Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/67EBA1E4F66611EA8C8A2B43F8AEA228.roa
File:                     67EBA1E4F66611EA8C8A2B43F8AEA228.roa (raw, json)
Hash identifier:          np1YfWJ6oBEqUciq3NiDSVUDJwvuyKuegf/eVxTyasA=
Subject key identifier:   2B:D3:50:EB:53:1D:3A:7A:3A:B6:59:F6:69:81:9B:90:A5:BF:2E:C9
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0298
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/67EBA1E4F66611EA8C8A2B43F8AEA228.roa
Signing time:             Mon 14 Sep 2020 08:43:48 +0000
ROA not before:           Mon 14 Sep 2020 08:43:44 +0000
ROA not after:            Sat 14 Sep 2030 08:43:44 +0000
asID:                     327687
IP address blocks:        196.43.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 14 08:43:44 2020 GMT
            Not After : Sep 14 08:43:44 2030 GMT
        Subject: CN=5f5f2d44-35a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:c3:7c:c4:08:54:eb:fa:eb:33:89:95:ac:
                    15:dd:50:c7:12:d3:5a:cc:1b:63:15:94:98:8c:0a:
                    53:8b:bb:35:31:d8:36:a0:a5:61:d9:87:b4:18:2a:
                    d0:f3:94:88:ae:55:38:3e:17:f0:92:6d:61:46:72:
                    84:fd:9a:73:0f:7e:6c:f8:97:63:96:bc:a4:90:48:
                    16:5f:c7:77:d7:2a:c2:29:db:30:80:11:32:64:c4:
                    9f:cb:e8:28:82:e8:20:18:59:54:12:02:72:cf:9a:
                    7d:b9:2a:f3:9c:c3:d8:d8:89:c2:6f:46:41:29:69:
                    75:fa:c6:a8:97:b5:55:61:bb:9c:9a:ba:72:79:9c:
                    02:c9:6b:43:4e:b6:05:4a:12:8b:dd:b4:c2:65:ac:
                    f2:7d:e1:94:62:e3:4f:4b:92:f7:b3:df:f5:25:14:
                    7c:88:78:2c:d7:f8:54:e5:af:6a:c7:ba:f4:25:40:
                    0c:c0:8d:ca:9b:6d:26:87:a7:96:d6:e3:a3:ee:a9:
                    79:17:95:1a:d7:dc:46:39:55:da:e9:b8:92:29:59:
                    f1:f9:1b:11:aa:08:86:6f:7f:a9:ac:6d:b0:db:b3:
                    ad:11:16:ae:58:e7:81:db:4f:33:c8:d2:fe:26:78:
                    74:12:92:37:d9:48:8d:a9:d2:a4:ef:58:da:3b:b7:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D3:50:EB:53:1D:3A:7A:3A:B6:59:F6:69:81:9B:90:A5:BF:2E:C9
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/67EBA1E4F66611EA8C8A2B43F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:6e:47:46:0c:aa:b1:2f:30:f1:60:61:54:cb:48:72:b8:
         52:ec:bb:20:b5:8e:eb:bb:b7:a0:f7:74:9b:a3:81:33:06:b3:
         8f:af:fe:3f:ed:74:ae:69:c5:3b:13:0c:54:7b:7a:4c:31:67:
         8a:8b:7e:69:ad:23:1b:a2:79:fe:6f:d4:0c:4f:dc:1b:83:f8:
         d9:6a:d7:10:93:26:df:6b:f3:9c:2d:c3:dd:9f:09:d7:b9:44:
         bc:5a:01:da:cc:6f:1a:5c:a4:ca:8a:c1:88:09:cc:a6:3a:ce:
         8c:d8:25:76:d1:be:23:f9:b4:b6:14:08:4b:6d:2b:e6:20:37:
         89:4e:31:2f:89:a6:31:a9:73:36:b6:00:9d:01:8e:45:b3:2a:
         f9:d1:1c:39:d9:bd:2f:11:a0:25:0e:a7:72:11:f4:12:fc:16:
         e5:19:c4:08:31:2e:9d:f7:16:a3:ed:71:53:2e:59:f8:d5:9e:
         b6:a0:39:5b:0d:c7:bf:66:b4:1b:45:ff:65:d4:92:2d:9e:3a:
         ab:dc:e7:b2:ff:95:b0:52:e5:6a:db:12:07:90:97:20:43:74:
         9b:44:b9:dd:ab:f3:16:82:30:e6:b1:13:ed:30:4e:9d:97:86:
         9b:89:69:ee:24:ed:6e:a0:c7:df:00:fd:bf:e0:47:91:9b:6e:
         47:bc:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:00:51 2024 by rpki-client on console-ams.rpki-client.org