Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/ADE0602AF66811EA92728E45F8AEA228.roa
File:                     ADE0602AF66811EA92728E45F8AEA228.roa (raw, json)
Hash identifier:          NOUa5nHAr2qHFEYA3rqilmKBUOwOdTDVZuFP+WR5gtM=
Subject key identifier:   88:15:35:BA:7E:2E:25:16:0A:DC:80:BE:8C:90:AD:2B:26:D6:A6:F2
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       029E
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/ADE0602AF66811EA92728E45F8AEA228.roa
Signing time:             Mon 14 Sep 2020 09:00:05 +0000
ROA not before:           Mon 14 Sep 2020 08:59:59 +0000
ROA not after:            Sat 14 Sep 2030 08:59:59 +0000
asID:                     327687
IP address blocks:        196.43.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 14 08:59:59 2020 GMT
            Not After : Sep 14 08:59:59 2030 GMT
        Subject: CN=5f5f3115-fe8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:5d:44:31:b8:67:73:40:6b:f3:98:f5:eb:
                    a4:df:ff:e1:c9:b5:c5:92:fd:85:4b:e8:61:b2:b9:
                    82:ca:6b:72:57:93:d2:45:15:3e:d9:8f:1d:ca:fa:
                    e2:27:82:01:98:aa:e1:3a:3c:f0:39:51:8e:aa:c8:
                    a1:03:6b:85:e8:a3:ec:d0:f9:30:d2:66:7a:99:f7:
                    60:ae:d8:bc:d5:6b:e6:44:a9:e7:0f:ba:f4:9c:85:
                    9f:18:7e:03:b2:7a:53:64:41:68:cb:78:b7:64:8a:
                    ed:93:37:2a:a8:78:a3:a9:99:0d:e1:8d:55:a0:76:
                    83:9e:37:c4:9c:17:34:e9:44:0f:4e:f0:ac:da:0f:
                    76:b9:4e:5e:19:4e:51:1c:d2:ba:d8:15:f6:c1:e2:
                    28:ee:19:ca:92:ea:0c:49:2f:e0:c5:31:19:36:f4:
                    7d:ce:8f:80:94:09:fc:2a:a4:b4:0c:fb:c4:ba:fb:
                    e9:f0:c8:98:af:bc:b0:74:0b:13:22:ad:b6:b5:45:
                    35:a3:2e:94:12:c1:46:79:93:5d:04:e9:88:fe:ec:
                    fa:59:f1:15:1e:4c:b9:5e:66:46:96:f8:d0:1a:aa:
                    1a:ff:0b:f5:8a:6d:83:a6:4c:e0:2d:8e:f6:1e:b9:
                    ef:89:fd:6d:91:24:8e:af:c8:59:59:22:b8:da:9d:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:15:35:BA:7E:2E:25:16:0A:DC:80:BE:8C:90:AD:2B:26:D6:A6:F2
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/ADE0602AF66811EA92728E45F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:63:25:25:16:e9:17:1e:5c:df:6a:8e:9b:c1:a8:bc:2f:04:
         e9:52:e9:c9:ea:e7:18:2d:8a:de:3c:6f:97:18:f1:9a:14:00:
         3c:92:8e:22:94:34:6f:77:29:ac:00:32:c4:8c:8f:6d:46:5b:
         7f:f9:02:78:0b:b1:61:e1:6a:13:39:f9:20:22:4d:ef:4c:75:
         66:5b:e6:a2:6e:1e:f9:27:79:c8:21:f3:22:33:02:2c:ed:14:
         02:fc:4e:21:23:ec:95:b3:b7:ab:8d:c5:bd:00:d6:c5:bc:53:
         8a:79:86:5f:a1:59:70:8f:11:da:de:56:4f:5f:cb:29:c2:c7:
         1d:bf:04:2c:19:59:f7:f9:9b:80:58:52:c2:8f:ac:fe:b1:ed:
         ca:ee:d9:bd:8a:2e:55:66:e7:99:98:81:0e:fb:f7:8a:aa:60:
         25:d7:ac:43:f2:b4:2a:dd:19:63:02:56:ff:d7:f7:cd:a7:33:
         c9:20:b8:24:85:f7:64:b4:73:2e:75:bb:ce:6f:1e:f3:af:6e:
         3a:ad:e6:71:fd:bf:c8:17:8a:44:08:fb:ad:46:07:a9:9c:27:
         f0:27:3a:11:25:a8:78:d1:2e:d1:16:ff:2f:5a:ae:c2:a9:7a:
         63:8d:bd:fd:39:a4:62:64:7b:cb:b1:92:d7:69:3e:9a:b3:13:
         39:48:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:26 2024 by rpki-client on console-ams.rpki-client.org