Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/7017818A912B11EFA858BC80762E951A.roa
File:                     7017818A912B11EFA858BC80762E951A.roa (raw, json)
Hash identifier:          8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=
Subject key identifier:   45:CF:F2:8E:83:63:D2:82:9C:7D:6C:34:5A:5C:73:CB:2D:7A:AA:94
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       AC
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/7017818A912B11EFA858BC80762E951A.roa
Signing time:             Wed 23 Oct 2024 10:42:02 +0000
ROA not before:           Wed 23 Oct 2024 10:41:58 +0000
ROA not after:            Fri 23 Oct 2026 10:41:58 +0000
asID:                     37381
IP address blocks:        197.159.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Oct 23 10:41:58 2024 GMT
            Not After : Oct 23 10:41:58 2026 GMT
        Subject: CN=6718d2fa-2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:f3:ac:9d:63:4f:fb:5b:0d:8e:f1:51:ae:
                    74:8a:81:93:13:8a:f6:82:3c:fa:49:42:d1:f7:b1:
                    48:8c:dc:b3:b5:65:0c:9c:1f:72:61:49:34:ea:f9:
                    c1:c0:5a:67:fc:ff:63:dc:65:9d:a6:25:8c:f5:40:
                    67:3f:48:f9:b4:c4:b3:4e:08:fb:d5:69:17:a4:de:
                    29:24:5b:42:c8:fa:f4:6d:04:f7:99:f1:f2:93:78:
                    33:bc:b0:93:6c:12:18:67:e3:97:28:5a:05:06:c8:
                    a3:83:a4:75:9e:06:ae:59:35:6f:a2:76:1e:70:96:
                    8a:04:ca:e6:2d:56:a8:de:7b:9e:04:37:5b:dc:f5:
                    b3:52:8c:5b:71:01:7c:8d:2f:05:9e:d9:5e:47:ab:
                    c1:80:3a:91:f2:b9:1b:d6:ca:5d:d7:45:3d:91:f1:
                    f3:6b:29:4c:f8:d0:7b:fc:99:3c:55:c4:84:6f:95:
                    35:d9:2a:eb:0a:63:f1:63:f8:28:8d:8c:8e:fc:95:
                    0c:e5:85:95:23:9a:fd:5b:2d:df:81:a1:1e:b1:80:
                    34:11:96:d1:1c:69:d4:de:ba:b7:43:12:08:c0:46:
                    f0:87:42:d8:1b:c8:73:9e:72:28:51:6a:61:d1:8c:
                    0d:e3:63:03:de:52:53:80:4e:c4:0a:a9:19:38:1c:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:F2:8E:83:63:D2:82:9C:7D:6C:34:5A:5C:73:CB:2D:7A:AA:94
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/7017818A912B11EFA858BC80762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.159.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ef:48:26:5f:5a:07:7e:49:74:fe:e6:5c:d2:3e:37:f6:af:
         4c:95:4c:0b:b4:d5:23:c0:60:69:6a:5f:fd:d8:49:c8:42:64:
         45:f9:6c:72:39:61:f2:51:78:e6:bd:ee:0f:76:d7:30:28:50:
         a0:69:94:44:90:c2:25:0e:fa:c4:13:c3:c8:9e:50:85:5b:2c:
         5f:b8:62:3c:98:65:e5:2d:5f:55:6f:35:b8:2e:84:28:45:a6:
         be:0f:49:5c:11:d2:da:b3:fc:58:57:62:81:b6:fe:41:ae:f5:
         38:c1:f6:5d:f4:2f:2f:71:85:0f:5f:a8:42:74:88:90:c3:4a:
         16:87:31:90:74:81:7d:28:98:35:8f:50:0f:bc:ac:94:46:95:
         21:c6:de:e0:22:0f:7a:3a:9c:a9:8c:1c:88:3e:ed:b5:f3:cf:
         35:30:4e:b5:1c:23:55:36:8d:7f:63:9c:fc:ad:40:8d:2b:73:
         d7:26:9e:69:e7:4e:d6:5e:11:44:c5:f4:f4:f5:38:c8:40:c0:
         f2:de:85:42:00:b0:8b:d3:02:a4:fd:93:02:f5:60:a5:75:9e:
         27:bc:e8:1f:42:96:ee:63:e9:bf:85:a3:0b:a8:d8:61:af:f7:
         58:49:5e:05:a7:b2:ed:50:b9:7b:cc:07:46:73:20:15:2c:48:
         8b:c1:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:52 2024 by rpki-client on console-fra.rpki-client.org