Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/E960C5CAF38111EA992B4F7EF8AEA228.roa
File:                     E960C5CAF38111EA992B4F7EF8AEA228.roa (raw, json)
Hash identifier:          I4QKR1VDLGh3RhSuXkfZCtBWfJkrAcYm36I9E/IuOy0=
Subject key identifier:   77:B1:8C:22:50:82:A9:1A:6C:9F:20:BA:1C:F7:9F:F0:65:CC:21:A5
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0255
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/E960C5CAF38111EA992B4F7EF8AEA228.roa
Signing time:             Thu 10 Sep 2020 16:23:08 +0000
ROA not before:           Thu 10 Sep 2020 16:23:04 +0000
ROA not after:            Tue 10 Sep 2030 16:23:04 +0000
asID:                     327687
IP address blocks:        196.43.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 10 16:23:04 2020 GMT
            Not After : Sep 10 16:23:04 2030 GMT
        Subject: CN=5f5a52ec-6cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:53:a6:b2:c4:4a:56:96:6a:10:0b:fa:6a:
                    3a:d4:01:2b:71:89:75:3d:6f:cf:c1:10:d7:9c:1e:
                    d0:d5:ff:34:22:66:ef:30:f3:e0:31:51:b3:4b:7d:
                    57:74:e5:57:02:f5:63:b5:d1:34:cf:9d:f7:7f:f4:
                    4f:28:20:c6:9c:dd:33:0c:dc:35:df:21:3d:5c:83:
                    cc:93:ee:a6:ca:6d:df:90:f6:95:10:a6:85:cf:65:
                    50:c7:ad:f6:e0:ea:a3:d1:25:6f:03:55:f3:50:a6:
                    d6:c9:ea:4c:64:40:5d:6a:ee:e1:0d:79:c8:14:8e:
                    86:fb:e1:dc:cf:9a:3d:d0:d6:31:bd:3c:6f:f4:e9:
                    91:47:9c:54:78:c5:9c:9c:a1:43:07:f5:77:c4:a5:
                    61:f8:46:a7:50:b9:fa:22:e6:85:dc:b0:4d:53:05:
                    a5:fc:d6:e9:8d:90:b0:55:60:2a:54:c8:83:de:dd:
                    5e:92:16:13:d4:51:eb:dd:9b:02:ba:d7:75:69:82:
                    78:f0:bc:ba:60:8e:d4:63:6b:00:65:de:93:fa:c6:
                    e7:fb:92:3f:fe:17:09:fd:59:f0:9b:62:41:de:c6:
                    c2:2c:f5:c9:f0:75:62:dc:14:b9:1e:bd:a3:d7:e7:
                    e6:3d:4b:91:32:87:87:01:8c:f2:d8:63:b1:27:09:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:8C:22:50:82:A9:1A:6C:9F:20:BA:1C:F7:9F:F0:65:CC:21:A5
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/E960C5CAF38111EA992B4F7EF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:9d:d6:a9:26:f1:a9:d7:8e:32:fd:b1:5a:14:e2:fd:c3:
         79:fd:23:08:31:a3:53:f7:ff:7c:8b:d2:d6:4c:bf:62:3a:6f:
         34:bb:11:06:33:3b:b0:ce:f1:07:f5:89:d3:24:88:d5:af:0a:
         cb:51:60:8b:f7:c5:1e:0e:54:1f:c7:26:60:25:a6:8e:3e:cb:
         58:c7:3d:51:67:02:b8:06:20:9f:9c:3b:63:3e:d6:ee:af:8f:
         07:25:74:98:7b:79:d1:2d:7c:7a:89:04:cb:57:98:b0:ac:c9:
         40:05:c5:54:cf:5b:4e:09:df:61:fe:e9:f5:74:8a:76:6b:f0:
         1f:21:4d:f6:b6:46:7f:49:2d:d2:c0:26:e9:a7:33:58:b0:b9:
         9e:82:68:88:63:cd:3a:01:49:3a:b6:44:af:43:32:73:86:48:
         33:13:6e:8d:e1:09:bc:a6:81:b6:b0:80:a3:ea:dc:b4:fc:11:
         f1:3b:54:ea:b9:96:58:ad:0b:55:a6:c0:04:4b:eb:dc:9e:5f:
         fa:98:0f:95:d2:e3:6b:e9:08:72:5d:75:6c:ce:fa:4a:6f:95:
         68:6b:49:25:37:fc:a5:30:54:f2:88:3d:35:3b:9f:3e:f3:7e:
         5c:96:06:c4:5e:0c:02:d0:4f:36:05:50:bf:cf:14:69:69:e2:
         9e:08:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:46:42 2024 by rpki-client on console-fra.rpki-client.org