76:33:4a:8b:bd:09:87:0a:6b:10:
         19:12:50:46:d9:b8:2a:53:d1:94:7a:11:97:8b:eb:dc:fc:50:
         9f:e9:c9:4d:bb:a8:2f:1e:0d:1b:76:0a:91:f7:54:f2:86:8f:
         00:ea:9c:21:2e:21:4b:fe:1a:35:19:23:2d:00:2b:2e:69:d2:
         9e:aa:7c:77:0a:5f:0d:56:7f:1b:0f:b9:88:8b:41:3c:de:00:
         7c:52:73:f7:73:a7:88:b1:00:d2:26:78:a1:28:50:c3:e5:68:
         f4:f9:7e:d1:c2:a5:c9:37:b2:b5:75:bf:ad:81:2e:d5:84:b3:
         d1:e0:d0:d3:e6:28:6f:31:11:f4:05:5e:01:c0:e4:fa:24:be:
         f5:23:d5:06:9b:78:4c:7f:7a:72:8b:22:40:bb:45:b1:4c:90:
         5d:33:9a:44:4b:ef:9c:ef:b6:be:0f:b0:86:a0:52:88:2a:c0:
         90:8c:75:a4:09:f9:31:95:e7:98:82:ee:89:83:ea:21:fc:53:
         ae:bd:fd:31:70:3e:4d:63:b1:ba:25:f5:84:90:78:78:18:91:
         38:b1:0e:10:a6:00:54:81:6d:c9:f6:d4:fe:f6:60:e0:2f:8e:
         12:e7:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org