Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/B361B1B4F66511EABD366842F8AEA228.roa
File:                     B361B1B4F66511EABD366842F8AEA228.roa (raw, json)
Hash identifier:          9XCKt54kMSsfjA2pMKx1yeYnv9HRm1PAKASnbuS69G0=
Subject key identifier:   E6:6D:CC:95:A2:76:35:74:48:B7:22:59:05:65:1F:09:84:8E:B8:21
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0294
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/B361B1B4F66511EABD366842F8AEA228.roa
Signing time:             Mon 14 Sep 2020 08:38:46 +0000
ROA not before:           Mon 14 Sep 2020 08:38:41 +0000
ROA not after:            Sat 14 Sep 2030 08:38:41 +0000
asID:                     327687
IP address blocks:        196.43.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 14 08:38:41 2020 GMT
            Not After : Sep 14 08:38:41 2030 GMT
        Subject: CN=5f5f2c15-2184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:da:a4:8a:8e:35:ae:76:33:80:58:ec:d9:
                    7e:f6:aa:d7:bf:6b:a3:c8:ef:00:7e:f3:1a:e4:34:
                    3e:23:b7:0a:d7:74:74:db:00:3c:17:e7:a7:aa:5d:
                    0d:85:f8:27:01:a6:04:2a:2f:4b:96:13:b8:fe:16:
                    67:b0:ec:c2:4c:d0:6d:76:1f:12:cd:d4:d8:17:97:
                    b7:13:db:69:b4:94:80:63:34:bb:0d:c4:2d:30:d2:
                    1a:6e:7d:ca:03:c4:6c:94:30:bc:07:3c:36:96:c4:
                    f5:cf:44:ff:da:19:5f:80:fd:38:9e:c7:81:d5:09:
                    23:4c:1c:f8:6b:c5:11:67:f6:65:9f:81:3f:a4:27:
                    32:a1:60:45:49:65:a4:4b:a4:92:d6:ea:75:a0:e4:
                    72:20:96:68:13:96:0f:d0:bd:50:18:6c:50:f1:fa:
                    68:d2:1c:da:b3:36:56:48:88:0e:1b:b1:3e:56:53:
                    26:ee:9f:13:64:99:03:13:c7:35:c1:33:79:8c:04:
                    0d:7a:36:b9:70:e9:78:bd:8e:d7:7e:70:d3:69:78:
                    7f:08:fa:b3:c8:fe:62:da:41:6f:94:65:dc:26:af:
                    a9:d6:b4:17:d0:2f:2a:5a:24:d0:a1:9d:66:9b:44:
                    95:d9:e1:27:69:6a:9c:b4:d5:84:f8:da:f0:19:d7:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6D:CC:95:A2:76:35:74:48:B7:22:59:05:65:1F:09:84:8E:B8:21
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/B361B1B4F66511EABD366842F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:b7:fd:18:37:5f:2c:c7:fc:d8:3f:cb:c1:aa:c2:73:7d:
         ef:4c:10:c8:8b:e6:92:a8:b3:9b:40:19:e8:35:0e:1b:3f:08:
         98:43:d8:8e:be:71:9b:a6:be:de:f2:7f:e1:83:02:f3:57:94:
         ad:77:7c:4d:9b:94:37:75:23:2c:63:23:5c:ba:79:d6:ff:26:
         dd:70:38:06:ae:1c:84:af:49:7c:73:aa:ac:3a:eb:2c:81:ec:
         0c:6b:17:cc:cb:8a:cc:10:d3:a5:e8:11:96:e4:88:73:f8:d9:
         07:e3:9b:35:59:1a:b9:b7:66:6b:f1:e2:9c:cc:a5:77:47:f3:
         7b:c0:c6:03:8e:9c:0c:36:7b:3c:12:2b:d5:96:dc:c4:15:0e:
         bb:1b:9a:55:34:6f:1e:76:9b:16:0e:d8:90:e0:40:eb:29:9b:
         22:45:5d:dc:53:0e:76:ba:95:9a:05:87:2b:0f:a3:2b:4d:d9:
         f5:c5:4e:0a:f7:3b:12:70:48:7d:69:4a:16:ae:54:05:51:65:
         d9:40:a1:89:32:69:95:09:e7:e0:32:60:5c:7e:12:1d:82:99:
         76:7c:a3:68:e0:80:55:d3:53:e9:74:d9:6a:c5:e9:5f:90:49:
         b0:d8:ba:98:b8:e8:0a:c4:c1:5b:6d:c9:8e:57:f8:25:f5:95:
         b5:53:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:00:51 2024 by rpki-client on console-ams.rpki-client.org