Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/21C82562101611EEBF18D14D4AD9E6FC.roa
File:                     21C82562101611EEBF18D14D4AD9E6FC.roa (raw, json)
Hash identifier:          ihAyqOTkhmD+NBACqMIFP6IMVlAGA7bo1jf0GzMU7ug=
Subject key identifier:   93:68:DD:2F:D0:BB:62:46:8A:20:C8:3D:A6:AC:D4:ED:7E:01:F9:D3
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       0E
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/21C82562101611EEBF18D14D4AD9E6FC.roa
Signing time:             Wed 21 Jun 2023 09:29:34 +0000
ROA not before:           Wed 21 Jun 2023 09:29:30 +0000
ROA not after:            Fri 21 Jun 2024 09:29:30 +0000
asID:                     37684
IP address blocks:        62.12.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Jun 21 09:29:30 2023 GMT
            Not After : Jun 21 09:29:30 2024 GMT
        Subject: CN=6492c2fe-07b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:89:28:af:98:e6:a4:5c:01:8b:7a:6e:76:
                    f9:71:b3:89:51:27:67:20:47:fc:ca:52:a3:79:d2:
                    2b:60:9e:d7:69:e1:52:c7:0c:87:76:cb:71:16:d6:
                    71:1b:ad:a4:d0:22:d3:02:c3:c8:be:09:5e:f3:d5:
                    6b:07:81:f4:e6:ce:64:15:a5:d7:c6:e1:f9:70:bb:
                    c2:ba:79:f5:b2:90:7a:74:e8:6c:d5:3f:59:3d:07:
                    a4:b3:9a:91:df:68:eb:8f:51:dd:6e:d6:4f:50:f7:
                    01:23:95:ac:51:d0:bb:1b:d9:f2:0b:0d:7c:91:a9:
                    a6:87:af:ac:4c:7d:45:66:51:07:7d:54:36:83:99:
                    ac:ac:72:5d:b9:77:8d:ce:bf:33:b4:fc:d1:e6:1c:
                    65:51:22:5c:81:ae:11:3e:6a:fe:03:2f:92:37:c6:
                    68:5a:84:ea:60:ba:66:5d:0b:0c:9c:d1:14:5a:a5:
                    94:03:d3:47:e0:9e:71:b9:e0:65:0b:60:f3:84:a0:
                    96:7c:de:d4:c5:f0:98:28:18:d1:57:35:08:f9:10:
                    20:db:37:82:6e:90:08:6d:2a:a1:cd:79:11:fd:e8:
                    7f:f4:bc:0b:f0:01:d9:51:3d:48:12:a1:73:51:ee:
                    83:ea:fd:d6:53:50:b9:6d:89:ad:77:66:3c:1b:bc:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:68:DD:2F:D0:BB:62:46:8A:20:C8:3D:A6:AC:D4:ED:7E:01:F9:D3
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/21C82562101611EEBF18D14D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.12.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:a3:e1:41:fe:8b:96:98:04:6a:d4:ab:98:a0:8c:f8:4a:b2:
         bd:c9:e7:9f:b6:cb:b0:0c:b3:3a:cc:bd:77:5d:5a:ce:0d:31:
         86:40:02:fe:1c:e9:90:9b:23:5d:7a:36:24:43:5e:fc:2f:10:
         1b:5d:9f:cf:44:bf:26:f9:32:07:19:6b:aa:87:8a:2c:b8:9f:
         c9:49:33:00:12:ac:0c:4d:fd:2d:0b:f2:fa:ab:7b:f8:f4:dd:
         ac:80:e6:60:ae:c6:9e:8c:cc:66:bc:0a:66:c2:65:1d:65:84:
         23:81:34:dd:7b:77:d0:ef:3f:2d:88:e4:1a:bd:de:73:d9:d1:
         07:a3:61:b1:f2:e1:ff:2b:04:c8:b7:13:14:4f:ad:c7:3d:f8:
         76:14:19:6b:b2:f3:f0:63:db:0e:6e:d3:49:f9:9b:ff:75:75:
         7b:4b:f7:a0:4e:8f:25:c2:4a:3c:a7:7f:ab:ac:46:29:7c:1e:
         3e:94:76:ee:cc:70:f8:32:5b:49:3d:37:18:9a:fe:ea:0c:ac:
         ad:df:c0:60:db:ee:fe:dd:2a:89:bf:fc:b2:ef:b2:65:04:98:
         41:99:fa:a9:96:88:80:a2:d3:54:6c:81:1e:c9:d9:be:af:43:
         e2:6c:3f:bf:22:b8:5b:22:1f:d9:c0:e0:41:b1:39:f4:1c:e6:
         04:5b:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 03:05:54 2024 by rpki-client on console-fra.rpki-client.org