Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/7726038A1A1D11ECB5429A32D8A014CE.roa
File:                     7726038A1A1D11ECB5429A32D8A014CE.roa (raw, json)
Hash identifier:          NZtUzRcCuqAnHwyzoZoriA7cseEjof5sDErEexpi67o=
Subject key identifier:   DD:76:6B:4B:3F:25:20:06:91:EE:DC:6A:AC:D6:58:2F:38:DE:E6:4F
Certificate issuer:       /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial:       08
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/7726038A1A1D11ECB5429A32D8A014CE.roa
Signing time:             Mon 20 Sep 2021 14:17:20 +0000
ROA not before:           Mon 20 Sep 2021 14:17:16 +0000
ROA not after:            Sat 20 Sep 2031 14:17:16 +0000
asID:                     328585
IP address blocks:        102.23.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
        Validity
            Not Before: Sep 20 14:17:16 2021 GMT
            Not After : Sep 20 14:17:16 2031 GMT
        Subject: CN=614897f0-7e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:a7:3c:9a:b2:6e:a5:0a:ba:68:e7:33:87:
                    f1:38:8e:65:a9:28:eb:24:45:c0:cb:81:f1:57:d2:
                    43:c0:f8:72:2d:eb:b0:8b:aa:b3:5c:3c:f9:73:d0:
                    98:c0:08:b5:da:18:76:a3:15:ce:92:55:ee:48:b9:
                    91:eb:5c:62:f4:1e:de:5a:d9:c7:7c:83:2f:98:21:
                    21:96:65:74:95:1f:6f:eb:89:9e:85:a2:2c:ac:50:
                    a4:6f:d1:46:21:4a:e4:00:9f:07:b9:0a:e5:7d:77:
                    a4:e9:78:2d:b3:bd:53:29:e7:ec:bd:16:dc:6a:df:
                    ad:96:a5:77:b1:19:60:21:4e:dd:f6:59:b3:be:25:
                    f5:9c:d3:a8:26:2c:a5:6a:3a:3d:dd:e8:bb:3c:b9:
                    7f:ba:b0:46:28:54:3c:10:d5:f7:41:af:18:12:f8:
                    b4:29:a6:71:56:c8:9d:a6:63:f3:0b:dd:69:3f:0b:
                    ba:b1:67:1d:8c:42:1d:bf:8c:2f:ed:5d:2b:6d:71:
                    a2:8c:4b:b2:04:c1:0d:25:f5:8f:3a:18:87:8b:70:
                    80:df:5e:9c:0b:00:d6:e3:ce:57:93:e9:b9:fe:0a:
                    c7:d5:0d:dd:5b:e5:91:b2:1c:bb:07:c8:dc:24:e8:
                    2b:90:9f:5b:6d:2d:3e:13:94:eb:a6:c7:a8:93:51:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:76:6B:4B:3F:25:20:06:91:EE:DC:6A:AC:D6:58:2F:38:DE:E6:4F
            X509v3 Authority Key Identifier:
                keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/7726038A1A1D11ECB5429A32D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:87:17:9c:bb:25:e3:47:45:c9:0a:be:1a:47:51:20:ea:8c:
         08:44:3b:a8:fb:3c:ad:13:24:2f:17:cc:b0:e4:95:1b:63:5f:
         93:cf:5b:df:f2:23:18:e1:ee:4a:b1:b3:d6:89:07:b2:8e:b4:
         48:44:7e:46:7c:14:ee:4c:12:89:45:2a:70:ae:1d:43:2b:be:
         5a:f5:7a:85:39:dd:8a:b7:ed:3f:fd:6b:52:9d:fb:fb:2e:ea:
         ae:fa:3b:72:53:1c:f9:38:04:bc:73:66:9d:99:6e:32:0b:92:
         35:06:fe:87:40:2b:7b:bc:06:0a:ee:be:30:78:10:5b:e5:33:
         a5:03:46:6b:29:14:af:8b:13:39:2b:97:ae:fe:1a:85:74:a6:
         09:30:7a:61:56:5b:d7:fc:2e:73:3b:ca:ed:00:f6:69:61:b9:
         e9:b9:4a:77:19:22:7e:22:48:b0:4f:4c:ce:7f:82:44:84:92:
         e0:46:e5:f5:ef:f8:e2:23:20:26:cc:f6:ff:30:f2:f8:4a:ac:
         cb:d4:6d:cd:71:ae:00:c4:17:28:e2:02:2a:1b:75:0b:cd:72:
         5b:09:bb:ad:3d:67:3a:39:46:2a:30:ba:46:19:58:26:7b:aa:
         dd:ce:e7:02:c9:7e:50:25:47:ba:ef:44:c7:3b:3b:73:c4:d1:
         c5:88:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:16 2024 by rpki-client on console-fra.rpki-client.org