Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/C7641772A95111E996327569F8AEA228.roa
File:                     C7641772A95111E996327569F8AEA228.roa (raw, json)
Hash identifier:          zc2sHBHJr4VAxxPP7oCatGt+nqgAgifPd0TVAOYCceY=
Subject key identifier:   1A:01:66:52:1B:A4:5E:24:97:5B:B5:23:2D:74:4F:CF:6A:67:8A:3F
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       35
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/C7641772A95111E996327569F8AEA228.roa
Signing time:             Thu 18 Jul 2019 11:47:12 +0000
ROA not before:           Thu 18 Jul 2019 11:47:07 +0000
ROA not after:            Wed 18 Jul 2029 11:47:07 +0000
asID:                     0
IP address blocks:        196.60.48.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Apr 2024 00:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Validity
            Not Before: Jul 18 11:47:07 2019 GMT
            Not After : Jul 18 11:47:07 2029 GMT
        Subject: CN=5d305c3f-0c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:40:b6:b1:3f:67:5c:5d:e9:82:09:ff:c5:
                    4e:c6:ff:98:25:0d:78:74:5a:91:49:7e:72:ff:d0:
                    ca:72:f1:44:3c:30:27:c3:c8:2a:66:2e:2e:70:dd:
                    95:8e:c0:0a:11:07:53:3f:0c:41:86:16:a3:28:1f:
                    9f:21:2a:0e:4b:ff:fc:50:50:d5:ba:05:14:4e:70:
                    39:f5:98:77:06:01:07:38:68:c0:4a:e3:d2:ab:de:
                    53:48:14:5b:79:16:40:fd:33:22:07:14:bf:fd:8f:
                    ad:ad:ca:ca:17:5f:bf:47:88:6c:55:a4:d9:7f:9c:
                    12:f9:9d:0b:33:4b:c3:49:95:63:90:b1:41:ec:15:
                    6c:87:17:ff:4f:59:08:7f:98:9d:ea:25:fb:e2:ff:
                    b1:1a:96:51:9c:4f:25:32:0a:29:c8:ca:70:69:e2:
                    a0:b4:06:86:8f:2a:75:ca:d0:b4:41:14:da:fb:0c:
                    23:bc:83:70:d4:83:58:fc:3d:47:a0:24:92:69:5c:
                    a5:e9:05:26:74:ef:6c:4e:54:d0:ce:ad:b9:65:8d:
                    4f:9f:6c:c2:d9:db:c3:df:08:fc:a6:2a:e4:fd:5e:
                    7d:c3:b9:9d:76:7d:c8:a1:1b:4e:c9:8e:df:0a:5b:
                    ec:69:6d:c9:b8:ca:01:3f:06:07:d9:91:48:bc:d0:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:01:66:52:1B:A4:5E:24:97:5B:B5:23:2D:74:4F:CF:6A:67:8A:3F
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/C7641772A95111E996327569F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3c:c0:03:f1:4c:6e:11:5d:ec:94:5d:47:a0:25:17:f6:07:
         02:b6:cb:5e:41:fa:9a:55:1b:73:0d:d1:62:0c:05:be:15:3a:
         03:44:df:b9:75:eb:99:b8:37:15:f6:eb:5b:0e:e7:16:52:c2:
         0d:5f:4c:5a:42:f3:57:83:88:81:4e:e2:49:c5:ac:58:0f:bd:
         d2:54:03:b3:82:ec:54:54:ab:ac:de:00:29:09:6e:40:8f:1e:
         fb:c3:05:6c:9d:a5:41:1f:d5:8d:03:d2:75:44:f1:b2:03:96:
         1c:9f:82:2d:df:47:de:92:22:81:3f:4b:24:30:93:ec:71:18:
         8b:ec:cb:5b:83:d9:bd:30:69:f7:17:07:b8:18:04:07:26:1c:
         6e:99:4c:e4:b5:5c:b4:8c:2e:df:b4:20:ed:b3:6c:3c:de:bd:
         59:ce:b4:9c:92:dc:b2:e8:27:22:96:54:9f:e6:f6:0c:61:44:
         ce:8e:cb:9d:da:28:c8:bd:50:61:23:a4:1e:fd:13:29:10:84:
         7a:48:f5:72:0d:36:c3:d7:64:3a:c6:19:46:09:94:7e:a1:c2:
         d8:a3:ec:2c:5a:4f:d6:c0:26:5d:fc:51:fa:3b:78:c8:50:9a:
         b7:84:22:f7:55:04:94:87:08:62:76:9c:ab:11:d7:8e:27:66:
         ad:68:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:45:07 2024 by rpki-client on console-ams.rpki-client.org