Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0F846D08216C11EF8074BA1B7DDC24C2.roa
File:                     0F846D08216C11EF8074BA1B7DDC24C2.roa (raw, json)
Hash identifier:          2cHpMzYFLIaciTpzwpVBdKjF8btucqV90CHDQfekd3U=
Subject key identifier:   5A:92:E4:B9:66:6F:FB:0C:97:EF:C5:FE:D3:AA:82:8B:04:E8:48:BB
Certificate issuer:       /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial:       01A0
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0F846D08216C11EF8074BA1B7DDC24C2.roa
Signing time:             Mon 03 Jun 2024 05:42:27 +0000
ROA not before:           Mon 03 Jun 2024 05:42:24 +0000
ROA not after:            Tue 01 Jan 2030 05:42:24 +0000
asID:                     37684
IP address blocks:        2c0f:f408:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 30 Sep 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
        Validity
            Not Before: Jun  3 05:42:24 2024 GMT
            Not After : Jan  1 05:42:24 2030 GMT
        Subject: CN=665d57c3-52d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:0b:06:a3:9b:fe:4f:0b:d1:bc:22:66:99:
                    2b:db:3c:7b:97:cd:8c:09:a1:71:5f:5c:88:0f:5e:
                    88:df:d7:08:ac:c5:15:1f:6b:3f:fc:59:f2:65:f4:
                    2f:56:ee:e3:40:14:41:23:2e:69:0e:b2:f4:79:48:
                    15:ac:5b:6e:a7:5b:f0:c7:c6:7c:b7:6e:48:8b:3c:
                    24:be:b8:21:55:bd:ae:66:c2:94:9a:8d:c4:b0:3a:
                    83:54:40:a9:a4:c0:3a:c1:5f:0e:72:2a:81:20:ae:
                    10:bc:d4:8b:14:cb:0c:14:6d:4e:17:05:bf:de:48:
                    31:b4:f2:5d:d7:ad:66:a6:14:02:0e:d9:a3:2d:68:
                    e2:6d:69:54:93:67:45:8d:4e:ae:bd:dd:d0:e7:b1:
                    87:93:8d:41:77:0d:31:62:24:4c:b4:4b:b5:05:6a:
                    36:82:f2:39:a9:06:ba:c1:ad:2f:63:69:56:db:0e:
                    43:1c:db:d8:55:8b:80:12:f7:cd:e1:4d:c5:a7:6c:
                    98:8b:80:4a:6a:a1:ee:cd:b7:32:61:cd:cd:d4:0e:
                    fd:f5:35:95:7f:f0:86:04:7b:de:67:bd:9c:f1:e1:
                    48:fc:e1:ac:9f:b6:a6:99:6a:18:03:8c:ac:3f:e1:
                    ce:43:a1:6d:3a:82:49:25:98:fd:03:42:39:2b:4e:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:E4:B9:66:6F:FB:0C:97:EF:C5:FE:D3:AA:82:8B:04:E8:48:BB
            X509v3 Authority Key Identifier:
                keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/0F846D08216C11EF8074BA1B7DDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f408:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:47:8c:f4:c0:cf:cd:e4:74:b0:fd:d6:d7:8a:48:7e:fe:12:
         43:55:28:d8:6c:62:15:14:4d:0b:d7:1b:6e:b9:c5:f4:06:31:
         d2:fb:8a:91:8d:a6:f1:9b:40:c9:a2:8b:32:57:4e:ef:82:98:
         f7:60:ca:25:5b:ba:2a:ce:b8:c7:0d:81:81:08:f5:26:98:60:
         bc:59:c5:ce:2d:3c:59:63:57:12:69:42:c2:74:c4:62:e9:38:
         77:91:75:64:1f:30:96:73:07:54:2b:f0:f4:ee:cd:6c:e4:43:
         4c:77:4e:b3:7a:57:c4:fc:6a:9b:aa:32:35:c1:3b:7f:ed:63:
         a9:0f:67:4c:e2:fd:cc:2e:9d:e9:53:38:74:50:b5:ac:52:5e:
         ce:71:71:13:d3:f7:c6:04:ed:e3:87:a5:75:53:95:d6:0c:f2:
         84:ca:e1:22:fd:89:61:63:5c:90:5c:34:2c:85:b8:ba:28:e1:
         b2:f5:4a:ae:f2:0b:d1:ec:77:1b:25:b5:52:b9:e6:ef:4c:48:
         2e:94:8c:e3:c9:03:52:3f:60:17:06:ff:43:e5:54:6a:df:60:
         34:ef:ef:10:50:19:84:3f:4e:3c:ee:f2:94:0a:8e:79:c0:d6:
         01:37:79:bc:ba:ab:44:be:a3:b1:57:fd:f5:1f:d6:d0:0a:f0:
         d2:6f:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:20 2024 by rpki-client on console-fra.rpki-client.org