Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/22F8E114101711EE82479A504AD9E6FC.roa
File:                     22F8E114101711EE82479A504AD9E6FC.roa (raw, json)
Hash identifier:          G3FQqas/hdENjjE3gxOdHpQRmaw03Ne/UsudtoiDCbg=
Subject key identifier:   EA:A9:DA:1D:AD:2B:12:51:B6:99:3F:FF:4D:41:9B:0A:13:8B:54:B1
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       16
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/22F8E114101711EE82479A504AD9E6FC.roa
Signing time:             Wed 21 Jun 2023 09:36:45 +0000
ROA not before:           Wed 21 Jun 2023 09:36:41 +0000
ROA not after:            Fri 21 Jun 2024 09:36:41 +0000
asID:                     37684
IP address blocks:        62.12.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Jun 21 09:36:41 2023 GMT
            Not After : Jun 21 09:36:41 2024 GMT
        Subject: CN=6492c4ad-137b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:08:05:46:a4:4f:56:cb:f0:eb:b1:4b:7e:
                    69:4a:32:a1:17:ca:4e:da:b3:0c:f2:03:3b:16:b7:
                    fc:a8:6e:e1:f4:45:54:08:5a:ff:98:ed:dd:f1:f7:
                    66:b0:1a:c1:70:b2:ca:6d:69:95:73:ea:8d:4f:15:
                    aa:2c:dd:f3:8d:93:1a:e0:aa:25:0d:f6:56:22:8c:
                    d8:e2:79:5d:b1:0a:e9:34:f1:71:bd:c2:ac:81:3d:
                    53:4e:be:76:f0:2a:39:a6:a3:29:32:2a:a4:e4:b9:
                    b7:e9:cb:34:98:62:7b:00:64:cd:9a:b6:d6:4f:dd:
                    6e:80:05:3b:ce:ca:56:77:1e:8a:32:21:05:d7:dc:
                    8e:66:6e:20:2c:e6:78:49:58:a3:62:9b:96:68:c0:
                    35:27:9c:a0:f6:ab:55:43:66:45:e7:0a:8f:43:81:
                    30:d1:57:ac:f3:43:d4:21:32:54:69:fa:50:47:42:
                    f7:c7:62:8a:4b:36:2b:f2:8c:a3:ca:f6:41:0d:56:
                    24:df:7f:49:5a:40:8c:69:f6:7b:28:4e:2b:d6:27:
                    96:18:65:d1:1c:f5:ff:35:0c:77:11:1f:78:fd:6b:
                    2e:3e:69:0a:f9:78:4a:31:03:b7:e4:99:fc:f6:b9:
                    62:8c:b9:c3:d2:c1:4b:cb:d8:0a:12:36:76:62:ae:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A9:DA:1D:AD:2B:12:51:B6:99:3F:FF:4D:41:9B:0A:13:8B:54:B1
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/22F8E114101711EE82479A504AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.12.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a6:f1:02:d7:9a:3c:79:b9:f1:90:7d:d3:8e:b0:de:1a:e0:
         13:b4:95:cc:1a:8b:3d:07:c7:2b:c4:18:1a:76:20:42:e1:8d:
         b9:d5:4e:1b:5f:3a:5a:a9:95:11:c9:91:f3:48:95:21:d5:8d:
         09:c9:e7:a4:06:f0:7a:36:5d:d8:c9:fb:2a:d5:80:af:83:4a:
         72:76:d7:1f:b7:45:93:6d:9f:b3:86:7c:e5:c2:f3:ee:a7:a8:
         6b:68:cb:7e:4c:ec:38:65:06:34:80:63:1f:3a:52:c0:ab:cf:
         b2:8c:ad:97:22:6e:06:4d:7c:6a:cc:90:a9:db:58:08:ae:5e:
         7e:75:99:57:88:fa:73:1a:c7:82:bd:f4:5c:0e:8a:b9:22:f7:
         09:42:6b:1c:86:2f:73:0a:3c:2d:05:e1:72:de:1c:2f:5b:d7:
         46:4f:ad:3d:a7:b7:cc:11:79:b3:71:b9:18:54:5f:77:4d:1d:
         fc:e2:65:44:3b:ed:0a:fe:40:54:cf:46:65:d0:ec:39:3c:5a:
         d3:18:8e:f1:47:b6:3b:a6:0c:99:dd:67:77:e1:07:e9:b1:15:
         ec:72:e9:d2:6b:b7:4e:2c:d5:35:84:e7:36:61:9e:06:54:9f:
         13:24:0e:55:13:04:47:0d:f4:4c:64:9a:9f:ef:5b:60:1e:ca:
         22:3d:71:84
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBFjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
MkI4Q1JJMTEwLwYDVQQFEygwNjI5Qzk5RDQ3NjBDMjg5Qjg0Q0RCRUNGMUI2QzEz
Q0Y1MjVFQUFGMB4XDTIzMDYyMTA5MzY0MVoXDTI0MDYyMTA5MzY0MVowGDEWMBQG
A1UEAxMNNjQ5MmM0YWQtMTM3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM8vCAVGpE9Wy/DrsUt+aUoyoRfKTtqzDPIDOxa3/Khu4fRFVAha/5jt3fH3
ZrAawXCyym1plXPqjU8Vqizd842TGuCqJQ32ViKM2OJ5XbEK6TTxcb3CrIE9U06+
dvAqOaajKTIqpOS5t+nLNJhiewBkzZq21k/dboAFO87KVnceijIhBdfcjmZuICzm
eElYo2KblmjANSecoParVUNmRecKj0OBMNFXrPND1CEyVGn6UEdC98diiks2K/KM
o8r2QQ1WJN9/SVpAjGn2eyhOK9Ynlhhl0Rz1/zUMdxEfeP1rLj5pCvl4SjEDt+SZ
/Pa5Yoy5w9LBS8vYChI2dmKu+Z8CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBTqqdod
rSsSUbaZP/9NQZsKE4tUsTAfBgNVHSMEGDAWgBQGKcmdR2DCibhM2+zxtsE89SXq
rzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTJCOEMvQjUwQ0E0QUEwQjYyMTFFRUIyRDM1RThBNEFEOUU2RkMvQmluSm5V
ZGd3b200VE52czhiYkJQUFVsNnE4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
QmluSm5VZGd3b200VE52czhiYkJQUFVsNnE4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTJCOEMvQjUwQ0E0QUEwQjYyMTFFRUIyRDM1RThBNEFEOUU2
RkMvMjJGOEUxMTQxMDE3MTFFRTgyNDc5QTUwNEFEOUU2RkMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4MdzANBgkqhkiG9w0BAQsFAAOC
AQEAtKbxAteaPHm58ZB9046w3hrgE7SVzBqLPQfHK8QYGnYgQuGNudVOG186WqmV
EcmR80iVIdWNCcnnpAbwejZd2Mn7KtWAr4NKcnbXH7dFk22fs4Z85cLz7qeoa2jL
fkzsOGUGNIBjHzpSwKvPsoytlyJuBk18asyQqdtYCK5efnWZV4j6cxrHgr30XA6K
uSL3CUJrHIYvcwo8LQXhct4cL1vXRk+tPae3zBF5s3G5GFRfd00d/OJlRDvtCv5A
VM9GZdDsOTxa0xiO8Ue2O6YMmd1nd+EH6bEV7HLp0mu3TizVNYTnNmGeBlSfEyQO
VRMERw30TGSan+9bYB7KIj1xhA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 04:18:06 2024 by rpki-client on console-ams.rpki-client.org