Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/1CCAED5EF38311EA81388E7FF8AEA228.roa
File:                     1CCAED5EF38311EA81388E7FF8AEA228.roa (raw, json)
Hash identifier:          RIQQzlET0KCWk7FUQhhY35sZWThDKHoCKvgRx/3jw0E=
Subject key identifier:   F4:6E:D7:2F:8D:B5:76:DE:BD:40:A8:F7:BD:EE:37:96:E1:1F:CC:DF
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       025B
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/1CCAED5EF38311EA81388E7FF8AEA228.roa
Signing time:             Thu 10 Sep 2020 16:31:44 +0000
ROA not before:           Thu 10 Sep 2020 16:31:38 +0000
ROA not after:            Tue 10 Sep 2030 16:31:38 +0000
asID:                     327687
IP address blocks:        196.43.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 10 16:31:38 2020 GMT
            Not After : Sep 10 16:31:38 2030 GMT
        Subject: CN=5f5a54f0-e9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:60:4e:ac:30:01:1c:d0:d8:aa:28:62:52:
                    3e:a1:ea:c1:f4:d7:e4:67:9e:d5:dd:33:8f:65:69:
                    ae:11:08:fd:24:50:45:b5:01:7c:9b:29:a4:41:fe:
                    50:2c:46:6a:a2:2b:ca:6f:0d:e5:a2:69:6f:54:20:
                    07:67:d0:88:0d:b0:cf:a5:e5:6d:d1:33:25:eb:49:
                    6c:ae:4c:d1:0a:1e:52:a5:bc:2f:f1:6d:ec:84:23:
                    68:b4:e3:cc:a2:7d:a7:fa:66:70:f7:f9:d8:3d:eb:
                    18:0c:f5:39:94:f9:8e:a0:3f:f6:a5:8e:a2:ba:cd:
                    3a:12:f1:dc:8e:e5:ef:0d:fc:15:cb:72:4f:c6:14:
                    55:00:bd:48:1c:72:b5:f6:f2:84:f7:01:53:01:5a:
                    22:3a:e3:52:c0:a2:58:b0:fe:6f:cf:80:28:68:f0:
                    ff:3b:29:d8:84:97:a4:cf:3f:57:1f:98:08:15:8c:
                    c2:1d:34:a5:00:ee:eb:cd:e6:62:60:a5:7b:92:99:
                    e3:cd:00:23:f2:13:be:55:0c:49:7a:b6:2e:89:e5:
                    32:5f:ca:25:7e:6d:8e:0d:81:d3:b1:5e:14:2c:8b:
                    c4:0f:0a:4c:e5:66:0a:55:49:9c:e0:d6:66:8a:dd:
                    3c:a0:45:70:ae:be:a5:24:5b:dc:25:15:5b:54:4d:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:D7:2F:8D:B5:76:DE:BD:40:A8:F7:BD:EE:37:96:E1:1F:CC:DF
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/1CCAED5EF38311EA81388E7FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:78:49:5e:81:cd:f3:9c:6b:ab:82:a4:52:9b:c9:5f:40:
         40:48:ae:2c:f5:d6:98:b2:69:b2:69:5a:dc:10:5c:3a:1e:f4:
         f6:27:81:86:0f:67:3e:2e:15:f8:be:f1:77:09:22:6b:bb:cf:
         79:62:6e:4e:9e:57:08:b6:76:60:d1:01:56:bb:ca:ab:fe:b5:
         2c:a0:f3:f5:bf:1a:cb:66:e5:39:22:17:2d:09:75:d7:9a:dc:
         27:ec:b2:ae:19:09:04:46:5e:cd:ce:57:b1:6a:90:ef:3e:0e:
         ed:2f:2a:c9:f1:5a:58:10:7f:52:d3:f8:66:aa:9e:80:22:2e:
         ce:f8:74:5e:27:d9:0b:2b:7f:35:4a:51:bb:97:01:48:bb:7f:
         17:bb:b8:1e:d9:fe:dd:5b:c3:48:ea:98:97:eb:b5:09:f8:6e:
         ae:3d:fe:b4:3a:26:d8:50:2a:4e:ac:e3:45:69:59:33:13:31:
         d1:ad:bf:6e:e6:80:6b:a3:1c:c4:43:9e:1a:cc:b1:10:1e:e8:
         e2:76:5a:6a:44:11:55:e6:3a:53:37:6b:00:39:88:d4:44:04:
         a2:ec:7c:af:90:78:bd:81:58:35:a8:51:6e:4f:59:93:ea:b2:
         89:73:be:25:8b:fb:0f:42:2d:ca:17:d4:1c:c3:9e:5b:23:17:
         21:b4:e7:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAlswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MTAxNjMxMzhaFw0zMDA5MTAxNjMxMzhaMBgxFjAU
BgNVBAMTDTVmNWE1NGYwLWU5YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCq6WBOrDABHNDYqihiUj6h6sH01+RnntXdM49laa4RCP0kUEW1AXybKaRB
/lAsRmqiK8pvDeWiaW9UIAdn0IgNsM+l5W3RMyXrSWyuTNEKHlKlvC/xbeyEI2i0
48yifaf6ZnD3+dg96xgM9TmU+Y6gP/aljqK6zToS8dyO5e8N/BXLck/GFFUAvUgc
crX28oT3AVMBWiI641LAoliw/m/PgCho8P87KdiEl6TPP1cfmAgVjMIdNKUA7uvN
5mJgpXuSmePNACPyE75VDEl6ti6J5TJfyiV+bY4NgdOxXhQsi8QPCkzlZgpVSZzg
1maK3TygRXCuvqUkW9wlFVtUTdhVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU9G7X
L421dt69QKj3ve43luEfzN8wHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4LzFDQ0FFRDVFRjM4MzExRUE4MTM4OEU3RkY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEK5YwDQYJKoZIhvcNAQEL
BQADggEBAEjweElegc3znGurgqRSm8lfQEBIriz11piyabJpWtwQXDoe9PYngYYP
Zz4uFfi+8XcJImu7z3libk6eVwi2dmDRAVa7yqv+tSyg8/W/Gstm5TkiFy0Jddea
3Cfssq4ZCQRGXs3OV7FqkO8+Du0vKsnxWlgQf1LT+GaqnoAiLs74dF4n2QsrfzVK
UbuXAUi7fxe7uB7Z/t1bw0jqmJfrtQn4bq49/rQ6JthQKk6s40VpWTMTMdGtv27m
gGujHMRDnhrMsRAe6OJ2WmpEEVXmOlM3awA5iNREBKLsfK+QeL2BWDWoUW5PWZPq
solzviWL+w9CLcoX1BzDnlsjFyG059k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:51 2024 by rpki-client on console-fra.rpki-client.org