Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/11DE32301E1411ED808237BFF1222468.roa
File:                     11DE32301E1411ED808237BFF1222468.roa (raw, json)
Hash identifier:          NDT1h64rAQtrp6e2jKIP2YrQyHRxP3obuZwk00lVG5U=
Subject key identifier:   45:B8:9E:5A:D8:A4:CF:7C:63:91:4D:DA:FC:BD:5A:3F:D2:F0:AE:53
Certificate issuer:       /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial:       51
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/11DE32301E1411ED808237BFF1222468.roa
Signing time:             Wed 17 Aug 2022 10:05:07 +0000
ROA not before:           Wed 17 Aug 2022 10:05:03 +0000
ROA not after:            Tue 17 Aug 2032 10:05:03 +0000
asID:                     30983
IP address blocks:        2001:43f8:1670::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
        Validity
            Not Before: Aug 17 10:05:03 2022 GMT
            Not After : Aug 17 10:05:03 2032 GMT
        Subject: CN=62fcbd53-59b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:37:ae:cf:1e:91:82:f1:43:fc:49:29:12:
                    56:94:5f:8f:f1:9c:fc:bc:29:1e:fd:1f:0a:f6:86:
                    6f:79:b3:1f:58:4d:7a:66:61:58:44:48:af:5e:78:
                    84:d4:76:ed:df:f8:f5:d4:1d:a8:d6:2c:01:78:38:
                    34:b5:84:a5:28:4f:22:37:7b:e7:74:30:bb:5f:67:
                    f9:b7:28:2a:cb:d0:f8:4f:5f:9e:4d:b3:fa:ae:58:
                    80:f6:21:b3:13:62:db:13:80:9a:86:46:82:84:c0:
                    ae:59:bd:c7:10:05:40:ab:d2:18:7b:a5:96:bc:52:
                    4b:dc:46:ea:95:36:1f:6e:4a:92:e1:94:fc:41:0d:
                    cf:96:cc:50:cb:52:06:55:5f:df:8f:90:03:a8:38:
                    7f:7c:62:94:27:05:79:4d:48:de:f6:cf:9a:34:0f:
                    dd:48:e2:b8:bd:39:13:e5:f2:32:e2:80:59:53:f3:
                    af:77:7a:b4:68:cd:ed:d2:75:8d:54:11:94:b5:ce:
                    09:ca:3d:45:74:29:63:14:c0:bb:71:50:06:32:66:
                    6b:2b:48:3c:84:21:6c:07:b6:bc:3b:5b:63:6f:96:
                    87:be:cc:d2:18:40:87:55:0b:08:af:1e:10:fb:8b:
                    03:3b:9f:a0:25:76:0e:cf:fd:de:bf:fc:ee:c6:a3:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:9E:5A:D8:A4:CF:7C:63:91:4D:DA:FC:BD:5A:3F:D2:F0:AE:53
            X509v3 Authority Key Identifier:
                keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/11DE32301E1411ED808237BFF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:1670::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:41:c5:af:2e:80:ab:5e:85:47:82:5e:e8:11:f8:02:b9:23:
         90:8d:be:b6:58:15:2e:56:11:91:70:01:66:ed:e8:6c:12:f5:
         77:69:f9:c4:ca:c4:90:b0:1c:82:3b:a2:b8:fa:d8:50:a2:72:
         67:66:bf:fc:86:68:e0:39:ae:0d:24:66:0a:2f:80:d7:50:af:
         71:9e:8f:db:42:e2:9f:30:09:54:ee:55:70:e6:91:e1:a1:c9:
         87:01:8e:b1:b5:09:6b:c6:e7:b2:44:65:33:f7:aa:36:ab:f8:
         52:c0:fa:fb:c7:9e:da:71:12:24:b1:c0:f9:27:7b:f7:ef:53:
         4a:71:d2:0d:c7:da:84:32:8a:69:48:b1:b9:77:80:b2:a4:7c:
         40:43:65:f8:50:02:2f:ec:92:76:61:9f:85:96:62:ad:b4:77:
         31:79:cc:53:ca:b7:0f:19:54:51:f1:f8:b7:ed:f6:30:8a:12:
         52:e1:ae:20:6d:ac:59:7e:df:e6:02:61:cf:22:42:82:2a:5a:
         dc:1f:3d:e1:cf:43:d9:53:5c:39:bb:59:cf:c3:5c:cb:a5:6b:
         e0:8d:9b:f0:2a:21:44:1f:44:25:21:06:fa:2f:2c:e0:60:82:
         51:47:78:c1:06:6f:db:7e:b9:39:d6:2f:e0:d4:72:dc:f3:98:
         cd:57:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:03 2024 by rpki-client on console-ams.rpki-client.org