Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/53F2350EF66111EAAC0BF03DF8AEA228.roa
File:                     53F2350EF66111EAAC0BF03DF8AEA228.roa (raw, json)
Hash identifier:          lebmP/iOAroATMc8X8mAHSe67Ph6j/Zu5ePBNKykQRo=
Subject key identifier:   B8:57:58:6F:F4:69:60:12:71:07:4C:DB:C8:E9:88:92:B9:68:B9:8A
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0286
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/53F2350EF66111EAAC0BF03DF8AEA228.roa
Signing time:             Mon 14 Sep 2020 08:07:27 +0000
ROA not before:           Mon 14 Sep 2020 08:07:20 +0000
ROA not after:            Sat 14 Sep 2030 08:07:20 +0000
asID:                     327687
IP address blocks:        196.43.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 14 08:07:20 2020 GMT
            Not After : Sep 14 08:07:20 2030 GMT
        Subject: CN=5f5f24bf-7570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:22:07:e2:d9:f8:9d:99:bf:a8:f9:9e:bb:
                    8c:c4:f9:f9:d7:38:10:28:11:8e:5c:d4:50:88:6b:
                    f8:6c:70:2e:79:d0:54:fb:ad:bb:2f:19:86:58:ea:
                    9f:68:2b:61:ac:5e:b5:d5:7b:65:42:d8:26:1e:7d:
                    ca:69:a6:05:c5:55:75:3a:28:1f:31:60:38:92:94:
                    09:c2:1e:19:7d:8c:a6:be:72:4f:64:2c:7c:7b:93:
                    9d:83:0e:56:ea:63:10:37:8e:70:31:76:56:09:cb:
                    0d:4a:bd:7b:16:c3:ef:5e:31:6e:67:b3:a5:05:b6:
                    91:99:fa:a5:42:69:21:c9:71:f2:12:74:cd:34:c5:
                    d7:fd:36:3b:99:fb:85:60:1f:9a:e0:a9:e5:8e:3c:
                    8b:50:36:36:a3:4d:33:26:e7:0d:a3:7e:dd:7e:50:
                    7a:74:bb:5d:c7:e7:58:f4:3f:de:c4:ff:e6:c0:6b:
                    84:46:0b:db:1f:27:ab:64:b1:07:e2:5c:2e:3a:b0:
                    50:e3:c3:21:de:59:d7:25:c1:44:5f:f5:8b:2d:70:
                    de:ed:ea:52:59:6a:cb:af:9e:d8:86:22:64:5e:1e:
                    39:53:ac:0f:5d:c8:c2:5c:2d:e3:97:41:f4:cb:8a:
                    dd:26:c6:b0:df:03:4e:3e:dd:de:df:b5:05:7d:b7:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:58:6F:F4:69:60:12:71:07:4C:DB:C8:E9:88:92:B9:68:B9:8A
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/53F2350EF66111EAAC0BF03DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:62:c8:8a:ca:12:07:fd:30:df:02:09:7d:e1:7a:eb:83:55:
         bd:9f:cc:5d:72:60:4a:c4:0a:23:c5:d4:5c:92:b6:d7:99:c7:
         97:a5:96:57:d5:40:1f:99:3d:d0:8c:45:54:5a:af:b9:ed:ff:
         e8:3d:2a:4e:ed:b2:83:0a:88:e3:66:d9:d0:34:7e:e4:cf:81:
         be:b0:c5:7f:16:f1:48:55:31:45:5a:3a:0d:75:da:70:6c:8c:
         84:db:70:75:19:74:15:72:0a:fe:96:fc:56:72:c7:51:3e:a9:
         66:38:a4:3d:a9:f3:50:ba:32:2e:ca:b0:e6:d9:ff:25:47:ea:
         76:2a:8a:d6:28:fd:d2:a4:22:19:64:1e:26:f9:0e:4d:29:c4:
         9e:41:b2:f4:fc:f2:1d:d7:5c:61:bd:50:c4:ff:d3:44:bd:df:
         17:4c:c5:e9:85:bb:0e:73:7d:e9:59:42:e3:f9:5d:e4:78:9c:
         f5:7c:e5:73:ef:0d:6c:69:02:7f:ea:73:a4:51:72:c2:27:a8:
         b5:61:e6:fb:70:f9:78:ca:55:96:35:88:70:1f:cc:a4:0e:da:
         ce:08:7c:72:16:6e:eb:16:33:37:4d:c1:15:6e:47:ec:1e:e0:
         20:51:bc:57:d5:43:8f:30:6c:04:f8:90:14:00:fe:c8:5d:1d:
         3f:4d:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org