Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/E558A086A95111E981E48069F8AEA228.roa
File:                     E558A086A95111E981E48069F8AEA228.roa (raw, json)
Hash identifier:          MBZdMaPZOc8kPGCwpfLOeCgHyo2GuPSxS7SV1R8ZrgE=
Subject key identifier:   71:A5:2C:D5:1F:27:6B:E2:55:6E:39:42:C3:9B:A4:6D:F2:34:68:B2
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       37
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/E558A086A95111E981E48069F8AEA228.roa
Signing time:             Thu 18 Jul 2019 11:48:02 +0000
ROA not before:           Thu 18 Jul 2019 11:47:57 +0000
ROA not after:            Wed 18 Jul 2029 11:47:57 +0000
asID:                     0
IP address blocks:        196.60.50.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
        Validity
            Not Before: Jul 18 11:47:57 2019 GMT
            Not After : Jul 18 11:47:57 2029 GMT
        Subject: CN=5d305c72-13d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:f7:90:bc:65:78:0c:f5:7f:fe:09:8e:d3:
                    da:f1:61:f8:78:42:aa:db:0e:79:e8:4b:a7:88:a3:
                    3c:a4:4f:b0:22:96:40:0d:f8:91:03:6b:7e:23:13:
                    24:dd:73:a2:e9:f4:bf:b5:51:0b:f4:73:9a:5b:a6:
                    65:26:25:fa:1f:95:56:7f:c1:c3:69:70:8a:23:f5:
                    e2:48:8f:70:22:bd:04:51:60:6d:1b:3d:f8:57:c8:
                    d0:c3:1a:96:e6:8c:1d:03:74:08:d4:22:8d:be:c5:
                    90:11:db:7f:ff:76:60:1a:e5:83:0f:d0:f9:10:f3:
                    e7:d8:0e:1a:98:82:04:20:54:10:59:a3:b0:3c:f3:
                    5d:db:86:95:95:4c:c6:e9:f4:68:1c:2b:b3:ae:34:
                    c7:36:8d:f0:23:05:1e:dc:4a:90:13:d7:17:4f:04:
                    fe:8e:96:4e:18:25:63:fa:b0:d8:10:22:01:c0:1d:
                    30:ad:73:7e:f2:62:ee:b0:0c:4d:3f:f5:23:f4:44:
                    b4:1e:49:12:d0:a4:6e:83:58:71:ae:cb:0c:3d:0a:
                    13:a6:6c:be:03:ed:d2:de:29:db:4c:93:b3:25:1a:
                    fe:1d:ea:ef:d2:85:a5:1e:51:25:6d:7f:49:89:1a:
                    c0:3d:00:01:ea:d4:c4:1b:44:0a:41:cf:9e:2b:63:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A5:2C:D5:1F:27:6B:E2:55:6E:39:42:C3:9B:A4:6D:F2:34:68:B2
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/E558A086A95111E981E48069F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:62:6b:6c:f6:e5:b0:95:95:11:43:63:d2:71:5d:9b:37:16:
         83:30:f3:55:0b:84:42:e2:bd:ed:a6:c1:96:bc:5f:7d:1b:86:
         1d:d3:d5:d7:29:da:69:95:61:77:ef:22:66:73:1c:99:4c:cd:
         60:7d:17:c4:5e:9b:09:80:c9:fd:a0:ab:77:0a:ef:90:47:35:
         7b:f3:1e:e6:33:75:62:96:d3:04:ad:78:4f:cc:5b:67:53:2e:
         33:e5:78:e3:ed:f1:5c:00:9b:5c:82:8c:e6:36:d5:7a:f7:31:
         ed:03:9c:5f:db:d5:65:f2:40:98:b0:2c:2e:d6:2a:37:b5:b5:
         6b:04:7e:6e:65:73:3c:cd:89:85:de:4f:cb:6c:63:0d:fb:04:
         e1:ff:bb:86:bb:6e:fa:ad:fb:7f:68:a9:ba:9c:4a:3f:2d:81:
         b5:b5:6a:70:a0:85:66:05:dd:33:dc:d5:d3:a6:8f:c7:9b:d4:
         04:13:d7:93:b4:d8:3d:a0:7f:ee:62:c0:a6:e1:89:b0:33:0c:
         c0:34:a3:00:14:99:49:78:e8:47:5b:ec:16:11:21:55:59:0a:
         0c:d6:c3:ec:2c:c9:49:23:22:34:66:00:cd:af:ab:a7:59:e9:
         7a:9a:ed:2c:8b:45:e0:a0:10:68:aa:38:27:6b:96:4b:6a:7f:
         52:e4:2c:75
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
RUE2QkFGMTEwLwYDVQQFEyg5M0MyQzk5QUYwRUM0RDFBNDY0MzQ5N0Y1RjhDQkRD
N0VDNDU3NDhGMB4XDTE5MDcxODExNDc1N1oXDTI5MDcxODExNDc1N1owGDEWMBQG
A1UEAxMNNWQzMDVjNzItMTNkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMB295C8ZXgM9X/+CY7T2vFh+HhCqtsOeehLp4ijPKRPsCKWQA34kQNrfiMT
JN1zoun0v7VRC/RzmlumZSYl+h+VVn/Bw2lwiiP14kiPcCK9BFFgbRs9+FfI0MMa
luaMHQN0CNQijb7FkBHbf/92YBrlgw/Q+RDz59gOGpiCBCBUEFmjsDzzXduGlZVM
xun0aBwrs640xzaN8CMFHtxKkBPXF08E/o6WThglY/qw2BAiAcAdMK1zfvJi7rAM
TT/1I/REtB5JEtCkboNYca7LDD0KE6ZsvgPt0t4p20yTsyUa/h3q79KFpR5RJW1/
SYkawD0AAerUxBtECkHPnitjdRcCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBRxpSzV
Hydr4lVuOULDm6Rt8jRosjAfBgNVHSMEGDAWgBSTwsma8OxNGkZDSX9fjL3H7EV0
jzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhBRUEyMjgvazhMSm12
RHNUUnBHUTBsX1g0eTl4LXhGZEk4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvazhMSm12RHNUUnBHUTBsX1g0eTl4LXhGZEk4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhB
RUEyMjgvRTU1OEEwODZBOTUxMTFFOTgxRTQ4MDY5RjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxDwyMA0GCSqGSIb3DQEBCwUAA4IBAQAq
Ymts9uWwlZURQ2PScV2bNxaDMPNVC4RC4r3tpsGWvF99G4Yd09XXKdpplWF37yJm
cxyZTM1gfRfEXpsJgMn9oKt3Cu+QRzV78x7mM3ViltMErXhPzFtnUy4z5Xjj7fFc
AJtcgozmNtV69zHtA5xf29Vl8kCYsCwu1io3tbVrBH5uZXM8zYmF3k/LbGMN+wTh
/7uGu276rft/aKm6nEo/LYG1tWpwoIVmBd0z3NXTpo/Hm9QEE9eTtNg9oH/uYsCm
4YmwMwzANKMAFJlJeOhHW+wWESFVWQoM1sPsLMlJIyI0ZgDNr6unWel6mu0si0Xg
oBBoqjgna5ZLan9S5Cx1
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:17 2024 by rpki-client on console-ams.rpki-client.org