Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8F66B2042F0711EE97142B6D4AD9E6FC.roa
File:                     8F66B2042F0711EE97142B6D4AD9E6FC.roa (raw, json)
Hash identifier:          q3KJxo3hjMkKvEin9mitJ4dKFGg8o0oGupPlbRGG1PA=
Subject key identifier:   1C:90:0E:14:DE:A3:A4:92:0C:B0:50:ED:F5:14:29:62:D9:6B:55:0D
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04F6
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8F66B2042F0711EE97142B6D4AD9E6FC.roa
Signing time:             Sun 30 Jul 2023 18:33:21 +0000
ROA not before:           Sun 30 Jul 2023 18:33:18 +0000
ROA not after:            Sat 30 Jul 2033 18:33:18 +0000
asID:                     37119
IP address blocks:        105.169.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 30 18:33:18 2023 GMT
            Not After : Jul 30 18:33:18 2033 GMT
        Subject: CN=64c6acf1-1795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:01:93:a7:48:2b:e4:7d:53:fe:a1:c6:19:
                    e4:6c:74:ef:45:dd:af:a4:bd:92:64:de:aa:76:20:
                    b9:86:42:1f:b4:62:60:18:ba:57:b0:ee:5f:f2:3f:
                    ac:18:0e:68:bd:c3:0d:62:a8:f2:47:bb:c7:bb:2a:
                    67:70:e9:bc:44:ca:aa:ef:1f:84:c8:12:84:e8:02:
                    a3:6f:50:a5:e4:f5:86:c8:c7:63:20:c7:25:ce:bb:
                    47:65:4b:6f:0f:7c:fe:61:96:18:db:03:40:d6:33:
                    34:89:9e:f4:ba:98:b5:c8:6d:6f:c5:f7:8d:a4:55:
                    90:a1:64:4f:08:cc:59:00:b1:8f:bb:ad:5d:80:17:
                    72:ad:b6:08:14:8c:a1:6b:82:bf:e8:9b:44:11:b6:
                    c6:25:1f:9d:35:0a:fb:5d:c3:1b:c8:fd:95:67:bf:
                    77:02:c5:f1:fa:eb:0f:73:9f:ea:33:b4:51:7b:4d:
                    a2:5a:23:2f:f3:b9:a7:93:8f:f6:f0:cd:45:30:4f:
                    88:81:a0:51:9f:47:82:1b:e9:c5:2f:8e:77:5f:a6:
                    d9:59:29:ce:c6:9b:ad:f7:f0:b2:61:97:42:4c:04:
                    f4:80:75:82:d7:17:63:32:b4:25:2e:0d:9e:8f:2e:
                    2d:9c:1a:b2:0d:b1:37:ac:a5:50:7c:12:b1:8b:2c:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:0E:14:DE:A3:A4:92:0C:B0:50:ED:F5:14:29:62:D9:6B:55:0D
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8F66B2042F0711EE97142B6D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.169.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:ff:8d:5a:21:c0:c3:0a:14:0c:57:2e:a8:8d:d7:42:81:2e:
         84:c3:7c:0d:00:d9:66:51:94:e0:26:8e:8d:21:42:e7:ec:aa:
         df:9d:9f:5e:29:4d:5e:74:bb:54:61:0c:1d:18:6f:93:a0:56:
         ec:e4:09:b3:95:4f:6d:3a:58:a4:dd:96:6b:55:aa:1a:96:e5:
         61:5f:36:2b:65:8e:16:86:5b:30:2d:ec:f2:9d:2a:74:1b:20:
         ac:45:7a:da:94:66:5a:c7:3b:ed:da:86:9d:45:6d:d0:96:bb:
         a8:21:92:4c:8b:4b:93:e1:df:65:f6:d6:9a:60:f4:e9:d1:a1:
         51:c5:50:86:99:0a:9d:a5:dc:ae:36:ca:24:91:16:3c:b0:97:
         4b:6f:7d:64:a9:eb:ff:ad:b5:01:eb:94:d7:31:2d:e0:0a:b4:
         e1:98:9f:6b:49:62:23:c3:60:39:22:16:f7:ec:27:46:72:04:
         10:01:c7:6e:09:da:58:bd:c4:98:2b:69:e3:af:a3:cf:08:03:
         f0:8a:a4:e1:a3:98:a1:ea:55:1d:fc:b5:81:18:d7:6f:76:35:
         27:9e:92:24:f3:cd:c2:7c:50:73:7e:d7:34:46:5a:9e:65:b9:
         f7:b8:1a:b2:ca:4d:b1:f9:9c:7e:d7:86:c8:57:10:99:26:86:
         29:c8:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org