Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/11A20D3E101511EE97F5814A4AD9E6FC.roa
File:                     11A20D3E101511EE97F5814A4AD9E6FC.roa (raw, json)
Hash identifier:          joY+ihhWamcd/sNRV42/x8HqISipPK+gnNX8V3U1lvk=
Subject key identifier:   41:54:45:B4:BA:10:7F:DD:AF:E1:D0:21:07:E2:13:E6:E5:A8:DF:E2
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       0A
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/11A20D3E101511EE97F5814A4AD9E6FC.roa
Signing time:             Wed 21 Jun 2023 09:21:57 +0000
ROA not before:           Wed 21 Jun 2023 09:21:54 +0000
ROA not after:            Fri 21 Jun 2024 09:21:54 +0000
asID:                     37684
IP address blocks:        62.12.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Jun 21 09:21:54 2023 GMT
            Not After : Jun 21 09:21:54 2024 GMT
        Subject: CN=6492c135-a434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:a5:f4:86:0a:c8:e1:3f:d9:b2:11:e8:80:
                    2d:e3:cc:ef:bb:44:6b:81:2c:c3:b4:d1:35:5f:18:
                    ec:fa:18:a6:3a:d4:9b:21:f8:53:64:90:ba:27:f8:
                    fa:af:e4:6d:53:64:bd:3f:39:3d:fa:41:8d:85:cc:
                    65:07:eb:bf:bf:e1:2e:4f:04:de:7a:56:f9:87:b9:
                    c7:43:f0:5a:a5:a8:b1:75:af:f6:48:b3:2e:ca:1d:
                    fb:04:28:7a:a9:21:ac:34:2e:42:2e:f5:29:aa:0c:
                    d0:ed:5b:31:c8:cd:80:85:26:a6:f1:a6:82:21:71:
                    38:d5:7e:e9:14:6a:9d:57:86:01:51:7a:2b:fc:07:
                    ac:f3:87:b6:8d:24:bd:77:3f:51:79:ae:4d:46:ab:
                    af:47:83:f9:bc:c4:dc:a7:80:ec:8e:12:0f:8b:35:
                    f6:fa:71:fe:5f:0f:c3:35:57:4c:d7:82:86:83:f8:
                    ab:4f:56:47:17:b6:b2:a4:e0:ea:50:46:3c:01:ef:
                    c0:0f:d8:0d:e9:e1:09:e2:91:18:cf:72:e2:16:36:
                    39:e6:b0:ed:24:eb:60:8d:39:65:a9:76:b6:56:b7:
                    92:b1:fa:e3:09:4f:3e:36:1e:6c:c6:40:ed:da:b9:
                    2a:cc:8a:36:44:52:4c:8d:5e:aa:2b:6f:f7:bc:2d:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:54:45:B4:BA:10:7F:DD:AF:E1:D0:21:07:E2:13:E6:E5:A8:DF:E2
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/11A20D3E101511EE97F5814A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.12.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:10:46:45:2d:f7:6c:d5:a6:9c:6b:9e:0f:d7:f7:a4:61:9b:
         e8:20:85:65:3c:3f:d5:65:36:ab:a1:57:0b:6d:56:53:f3:34:
         c6:1b:cc:2a:c2:a9:94:dc:56:e8:6c:ad:3c:fa:e0:5c:10:49:
         c1:bb:0a:d6:ee:d9:de:79:e8:dc:3c:95:44:a9:ae:c9:2e:6c:
         ee:6a:8f:12:94:79:25:26:0d:f7:c8:4d:aa:6a:82:80:09:80:
         f2:60:b6:0c:02:48:4a:ec:91:fd:d3:3d:7d:21:4f:e4:f4:84:
         dc:05:31:a1:d5:7c:9e:46:43:a3:39:a4:f4:5c:60:a5:15:4e:
         6c:3b:c6:7d:bc:33:a5:cc:ad:c3:0b:cc:3e:84:e8:55:52:35:
         0f:4a:f8:c3:4a:3a:85:05:d1:59:70:24:66:f9:cf:b1:6a:df:
         d1:80:9e:fc:62:b5:c8:d5:2a:ea:47:e8:00:42:e3:33:4c:e9:
         13:93:4f:2d:e2:12:19:5d:8f:77:39:42:d1:c3:57:33:11:24:
         41:31:60:46:58:12:24:c3:f8:ce:f5:6f:7a:26:25:ef:0c:9a:
         9b:f0:9d:43:c9:56:91:3f:95:37:42:72:fa:33:b8:e6:57:cc:
         47:21:69:49:97:cc:0e:50:fb:fd:c4:e1:ff:f9:5f:c5:2b:2d:
         40:ec:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 04:18:06 2024 by rpki-client on console-ams.rpki-client.org