Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/212A1D50F66911EAAC3C0846F8AEA228.roa
File:                     212A1D50F66911EAAC3C0846F8AEA228.roa (raw, json)
Hash identifier:          Aks5ASspVvHxXGhc/IaJGiLRNLsSPsSluLM9EVHZHas=
Subject key identifier:   56:F6:C4:62:58:C4:1A:C5:EE:E1:FE:22:D3:A3:24:5D:4B:EF:AD:33
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       02A2
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/212A1D50F66911EAAC3C0846F8AEA228.roa
Signing time:             Mon 14 Sep 2020 09:03:18 +0000
ROA not before:           Mon 14 Sep 2020 09:03:13 +0000
ROA not after:            Sat 14 Sep 2030 09:03:13 +0000
asID:                     327687
IP address blocks:        196.43.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 14 09:03:13 2020 GMT
            Not After : Sep 14 09:03:13 2030 GMT
        Subject: CN=5f5f31d6-d7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:42:7c:75:ef:53:ea:dc:94:41:0e:95:0a:
                    aa:dc:19:b2:e9:c7:91:2d:7d:9d:33:3a:23:f4:0f:
                    90:85:29:93:a5:c5:27:d0:c9:54:0d:0c:5a:bb:6b:
                    bf:19:ec:0e:36:a3:df:67:4f:8c:81:82:d6:b5:d3:
                    2d:d0:95:4f:db:12:62:8e:04:4f:5a:62:96:99:e7:
                    1c:dc:e6:96:5b:40:4b:b7:d9:d5:ab:df:53:de:69:
                    06:d9:54:ec:fa:88:0d:87:4f:7c:82:4a:76:ba:92:
                    2b:26:4d:cf:af:dc:4b:0d:6d:25:78:c3:d2:dc:56:
                    27:1a:71:cd:5d:56:ae:d4:90:0e:c1:1b:af:92:3d:
                    1a:60:84:8e:c5:04:81:a1:99:a1:13:7c:8c:63:81:
                    14:79:0a:db:34:63:13:9c:6a:02:ad:1d:ee:0c:9c:
                    44:ae:b5:ba:32:3c:7a:c5:b3:a4:b1:84:d9:4c:2c:
                    7f:01:ba:bd:48:33:3c:2d:40:0e:d5:40:2c:04:72:
                    4c:f0:93:ac:a5:64:62:a5:f8:8c:6f:d2:f9:73:83:
                    82:b8:6e:84:19:6d:e2:1a:e1:03:1c:6b:a1:2e:29:
                    86:a8:96:92:22:55:08:2f:19:f7:3c:f3:6f:ce:48:
                    a3:8f:85:1f:fa:52:6f:bc:ad:15:49:ec:49:bb:61:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:C4:62:58:C4:1A:C5:EE:E1:FE:22:D3:A3:24:5D:4B:EF:AD:33
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/212A1D50F66911EAAC3C0846F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:3d:d4:04:43:dc:3f:3d:90:af:96:92:0b:93:9c:16:ea:c9:
         e9:c3:b6:06:83:e1:e2:dc:aa:9a:57:1d:69:de:5f:0e:76:5f:
         fc:40:d1:2a:3f:52:f5:d5:8c:70:2a:c8:7f:1f:98:36:ac:7a:
         e6:91:a4:78:dc:15:5c:9b:69:6a:6b:93:5c:e8:7e:d1:16:b9:
         20:09:8b:3c:51:65:86:92:d5:ae:df:15:54:1c:73:06:38:98:
         fb:f5:e9:94:1a:74:6e:09:9a:16:b7:9e:c6:28:fd:81:c7:80:
         61:5a:97:ea:14:59:f5:a6:ab:78:f6:55:0c:17:2e:dc:e5:ae:
         cd:f6:43:6a:97:2a:53:f2:2d:11:a1:a1:6a:16:13:94:14:05:
         ab:e3:ac:6b:4e:e9:99:7d:dd:ec:5b:18:e6:5a:21:7e:ca:84:
         f5:e1:43:20:5d:e1:5b:07:e9:5b:1f:92:26:38:3a:d7:2f:4b:
         61:16:4e:9b:77:66:8a:40:db:8e:6e:4c:07:09:01:3d:86:41:
         38:07:68:85:5e:66:3b:21:38:e6:43:b8:d8:3a:fe:e0:f7:c1:
         42:75:c1:93:89:db:7e:ea:23:94:39:b2:f9:aa:02:96:5c:de:
         55:99:58:ac:6c:40:ca:5e:34:a3:20:55:54:a6:d6:c8:f3:f2:
         82:8f:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org