Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/27F2F438F51D11EA989AB428F8AEA228.roa
File:                     27F2F438F51D11EA989AB428F8AEA228.roa (raw, json)
Hash identifier:          DFEjQrAIWYa7SDPMGJD4C1vX69qYG4UGCNR2kmAxtoM=
Subject key identifier:   F7:59:37:EE:5E:CD:02:22:DB:50:37:14:0C:D2:A8:9E:18:36:A8:3B
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       027C
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/27F2F438F51D11EA989AB428F8AEA228.roa
Signing time:             Sat 12 Sep 2020 17:26:56 +0000
ROA not before:           Sat 12 Sep 2020 17:26:52 +0000
ROA not after:            Thu 12 Sep 2030 17:26:52 +0000
asID:                     327687
IP address blocks:        196.43.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 12 17:26:52 2020 GMT
            Not After : Sep 12 17:26:52 2030 GMT
        Subject: CN=5f5d04e0-b304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fb:66:7b:d3:19:5d:1d:e3:81:d0:79:5b:b6:
                    3e:f4:e6:c4:44:20:e3:40:aa:03:b3:dc:c0:4f:b0:
                    29:9e:64:b5:1a:12:0e:4e:62:3c:9e:1b:63:8e:35:
                    5f:50:98:8c:d0:bb:08:a5:e7:f5:5e:fd:75:f3:94:
                    8f:4a:8e:5c:d2:99:f4:be:82:dc:99:1c:79:2c:21:
                    fd:a3:40:f9:5b:33:21:c9:b4:b0:45:ef:b9:53:08:
                    63:53:50:37:d9:b2:46:79:51:1e:67:d1:f5:01:8b:
                    6a:43:47:17:15:37:4f:31:5d:a7:89:4f:8f:d6:e4:
                    8e:06:c9:da:72:e3:5e:d9:9c:61:f8:05:31:8c:10:
                    3a:0a:00:da:a7:1e:36:cb:8e:9c:65:3e:52:69:99:
                    ed:c1:b2:94:d6:79:51:f6:24:0e:03:9f:9c:d8:ad:
                    34:c3:99:45:24:4f:5f:56:29:7b:86:4d:ab:c4:4b:
                    3e:11:6e:3b:78:f4:a8:bd:63:fd:00:99:fc:41:34:
                    f6:60:0a:86:9e:06:1b:82:d0:24:6c:bc:94:61:7e:
                    0c:f6:97:aa:a2:fb:63:82:d0:1e:b1:9c:89:09:7b:
                    b8:db:ab:d1:9f:8b:a1:c6:91:ce:0e:6d:9e:08:91:
                    4c:2c:10:f0:bd:71:fd:76:36:e9:85:cd:00:fd:8b:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:37:EE:5E:CD:02:22:DB:50:37:14:0C:D2:A8:9E:18:36:A8:3B
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/27F2F438F51D11EA989AB428F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b1:dc:d8:c6:7e:b3:86:8b:7b:c2:66:ab:5b:c3:b8:2d:4d:
         d3:2e:e6:60:6d:c7:df:a7:8a:ed:d2:96:eb:e5:a8:9f:c6:08:
         0e:44:07:de:c0:c3:fd:28:51:28:d7:36:43:75:71:23:13:bf:
         b7:69:39:7e:ea:f7:09:4e:92:82:55:5b:8b:b7:34:e5:35:d4:
         df:8e:44:a4:e1:aa:cd:41:08:43:20:7a:b2:d6:c6:55:fb:f5:
         2d:58:69:b2:54:b1:73:83:18:57:49:31:80:93:30:bd:6b:bb:
         77:ee:bb:ea:ee:65:87:a9:a0:69:55:fc:bd:d6:99:f8:cc:c8:
         74:5e:3f:03:fa:46:9f:71:0c:f3:74:e9:0e:5b:01:61:cb:8c:
         c1:62:66:97:e3:95:a0:d5:38:00:69:31:18:1d:39:05:9d:a6:
         a2:b6:09:32:fb:71:4b:5b:f6:cc:26:58:ba:9f:ea:89:3b:81:
         fd:c6:cf:0d:54:2c:52:45:a5:25:d6:91:fa:67:24:c0:5c:d0:
         23:4e:f4:d4:ec:dc:92:4e:ac:ff:f7:17:77:74:7b:6d:0e:42:
         9a:9f:73:8f:c8:ce:d2:03:05:f1:0a:e0:5c:89:2e:62:27:aa:
         e8:13:8a:a3:7d:f7:a5:f4:16:31:6a:4c:ee:d8:06:5e:fb:4c:
         36:fb:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:45 2024 by rpki-client on console-fra.rpki-client.org