Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/F7C7754CF66411EA8D66A741F8AEA228.roa
File:                     F7C7754CF66411EA8D66A741F8AEA228.roa (raw, json)
Hash identifier:          o/HvWB7zOrq0izKzH2nyThMH2+Jy1mb9rMMaXsRylVk=
Subject key identifier:   CD:E2:29:6B:15:20:C2:AB:8E:27:23:49:B8:67:9F:3E:04:FD:91:23
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0292
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/F7C7754CF66411EA8D66A741F8AEA228.roa
Signing time:             Mon 14 Sep 2020 08:33:34 +0000
ROA not before:           Mon 14 Sep 2020 08:33:25 +0000
ROA not after:            Sat 14 Sep 2030 08:33:25 +0000
asID:                     327687
IP address blocks:        196.43.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 14 08:33:25 2020 GMT
            Not After : Sep 14 08:33:25 2030 GMT
        Subject: CN=5f5f2add-ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:44:c0:bb:8d:fb:b7:c1:56:ed:9a:f7:b6:
                    b3:c8:da:05:a7:07:e2:ac:61:50:b5:1b:a4:94:df:
                    e2:0e:eb:22:b7:ef:cf:0a:af:f2:d7:4a:d6:01:cf:
                    44:87:bd:2d:a9:a2:bd:70:61:15:b3:a2:3d:3a:c1:
                    dd:27:87:8d:6f:6e:8e:ed:31:f3:bf:ba:5e:19:47:
                    4e:14:07:4a:f8:60:61:90:de:95:20:de:af:9f:e2:
                    9b:f3:3f:eb:cb:12:ca:a7:d6:40:93:4a:1e:7b:32:
                    1e:9b:59:5b:87:80:86:2c:60:76:63:cb:98:0c:67:
                    c5:3c:70:9b:ed:b7:07:58:29:48:f6:33:50:05:3d:
                    e0:7b:5b:29:d4:e4:89:14:f9:2d:d1:b0:14:67:43:
                    fe:1d:85:0c:e3:0f:7e:06:95:51:7b:94:b5:ba:ba:
                    3a:18:af:6c:12:6c:a5:4e:2a:d7:d4:bc:6d:28:5c:
                    d2:ce:89:1c:be:81:1e:56:f8:cc:e1:ca:79:fa:e9:
                    c2:10:f5:85:9b:74:e0:d7:6f:a5:dd:a5:5e:26:c4:
                    9d:ec:fb:4f:c0:93:e7:82:fe:5f:34:cf:3c:24:c7:
                    c0:91:c9:fa:01:56:74:fe:62:53:94:12:17:e5:3a:
                    bb:ea:d5:b5:3f:09:45:c2:e2:ee:bd:18:43:e3:c7:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E2:29:6B:15:20:C2:AB:8E:27:23:49:B8:67:9F:3E:04:FD:91:23
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/F7C7754CF66411EA8D66A741F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:cf:c8:34:e0:aa:68:96:97:2d:7b:7a:98:75:72:08:fc:40:
         03:14:86:98:bd:5a:64:65:7e:e2:26:20:b1:28:95:fa:54:65:
         4d:63:df:5a:d7:b9:48:a1:9c:1f:49:c1:d2:44:34:7f:b8:17:
         c1:a5:ea:6c:58:43:49:66:30:1a:90:e7:6c:53:d8:1f:07:c3:
         20:a1:41:f4:7f:09:c0:66:66:93:57:37:5a:78:4b:10:f0:f3:
         f0:33:2b:41:02:1e:f9:26:4c:d8:7f:57:1d:72:5f:18:f9:fc:
         b6:e1:a6:42:32:9c:cf:ad:dd:09:1d:17:56:49:40:23:a5:a1:
         b2:1c:51:f8:5b:46:7a:18:4d:57:df:5e:62:5f:e7:21:e6:36:
         a0:7e:00:c9:9a:f0:09:42:bf:d1:88:4b:da:0f:17:0b:46:e2:
         f3:49:98:3d:df:33:9e:1f:40:2b:04:27:2a:4e:69:fd:bf:40:
         dc:63:29:6d:ad:1c:ee:74:17:f3:33:f2:3a:11:5e:c5:19:ec:
         8d:08:85:fc:9d:f3:45:95:ab:85:b6:16:87:41:1d:c3:73:61:
         80:7c:20:37:31:d8:b9:5c:ce:89:d0:99:72:1e:e5:c5:ee:ca:
         08:fe:57:6f:6e:8b:ef:72:24:f3:9d:2d:c4:42:17:b4:93:4b:
         f0:03:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:28 2024 by rpki-client on console-ams.rpki-client.org