Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/1296C2244A3711ED92AD61A2F1222468.roa
File:                     1296C2244A3711ED92AD61A2F1222468.roa (raw, json)
Hash identifier:          lPiWo1VzqLczWZQ/7USflGRaYLXN3n3lGUFRQvs2sq8=
Subject key identifier:   98:B1:66:14:60:70:BF:AB:14:66:B3:3D:68:D1:03:D6:D5:00:03:BA
Certificate issuer:       /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial:       040F
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/1296C2244A3711ED92AD61A2F1222468.roa
Signing time:             Wed 12 Oct 2022 14:06:31 +0000
ROA not before:           Wed 12 Oct 2022 14:06:26 +0000
ROA not after:            Tue 12 Oct 2032 14:06:26 +0000
asID:                     40123
IP address blocks:        41.221.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039 (0x40f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
        Validity
            Not Before: Oct 12 14:06:26 2022 GMT
            Not After : Oct 12 14:06:26 2032 GMT
        Subject: CN=6346c9e7-110b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:d0:f9:28:32:88:7e:6c:79:e1:69:f5:58:
                    9e:80:62:6e:45:29:e9:55:70:c3:26:b0:05:0d:8a:
                    49:0c:d8:34:a4:b7:d1:ca:c5:48:9d:4b:fb:9d:1f:
                    87:0f:89:12:e1:35:d9:48:b2:95:01:99:df:43:df:
                    a7:04:83:a4:fd:5c:30:f7:2e:45:f9:15:40:0e:63:
                    2e:f6:59:44:f8:8d:a7:06:58:9c:b8:0f:30:d4:64:
                    97:99:6a:a5:47:6b:99:c4:c9:9e:35:50:18:b9:f9:
                    96:1a:cc:7d:10:f4:d3:53:c6:4c:62:47:d9:cc:42:
                    21:49:e8:ab:b5:d7:65:28:d6:c3:39:8d:37:d3:d7:
                    20:af:3c:76:16:55:30:95:70:ad:07:7b:0e:7f:75:
                    69:cd:e9:9b:f3:19:57:df:a1:8e:fd:71:bf:83:b8:
                    42:28:65:70:fe:de:cc:2d:51:41:86:fb:67:f8:07:
                    f0:a2:8a:35:ec:b7:30:12:57:bb:cc:7d:a2:70:e4:
                    b8:3a:b9:74:9c:e1:bd:a5:b8:3b:64:f3:f6:83:c9:
                    68:25:b5:54:ea:bf:b3:77:05:98:da:08:9d:db:c4:
                    a3:73:c3:a2:cf:c0:4c:dc:70:9d:3f:32:b7:92:a6:
                    d3:e8:32:9b:17:79:6d:61:b8:05:14:c8:28:d4:fe:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B1:66:14:60:70:BF:AB:14:66:B3:3D:68:D1:03:D6:D5:00:03:BA
            X509v3 Authority Key Identifier:
                keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/1296C2244A3711ED92AD61A2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.221.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:25:6d:b1:e1:9f:2e:a4:c6:0f:4b:10:2e:18:6a:6c:63:18:
         e7:35:bb:0c:d1:f3:a3:ab:9d:df:c1:55:29:22:c5:6a:dc:62:
         e4:73:b3:d1:3f:dc:83:e3:9a:b9:3b:6d:ca:66:a9:ba:73:52:
         af:8f:e5:c5:9c:0e:f2:76:89:e1:2e:d8:ad:3b:fb:85:1d:91:
         8a:12:39:ac:68:46:dc:ec:c0:29:80:ab:85:06:bd:a5:a1:88:
         7d:c7:20:cd:bc:b4:92:48:ce:b5:7d:f8:9b:6d:73:68:34:ae:
         dd:b9:a5:c6:31:fc:8c:c3:e7:a8:fe:38:ce:b3:d0:7f:e1:cb:
         99:5c:6b:c8:ca:8b:45:8f:df:b9:d3:40:94:cb:aa:56:bb:98:
         34:14:42:3f:62:d5:c6:6b:71:9b:25:c9:2c:d3:0b:9c:e1:f1:
         46:a7:59:1e:7b:79:a7:ac:e1:e6:fe:61:c8:dc:4c:90:9f:90:
         24:87:62:85:5b:6a:21:8b:40:b2:3e:4e:f5:04:93:3c:de:0c:
         c9:0a:ca:fe:2a:80:cc:57:84:f7:30:84:ff:82:87:5a:34:4a:
         45:0f:ee:3d:a4:86:68:09:5e:26:45:f2:34:61:ff:09:6a:f2:
         63:1e:c6:4a:7c:41:ca:4c:cb:3d:8d:2d:fd:3d:5f:9b:74:ca:
         57:32:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org