Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/315816DECF5F11ECA89077C9F1222468.roa
File:                     315816DECF5F11ECA89077C9F1222468.roa (raw, json)
Hash identifier:          nXuxmOxMY30f7U13vd8vjgc0lhwJby8Cd+gymuJClmU=
Subject key identifier:   C3:6B:3A:DF:C8:DB:F0:92:E1:15:9D:4C:59:BD:80:7D:B9:51:3B:00
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       026F
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/315816DECF5F11ECA89077C9F1222468.roa
Signing time:             Mon 09 May 2022 06:13:50 +0000
ROA not before:           Mon 09 May 2022 06:13:46 +0000
ROA not after:            Sun 09 May 2032 06:13:46 +0000
asID:                     15706
IP address blocks:        212.0.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Jun 2024 00:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: May  9 06:13:46 2022 GMT
            Not After : May  9 06:13:46 2032 GMT
        Subject: CN=6278b11e-bfff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:3d:4e:60:f5:0d:29:18:57:2d:f8:c8:7d:
                    eb:57:5b:42:d2:16:4e:62:46:43:08:62:f1:58:80:
                    62:40:27:e1:fb:18:bd:dc:a7:57:cc:4e:40:5d:7f:
                    c9:06:1d:e1:af:0c:7c:ec:3d:e2:52:63:a9:23:b2:
                    01:68:fc:6e:5d:ef:dd:cc:94:79:d0:47:5e:c8:1f:
                    ac:d2:00:33:c9:74:fb:f0:a7:fa:92:8a:00:57:30:
                    47:e9:a6:8a:61:73:cc:5c:ee:e3:a3:b6:f3:f5:a7:
                    62:59:4e:d8:9d:f5:fb:30:9f:c7:fa:14:a9:c4:6e:
                    b0:27:84:3d:b6:e5:f3:19:94:68:52:8f:59:f0:64:
                    5f:06:22:35:74:6b:1e:d9:1f:60:33:14:86:36:1d:
                    88:82:fd:6e:08:65:2b:24:17:55:07:23:10:d9:1d:
                    d4:b9:21:0d:0c:8c:c1:7f:56:80:f2:05:f8:20:90:
                    eb:c3:eb:1a:fd:79:13:f6:c3:73:16:c6:1f:70:08:
                    ec:8b:8b:d6:8a:1d:b9:f2:92:26:16:64:18:fd:62:
                    17:4b:f9:e7:fd:23:b2:e1:26:5a:f9:16:e0:71:70:
                    44:fc:d0:f6:b2:f2:9a:3c:59:3a:73:b2:e0:97:7c:
                    7e:7a:04:7b:29:70:5e:68:5a:4c:58:8f:f5:82:df:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:3A:DF:C8:DB:F0:92:E1:15:9D:4C:59:BD:80:7D:B9:51:3B:00
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/315816DECF5F11ECA89077C9F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.0.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:11:21:af:eb:97:5e:4c:31:79:55:7f:6e:c7:43:8e:42:48:
         2d:3e:24:f7:6e:94:83:f7:a4:83:98:61:5b:c2:ae:75:72:c6:
         00:58:cc:44:a8:b1:49:08:a1:66:24:78:b3:1f:56:ae:ad:4e:
         e6:34:2b:f8:70:8c:29:55:5b:12:72:c0:2d:f3:59:e7:7c:e9:
         47:8b:52:75:1d:4b:bc:d6:b1:ac:cd:33:ac:4d:73:ee:99:54:
         7a:06:c6:1e:8e:5a:b3:3e:32:a3:0f:e2:97:ba:3d:31:0e:ef:
         c4:91:c0:eb:7b:0c:1a:6e:a3:0f:e1:63:61:01:25:f4:de:d1:
         7e:80:6f:1b:cf:95:db:7a:90:8f:5d:de:4d:ca:e6:13:0c:65:
         a7:8a:9e:45:c6:fe:79:53:7c:3f:b3:72:e9:60:d7:e2:86:56:
         54:01:55:f6:8b:ab:27:20:5e:48:7b:d8:92:31:87:42:5a:47:
         76:bf:1d:73:5c:da:81:07:72:d4:82:83:1f:85:cb:fa:48:27:
         46:f8:9c:49:3d:b1:9b:b8:d4:01:db:70:06:6f:20:33:99:a5:
         dd:60:47:63:20:32:c5:47:c4:94:d0:04:0a:07:15:bf:51:fd:
         70:ff:6d:8e:29:4e:68:cf:b2:ed:70:61:d8:f5:e3:f7:9e:43:
         5a:03:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:50:41 2024 by rpki-client on console-fra.rpki-client.org