Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/08DB71BC53EA11EF98E06585762E951A.roa
File:                     08DB71BC53EA11EF98E06585762E951A.roa (raw, json)
Hash identifier:          9y2Xf3yrmOHpN9GrNuG3T4PeZPIw6BfSrZ7oAs2gMlE=
Subject key identifier:   B6:27:1C:07:66:7D:FD:51:A8:15:9F:5B:B3:4E:E9:C3:1F:E2:51:19
Certificate issuer:       /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial:       02C6
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/08DB71BC53EA11EF98E06585762E951A.roa
Signing time:             Tue 06 Aug 2024 11:50:11 +0000
ROA not before:           Tue 06 Aug 2024 11:50:07 +0000
ROA not after:            Thu 31 Aug 2034 11:50:07 +0000
asID:                     328977
IP address blocks:        102.208.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
        Validity
            Not Before: Aug  6 11:50:07 2024 GMT
            Not After : Aug 31 11:50:07 2034 GMT
        Subject: CN=66b20df3-8cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:2c:74:e8:87:b6:94:8a:0d:9e:53:35:58:
                    44:23:d8:fd:b7:1c:12:05:79:d6:6d:7d:09:7e:dc:
                    0f:04:47:54:cf:12:42:20:be:05:5c:9b:40:b1:fe:
                    5c:17:b1:7a:2b:9c:b9:09:8a:51:7e:c6:e9:d0:e9:
                    49:3c:ac:e2:f7:1b:8b:04:27:37:c5:72:ef:f7:e7:
                    ee:4e:c8:15:70:51:10:c6:88:58:33:5c:54:97:76:
                    6e:12:96:a2:63:ff:9f:70:ca:c7:24:11:c7:cc:76:
                    bf:03:1f:2a:bb:46:29:ce:98:d2:3a:cd:db:bf:df:
                    41:30:15:11:56:b5:85:de:ed:25:de:f9:c4:88:64:
                    bd:18:76:fd:b4:26:3b:be:08:17:93:9e:7d:ec:52:
                    7b:49:37:9b:6a:2b:5e:9f:61:a5:0a:ac:a0:4d:e0:
                    4f:74:07:90:8a:4d:0a:f6:c6:d6:34:52:68:08:19:
                    05:df:54:cf:71:3f:1b:49:8a:fc:59:eb:0b:10:5e:
                    8d:df:df:d1:b5:f3:27:21:54:e7:3c:bb:3a:11:46:
                    da:37:d6:26:9d:8c:26:b3:21:a5:b0:97:53:9a:ae:
                    b2:e3:6b:c1:3a:02:e4:c4:5d:54:61:db:e6:fe:9a:
                    e5:4f:a8:39:16:35:fe:09:ac:11:2c:72:3e:3a:95:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:27:1C:07:66:7D:FD:51:A8:15:9F:5B:B3:4E:E9:C3:1F:E2:51:19
            X509v3 Authority Key Identifier:
                keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/08DB71BC53EA11EF98E06585762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:91:16:e9:f2:e1:1c:24:1a:7f:45:90:c7:43:95:ed:0b:60:
         9d:03:01:d3:c1:e9:07:33:c2:09:c1:85:69:d2:47:17:3c:dd:
         b6:30:95:98:3c:59:60:04:d7:df:0f:36:91:71:1c:fc:dd:f7:
         30:7a:b1:26:bc:d8:0d:4f:17:f1:14:73:d4:5d:13:81:a8:7b:
         4e:bb:a7:74:f6:f8:5e:b0:3e:6a:34:23:38:40:10:e3:be:46:
         c0:2e:0c:c1:14:a2:3b:72:a3:d6:f9:df:4a:d0:1f:66:ca:a0:
         4a:b6:af:5c:20:5e:f0:4c:76:e8:1e:1d:73:af:90:19:19:9c:
         10:97:0a:fa:af:49:82:0d:2c:09:6a:65:14:e8:e1:29:96:29:
         8f:1a:02:e6:af:3a:e1:9e:d4:2d:6e:75:6c:68:4b:d6:f3:fb:
         fc:5e:71:60:91:7e:c9:2f:8e:11:1c:02:f2:1b:b6:e2:6c:63:
         c1:a7:95:67:89:5b:1d:d5:24:59:8a:a5:26:1f:89:72:32:52:
         72:a5:00:ba:55:0d:d4:2b:00:c3:42:3c:eb:16:f8:d4:30:3c:
         3f:0b:a1:97:ca:40:b6:e4:84:39:20:7b:36:1f:8e:48:65:df:
         b7:4c:03:86:d2:be:5d:42:06:97:3c:9c:c4:94:23:23:03:a9:
         c6:76:68:18
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw
MUVDNUE4MDdGODAeFw0yNDA4MDYxMTUwMDdaFw0zNDA4MzExMTUwMDdaMBgxFjAU
BgNVBAMTDTY2YjIwZGYzLThjYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1uix06Ie2lIoNnlM1WEQj2P23HBIFedZtfQl+3A8ER1TPEkIgvgVcm0Cx
/lwXsXornLkJilF+xunQ6Uk8rOL3G4sEJzfFcu/35+5OyBVwURDGiFgzXFSXdm4S
lqJj/59wysckEcfMdr8DHyq7RinOmNI6zdu/30EwFRFWtYXe7SXe+cSIZL0Ydv20
Jju+CBeTnn3sUntJN5tqK16fYaUKrKBN4E90B5CKTQr2xtY0UmgIGQXfVM9xPxtJ
ivxZ6wsQXo3f39G18ychVOc8uzoRRto31iadjCazIaWwl1OarrLja8E6AuTEXVRh
2+b+muVPqDkWNf4JrBEscj46le4VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUticc
B2Z9/VGoFZ9bs07pwx/iURkwHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo
B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP
MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0Yx
MjIyNDY4LzA4REI3MUJDNTNFQTExRUY5OEUwNjU4NTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0DwwDQYJKoZIhvcNAQEL
BQADggEBAHSRFuny4RwkGn9FkMdDle0LYJ0DAdPB6QczwgnBhWnSRxc83bYwlZg8
WWAE198PNpFxHPzd9zB6sSa82A1PF/EUc9RdE4Goe067p3T2+F6wPmo0IzhAEOO+
RsAuDMEUojtyo9b530rQH2bKoEq2r1wgXvBMdugeHXOvkBkZnBCXCvqvSYINLAlq
ZRTo4SmWKY8aAuavOuGe1C1udWxoS9bz+/xecWCRfskvjhEcAvIbtuJsY8GnlWeJ
Wx3VJFmKpSYfiXIyUnKlALpVDdQrAMNCPOsW+NQwPD8LoZfKQLbkhDkgezYfjkhl
37dMA4bSvl1CBpc8nMSUIyMDqcZ2aBg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:34 2024 by rpki-client on console-ams.rpki-client.org