Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/D3167F64BBA311EA84581016F8AEA228.roa
File:                     D3167F64BBA311EA84581016F8AEA228.roa (raw, json)
Hash identifier:          olteyMOY4v7fnBH8LXpkJqIEF+laR8HIc07JsyM+o9Y=
Subject key identifier:   64:72:30:79:6A:09:FE:5B:C2:FE:84:93:DD:97:F6:7E:8C:95:CF:36
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       AE
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/D3167F64BBA311EA84581016F8AEA228.roa
Signing time:             Wed 01 Jul 2020 14:04:48 +0000
ROA not before:           Wed 01 Jul 2020 14:04:44 +0000
ROA not after:            Sun 01 Jul 2040 14:04:44 +0000
asID:                     31713
IP address blocks:        41.79.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Jul  1 14:04:44 2020 GMT
            Not After : Jul  1 14:04:44 2040 GMT
        Subject: CN=5efc9800-08d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:78:b5:65:d4:1e:21:2e:33:18:fb:bb:0b:
                    88:92:12:03:71:87:a4:b1:25:a8:e8:7f:5e:af:37:
                    21:11:5b:cb:66:08:58:f6:92:76:7a:ff:be:39:b3:
                    3d:b8:fa:7e:16:c2:64:a9:a5:c7:93:b0:1d:ea:ce:
                    0f:07:83:56:59:8f:30:19:89:68:5c:b6:03:76:32:
                    a1:d9:99:f1:c2:63:c2:91:1b:5c:7e:98:28:3a:8d:
                    06:5d:54:4c:c6:1c:91:97:b9:c4:67:1e:87:0f:b5:
                    43:94:8c:69:ca:b1:7d:4f:c5:54:3a:37:67:eb:9a:
                    cf:ca:ef:60:cd:45:a7:2e:8d:5e:79:f3:a0:47:25:
                    c1:f2:c1:85:f4:00:dd:42:da:dc:97:4c:52:26:f7:
                    e1:44:79:0b:82:fd:03:4e:1e:d8:95:1c:44:92:de:
                    18:3b:39:4b:b4:77:83:9b:7c:98:cd:b9:26:d0:62:
                    48:ee:30:a7:89:2b:08:9f:ee:01:f8:70:d8:6d:1e:
                    7a:ab:1c:77:be:66:1c:76:3a:2c:1b:ed:63:98:f7:
                    e7:29:3e:e2:c3:0b:65:7f:57:ea:9c:0b:38:76:88:
                    6e:2c:cd:22:89:75:0b:0b:0e:8a:3f:7a:f7:59:4c:
                    fb:38:2a:55:bb:18:bb:4b:25:d0:aa:ba:73:b9:13:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:72:30:79:6A:09:FE:5B:C2:FE:84:93:DD:97:F6:7E:8C:95:CF:36
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/D3167F64BBA311EA84581016F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.79.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:d9:ae:ef:70:79:75:20:2e:cd:0f:d3:ab:eb:56:33:38:
         32:47:f7:0b:1b:c3:25:07:f0:c5:b9:0c:61:fb:46:50:7b:3b:
         4c:8f:5b:d3:c5:d2:b2:4a:fc:b4:76:28:4c:92:78:f3:e9:2f:
         f4:05:20:18:04:4f:46:0e:55:16:d3:ff:b2:80:e8:32:6b:36:
         55:c4:c8:dd:b6:1a:57:ac:30:99:46:17:48:92:cb:2a:0b:a6:
         68:9e:98:89:ba:5a:f7:6d:73:90:b1:83:c5:bc:27:cc:75:8f:
         d5:59:85:69:15:2f:b4:f1:ea:9d:1a:ad:8e:71:d5:98:e0:80:
         df:d0:f3:82:ac:9e:db:90:b0:09:2e:79:2e:6b:d8:c4:a0:d1:
         07:5d:d2:11:41:da:03:85:06:98:48:7b:a7:b9:64:e9:17:ed:
         f6:99:df:a2:79:7c:fc:f4:0e:38:bd:51:03:3b:83:0b:c8:3c:
         49:21:8e:d2:a3:40:43:96:8c:ca:1d:9c:ed:99:79:98:da:48:
         47:d9:2d:98:2c:a7:9f:b2:db:a4:53:6c:c2:53:e7:21:04:fd:
         dd:fb:bc:47:57:93:b2:09:1a:31:e3:21:b9:80:ff:66:a8:b0:
         a2:82:22:4b:c5:e6:71:63:ab:b6:95:96:c2:14:61:a3:39:66:
         60:54:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:32 2024 by rpki-client on console-ams.rpki-client.org