Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/6525E138568511ECA1829575D8A014CE.roa
File:                     6525E138568511ECA1829575D8A014CE.roa (raw, json)
Hash identifier:          mtSlARG8Is3GqsjXdmOkSw/1dAtIj6lyy56MNr8QGO0=
Subject key identifier:   CE:C0:DB:65:CD:09:AE:9C:20:9C:20:9B:FF:63:23:C5:1B:9D:4F:24
Certificate issuer:       /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial:       04F2
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/6525E138568511ECA1829575D8A014CE.roa
Signing time:             Mon 06 Dec 2021 11:12:27 +0000
ROA not before:           Mon 06 Dec 2021 11:12:23 +0000
ROA not after:            Mon 23 Dec 2030 11:12:23 +0000
asID:                     36924
IP address blocks:        2c0f:f220::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
        Validity
            Not Before: Dec  6 11:12:23 2021 GMT
            Not After : Dec 23 11:12:23 2030 GMT
        Subject: CN=61adf01b-94bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:bf:fc:1c:30:0b:12:da:3e:a3:f9:29:c6:
                    ab:b8:96:24:e6:e5:1f:48:8b:a1:f8:dc:74:66:0b:
                    9d:7e:92:d2:3f:23:94:3f:01:19:47:62:e2:26:b4:
                    91:f0:5e:82:c2:c5:11:3d:78:19:1a:6d:7b:44:1b:
                    4c:96:b3:44:24:eb:b6:6d:8b:fc:46:23:47:66:43:
                    5f:27:9e:91:68:d2:4e:7c:f0:4d:67:ba:a4:6b:86:
                    57:88:e2:ac:60:03:d9:80:d5:0e:27:9d:40:53:cd:
                    02:4c:35:c0:24:f9:88:38:65:01:4b:9b:13:c2:5d:
                    22:63:88:45:a2:f1:fb:e2:69:62:82:05:a4:c8:7a:
                    ee:a9:b9:c2:2a:e1:58:ce:1e:91:56:ce:3a:a5:eb:
                    a4:d2:18:8a:39:da:ab:85:7d:e5:00:22:cd:f0:d0:
                    d4:06:af:cf:ff:e8:bb:b6:8b:01:84:3f:0a:1a:0e:
                    15:2c:c5:e1:68:2d:74:ea:b3:3f:9f:b7:37:7b:fb:
                    cf:1a:97:5b:75:e5:b1:97:4e:77:0b:16:e2:9d:4d:
                    b2:ef:80:9a:f1:60:3b:55:8e:2b:11:ac:51:9c:d5:
                    ef:ab:fc:e9:ae:37:23:62:69:29:2a:45:bd:44:d2:
                    ed:fd:cb:cd:9f:8b:a0:cd:25:54:55:6c:67:fb:dd:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C0:DB:65:CD:09:AE:9C:20:9C:20:9B:FF:63:23:C5:1B:9D:4F:24
            X509v3 Authority Key Identifier:
                keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/6525E138568511ECA1829575D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f220::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:4f:34:85:e3:8c:95:80:58:46:62:43:6e:dd:3c:03:27:21:
         77:ca:31:9a:77:df:75:fe:cc:10:6b:da:01:9f:53:3b:35:2c:
         d9:89:c6:f0:bc:aa:d3:2d:0e:a3:fa:c3:25:44:40:5b:11:26:
         cf:9a:9b:7e:d7:87:b8:35:c6:06:18:af:50:83:ee:a4:cf:ba:
         3f:a6:67:f2:4b:72:a2:21:3b:e9:6f:ab:f5:48:d5:f2:32:bd:
         11:24:73:a4:cd:bc:c4:f6:87:52:45:ad:8a:b0:a2:ea:0d:6c:
         2d:e9:af:53:5d:59:d3:ea:18:93:ce:8e:ae:2c:59:23:c2:6a:
         65:1e:81:50:3e:ea:e0:00:bc:c8:c2:84:5a:7e:1e:07:33:81:
         41:01:88:90:fc:4a:4f:23:4b:6d:a2:b1:ac:e7:59:ee:e8:70:
         2e:f1:56:7b:13:c0:3c:76:10:4b:28:54:1e:ec:cd:08:cb:ff:
         6d:8a:bb:db:95:13:82:5f:eb:d6:b2:0c:f4:61:48:9e:e8:68:
         cb:81:9b:5a:d0:b5:05:bd:84:5f:46:4b:7b:19:84:ef:cb:c0:
         db:d9:f6:61:4a:43:6f:e7:5b:e8:c2:47:bb:b7:6f:24:74:94:
         ca:86:d6:4e:c6:8d:6d:ff:e4:48:60:cc:0a:20:90:cf:62:fb:
         75:5a:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:17 2024 by rpki-client on console-ams.rpki-client.org