Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/01644032F38911EAA2809185F8AEA228.roa
File:                     01644032F38911EAA2809185F8AEA228.roa (raw, json)
Hash identifier:          nz6AQYm66RbbvxMHsgZamICByYZtg/zdNHLqjQTDhwo=
Subject key identifier:   2A:21:96:11:BF:BA:76:30:7B:67:CE:D3:B5:61:02:9F:ED:8A:FE:65
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0264
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/01644032F38911EAA2809185F8AEA228.roa
Signing time:             Thu 10 Sep 2020 17:13:55 +0000
ROA not before:           Thu 10 Sep 2020 17:13:49 +0000
ROA not after:            Tue 10 Sep 2030 17:13:49 +0000
asID:                     327687
IP address blocks:        196.43.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 10 17:13:49 2020 GMT
            Not After : Sep 10 17:13:49 2030 GMT
        Subject: CN=5f5a5ed3-73c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a8:2f:53:03:2c:64:37:ee:bb:1a:19:a6:e4:
                    fe:b2:bc:85:9e:09:85:51:b1:20:65:38:80:fd:56:
                    3e:c9:32:e7:e3:60:28:e6:9d:91:33:b6:c1:a0:45:
                    9e:e7:3a:4d:25:8b:67:dc:fa:cf:d9:2d:a5:33:0f:
                    b3:81:bc:21:f3:bd:23:88:c9:dc:dd:96:fa:a3:7f:
                    59:cf:87:44:70:d7:c3:85:0f:4c:49:37:82:25:6f:
                    65:1c:60:1d:cd:b9:c2:bd:ce:db:d6:5b:b0:b7:65:
                    16:5f:ff:6b:60:e0:42:39:4c:ed:9a:7c:77:9b:e1:
                    8b:46:d9:fd:45:dd:2d:64:dc:cc:2c:6c:b9:b6:be:
                    b9:25:5c:09:fe:82:47:83:bc:ca:04:53:0e:85:1e:
                    9b:fe:97:b3:d5:fe:22:db:73:e5:68:42:4c:9f:3c:
                    6f:8a:d8:30:c4:b1:ca:27:0b:47:03:ad:81:1c:ee:
                    b1:2d:fa:c6:7f:b0:ca:28:ff:97:7d:46:96:65:2f:
                    a4:37:a3:1e:00:1c:71:47:f3:df:85:aa:26:fc:31:
                    2c:c5:f9:ad:be:5b:b7:77:a9:5c:0b:73:82:7b:fa:
                    6c:51:71:00:46:23:d1:8e:2a:1e:b7:d8:08:52:e4:
                    65:7c:48:1e:f6:a9:8e:92:ce:c3:58:96:af:ba:78:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:21:96:11:BF:BA:76:30:7B:67:CE:D3:B5:61:02:9F:ED:8A:FE:65
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/01644032F38911EAA2809185F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:57:3b:a3:30:92:bc:57:5f:d9:92:44:84:88:b6:85:1b:ef:
         ce:63:87:40:df:06:08:27:90:39:dc:7b:21:96:70:71:21:1b:
         97:88:59:2c:56:21:38:28:91:9e:6d:b9:49:70:8a:f3:9d:8e:
         06:4b:10:7e:60:04:66:a6:d0:2d:a7:ad:5f:c1:a8:f2:9e:66:
         12:c2:8f:47:a8:27:43:eb:e1:9a:38:e7:dd:d4:73:a5:00:0c:
         23:31:1f:3b:18:b6:b6:f8:3b:03:ad:6a:72:0b:32:77:a5:ad:
         67:14:f6:1e:05:88:7d:b7:ae:f5:bc:7b:d1:36:f3:19:ca:e4:
         41:e1:cf:25:43:ca:4b:ee:97:a0:ab:ee:32:f5:8a:9f:b4:fd:
         c1:93:3f:32:c7:b0:72:ac:4d:5b:0a:4d:38:10:af:b8:ca:d1:
         36:7e:10:5c:88:aa:d4:ca:5a:70:cc:e2:37:20:93:9a:0f:fa:
         b3:78:2a:a7:aa:6b:76:c4:27:cf:f1:65:46:fc:37:ba:2c:c6:
         f9:4b:97:8b:49:88:11:71:70:bd:cd:31:43:63:d0:a9:a2:a3:
         94:4f:55:78:35:af:d4:04:56:b0:4a:4a:8a:da:78:50:36:87:
         85:9a:e1:f8:7d:7c:ed:9e:2f:0f:66:82:49:4a:91:e0:31:0c:
         b6:b8:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:45 2024 by rpki-client on console-fra.rpki-client.org