Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/2E3A1228F14211EB95363E26D8A014CE.roa
File:                     2E3A1228F14211EB95363E26D8A014CE.roa (raw, json)
Hash identifier:          vD5KpjCW2oLjrazeJW7vuUKZt8XTsZHweUUc6bDl3m8=
Subject key identifier:   C4:EA:BC:85:03:9F:EA:21:80:08:A1:63:C1:3F:C7:59:14:EC:DC:C1
Certificate issuer:       /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial:       02E5
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/2E3A1228F14211EB95363E26D8A014CE.roa
Signing time:             Fri 30 Jul 2021 14:27:14 +0000
ROA not before:           Fri 30 Jul 2021 14:27:08 +0000
ROA not after:            Thu 31 Jul 2031 14:27:08 +0000
asID:                     36969
IP address blocks:        41.87.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
        Validity
            Not Before: Jul 30 14:27:08 2021 GMT
            Not After : Jul 31 14:27:08 2031 GMT
        Subject: CN=61040c42-d5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:16:85:1f:66:4a:f2:cb:76:9c:cc:70:20:
                    9e:e8:a2:5b:5d:aa:d8:f7:64:f7:22:45:74:c2:33:
                    dc:d7:73:e0:eb:87:ee:92:61:24:0f:13:fc:65:c5:
                    a1:dc:92:2f:0e:f6:03:bb:33:11:e6:91:50:0d:23:
                    05:e6:19:b9:96:4f:2e:a5:2c:0d:83:98:1e:dd:37:
                    97:29:54:7c:5f:a4:e0:a6:38:94:66:5c:ec:8c:9d:
                    c4:38:26:8f:73:57:8e:bb:1e:36:4b:f8:e7:df:70:
                    2a:53:30:b8:ac:15:4d:e3:0e:e9:42:56:60:1b:d1:
                    af:52:c7:7c:a1:96:cc:2f:90:17:f3:16:61:4a:7d:
                    f4:c9:4e:c2:4f:63:cb:b2:99:d6:4a:70:9e:ca:c0:
                    22:3f:80:e4:aa:8a:94:ee:23:35:e4:20:cf:24:02:
                    31:7b:55:a9:33:68:03:02:73:6f:06:d6:e5:d5:fc:
                    cd:1f:ad:52:58:57:a4:04:89:73:97:09:2b:5a:eb:
                    0a:4f:fc:34:4c:7f:67:03:e5:42:e8:4f:b8:68:6c:
                    89:65:ed:6f:01:4d:d1:fe:56:b0:47:43:6b:fe:3a:
                    38:fd:ed:0e:b7:fc:a1:30:8f:86:3a:0c:58:07:08:
                    e4:76:ef:a1:9d:e5:63:f5:79:6f:52:49:c6:87:19:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:BC:85:03:9F:EA:21:80:08:A1:63:C1:3F:C7:59:14:EC:DC:C1
            X509v3 Authority Key Identifier:
                keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/2E3A1228F14211EB95363E26D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.87.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:3c:2e:9e:3b:6c:e4:56:73:0d:c6:0f:7b:63:b2:0f:bd:
         03:67:98:29:14:2a:83:06:e0:8d:5c:ae:ff:d2:46:5a:4d:ed:
         84:fd:77:51:53:fa:2c:6b:68:2d:98:1f:f3:b4:e4:0d:41:e9:
         b3:0d:1d:b8:bc:67:02:45:31:38:8b:c4:ff:1b:a0:1b:0a:eb:
         19:de:e0:80:06:83:d1:d0:26:42:59:3f:e5:70:89:ea:0c:2b:
         79:53:11:e5:ce:e7:24:20:39:9d:0b:82:b6:40:aa:a2:2b:33:
         d1:ba:31:eb:96:5b:db:aa:74:f9:2b:03:6c:f8:56:b7:ea:68:
         98:76:45:bd:a2:12:96:40:a5:d6:68:08:d7:bd:d2:59:2a:45:
         b4:32:1e:a7:f0:c5:55:d8:e9:b2:9b:5a:da:41:6e:dc:61:bf:
         0a:c5:f6:22:de:54:1c:ba:e1:95:b2:9c:df:97:10:65:44:c6:
         d6:fc:49:a2:39:22:80:80:0d:44:76:48:e8:ef:40:33:8a:09:
         a0:6a:ae:02:ee:3a:0c:aa:e1:97:7f:13:77:ef:55:b6:f9:5c:
         15:71:b0:c6:0e:e4:03:6f:4b:f4:26:60:58:25:26:c1:b3:6e:
         ff:b7:91:9f:7c:f6:70:17:9e:a2:74:6d:a7:b5:ea:04:b8:90:
         38:a8:e1:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU0NkZBRjExMC8GA1UEBRMoNjhDNUU0QkFENURDRDU2NEEyNTYyNzUzQzlBQ0I2
MzJCRDI0Q0I1MDAeFw0yMTA3MzAxNDI3MDhaFw0zMTA3MzExNDI3MDhaMBgxFjAU
BgNVBAMMDTYxMDQwYzQyLWQ1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwyBaFH2ZK8st2nMxwIJ7ooltdqtj3ZPciRXTCM9zXc+Drh+6SYSQPE/xl
xaHcki8O9gO7MxHmkVANIwXmGbmWTy6lLA2DmB7dN5cpVHxfpOCmOJRmXOyMncQ4
Jo9zV467HjZL+OffcCpTMLisFU3jDulCVmAb0a9Sx3yhlswvkBfzFmFKffTJTsJP
Y8uymdZKcJ7KwCI/gOSqipTuIzXkIM8kAjF7VakzaAMCc28G1uXV/M0frVJYV6QE
iXOXCSta6wpP/DRMf2cD5ULoT7hobIll7W8BTdH+VrBHQ2v+Ojj97Q63/KEwj4Y6
DFgHCOR276Gd5WP1eW9SScaHGZBvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxOq8
hQOf6iGACKFjwT/HWRTs3MEwHwYDVR0jBBgwFoAUaMXkutXc1WSiVidTyay2Mr0k
y1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4QUVBMjI4L2FNWGt1
dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FNWGt1dFhjMVdTaVZpZFR5YXkyTXIwa3kxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRFNDZGL0VCNDkzNENDRDVGRTExRTk5NTI4MTkzQkY4
QUVBMjI4LzJFM0ExMjI4RjE0MjExRUI5NTM2M0UyNkQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEpVxgwDQYJKoZIhvcNAQEL
BQADggEBAE8jPC6eO2zkVnMNxg97Y7IPvQNnmCkUKoMG4I1crv/SRlpN7YT9d1FT
+ixraC2YH/O05A1B6bMNHbi8ZwJFMTiLxP8boBsK6xne4IAGg9HQJkJZP+VwieoM
K3lTEeXO5yQgOZ0LgrZAqqIrM9G6MeuWW9uqdPkrA2z4VrfqaJh2Rb2iEpZApdZo
CNe90lkqRbQyHqfwxVXY6bKbWtpBbtxhvwrF9iLeVBy64ZWynN+XEGVExtb8SaI5
IoCADUR2SOjvQDOKCaBqrgLuOgyq4Zd/E3fvVbb5XBVxsMYO5ANvS/QmYFglJsGz
bv+3kZ989nAXnqJ0bae16gS4kDio4Tg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:29 2024 by rpki-client on console-ams.rpki-client.org