Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/482F6A4C583F11EDA5C92AB4F1222468.roa
File:                     482F6A4C583F11EDA5C92AB4F1222468.roa (raw, json)
Hash identifier:          1bNHg5hR2N1EwB0UNF89B2hLunHKeyd9Nx1pg6+rORw=
Subject key identifier:   0C:A2:1F:70:F9:5A:C6:1B:15:08:BD:BB:37:69:83:6B:CA:E3:91:15
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       0412
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/482F6A4C583F11EDA5C92AB4F1222468.roa
Signing time:             Sun 30 Oct 2022 10:40:34 +0000
ROA not before:           Sun 30 Oct 2022 10:40:30 +0000
ROA not after:            Sat 30 Oct 2032 10:40:30 +0000
asID:                     7262
IP address blocks:        41.79.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Oct 30 10:40:30 2022 GMT
            Not After : Oct 30 10:40:30 2032 GMT
        Subject: CN=635e54a1-ffec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:36:c7:3d:72:77:75:46:d4:87:57:d9:23:
                    c5:4d:a7:56:81:55:dc:8e:bf:ba:17:62:a4:52:f0:
                    71:29:a9:c8:81:9f:b4:d6:17:01:2d:01:78:6b:1a:
                    ca:ef:71:de:f1:a4:bd:f6:6e:88:ad:e2:b8:a8:48:
                    ec:0c:35:a8:0a:d4:e9:16:28:4d:ae:e1:8e:b5:b6:
                    17:9a:57:88:e6:78:2f:5e:0a:24:94:a5:57:8f:1c:
                    58:3d:96:86:82:b7:50:cd:c1:ab:d0:0a:63:fb:19:
                    5c:53:bf:00:8a:25:16:f7:50:f8:4a:97:db:23:ce:
                    8b:13:61:c5:dc:2f:f6:73:83:ce:06:67:fd:be:31:
                    3f:3a:63:e7:5c:bc:69:f2:fa:c4:74:30:50:7e:50:
                    6a:74:6f:3e:9b:2b:56:49:9c:63:4b:fa:0a:7e:6c:
                    9a:e1:60:0c:ab:b4:1b:f5:7c:0c:9a:ba:63:3a:5c:
                    13:db:9b:48:2d:30:11:95:59:2d:c8:70:06:b2:bf:
                    cf:2d:ab:cb:0b:59:a6:c4:2f:ac:7b:5e:3d:48:34:
                    1e:7a:12:21:ce:18:a8:91:41:f8:5f:cf:9e:21:ba:
                    45:97:ff:60:f1:7e:b1:5b:ae:d9:e4:85:77:5e:21:
                    7b:11:ca:98:d8:fe:65:45:7d:fe:21:a1:be:bd:cb:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A2:1F:70:F9:5A:C6:1B:15:08:BD:BB:37:69:83:6B:CA:E3:91:15
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/482F6A4C583F11EDA5C92AB4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:5f:01:1b:d9:85:36:a0:15:42:33:e0:ea:fb:4b:31:72:
         f1:76:e0:95:81:44:5f:a3:e0:87:9a:d1:39:cf:e2:27:3d:e8:
         e2:8a:c8:58:55:78:81:48:b2:56:bc:2b:f1:5f:3c:16:83:15:
         5f:a0:2c:d4:ad:77:df:24:4f:54:aa:10:22:4d:51:58:a9:ba:
         39:0d:92:78:28:03:11:fc:2d:79:f0:bd:0e:d6:db:0d:3e:ea:
         97:fb:d2:6e:94:f4:6b:4a:b8:4c:e5:a6:0e:c5:b1:02:bb:91:
         c7:e4:cc:88:4e:d6:18:c6:96:54:9d:36:9b:57:7e:f7:24:e4:
         a2:04:cf:75:42:c0:87:16:66:44:23:21:ac:b1:02:72:97:cf:
         fd:aa:20:63:31:89:a0:91:32:cc:0f:f8:db:40:8b:45:b8:d2:
         37:3d:ad:e0:b6:0f:6d:66:7d:e1:04:fa:6d:5b:0b:9e:54:5e:
         d3:97:bd:d0:af:31:54:03:5d:96:aa:b1:4d:62:cc:16:cd:8e:
         98:74:b1:10:89:4d:08:fb:48:74:e5:e3:a1:b5:67:61:14:d7:
         43:d4:13:41:00:ec:0f:9f:2b:de:b0:56:1e:c3:82:6f:b3:0a:
         54:bc:ec:b2:46:0e:92:8d:aa:0d:3b:01:70:ef:bc:2e:3e:ad:
         fa:b5:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org