Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/F8A0A12EF51911EA917F8C25F8AEA228.roa
File:                     F8A0A12EF51911EA917F8C25F8AEA228.roa (raw, json)
Hash identifier:          pi9ulS1bgVE121OQN1H5uRCx/TYQRVt21Oc9CNMXMNk=
Subject key identifier:   19:9F:72:85:0C:3E:05:0A:3A:76:B0:14:01:50:D6:1C:F9:F8:FE:21
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       027A
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/F8A0A12EF51911EA917F8C25F8AEA228.roa
Signing time:             Sat 12 Sep 2020 17:04:09 +0000
ROA not before:           Sat 12 Sep 2020 17:04:04 +0000
ROA not after:            Thu 12 Sep 2030 17:04:04 +0000
asID:                     327687
IP address blocks:        196.43.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 12 17:04:04 2020 GMT
            Not After : Sep 12 17:04:04 2030 GMT
        Subject: CN=5f5cff88-e25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:7b:d9:16:1e:bf:b3:c6:d8:cc:d2:09:73:
                    a0:52:aa:17:53:2c:dc:e4:97:b2:ce:12:ad:b7:db:
                    74:c5:f1:8b:bf:7b:81:fb:58:68:41:ec:b2:6c:4a:
                    cb:a0:f9:53:4d:94:8a:e7:52:2a:f1:46:52:aa:46:
                    aa:dd:f0:8b:0b:3f:d4:3c:8a:7f:3e:ee:45:a1:8b:
                    98:4c:b4:d6:3c:7d:99:15:53:c6:5e:3d:51:5b:b7:
                    88:56:8b:ee:7f:10:ee:65:4a:d1:7a:8e:b7:f4:e5:
                    82:b9:ef:4c:24:24:e9:16:15:66:ce:95:fd:46:88:
                    9e:2e:cc:c4:6d:fa:7b:d6:bb:0d:59:39:db:a1:20:
                    2d:01:f6:b7:20:ea:a6:c5:31:b2:32:eb:c6:b1:69:
                    6e:e8:49:8a:06:59:d7:7a:f7:33:8b:aa:eb:c4:b7:
                    c0:28:02:9c:bc:6e:7f:51:47:90:30:59:d7:0c:83:
                    ce:44:4a:7b:86:55:76:80:cb:75:ad:98:fe:38:67:
                    18:2e:54:cb:1e:20:8c:16:92:b5:ce:4f:86:30:de:
                    15:2d:5b:3a:f0:4b:3c:b2:e7:d2:18:31:1c:21:20:
                    5b:ac:6c:35:f0:fc:7e:1f:00:b6:b1:44:1a:06:0d:
                    0d:d2:5b:9b:ee:f2:69:e9:58:88:49:19:94:cf:4f:
                    50:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9F:72:85:0C:3E:05:0A:3A:76:B0:14:01:50:D6:1C:F9:F8:FE:21
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/F8A0A12EF51911EA917F8C25F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fb:6f:d6:31:19:d7:86:14:5c:26:6a:30:5b:0f:77:de:47:
         1e:a8:cd:2d:88:ea:df:dd:7b:59:5b:b2:25:9b:75:66:86:b2:
         4a:22:06:ce:19:b6:d8:48:cf:76:4d:f3:ba:5e:ef:af:2a:39:
         47:31:b9:8e:4b:ed:8b:16:a1:32:14:7a:83:24:71:4d:e6:a8:
         e3:24:7e:bb:e1:ea:7e:ec:e1:6e:5d:c6:89:f9:f2:5c:10:03:
         90:20:4c:6a:0f:cf:35:4f:56:34:aa:a4:fc:2a:69:e7:d2:a0:
         bd:8b:a6:16:1a:fd:6a:51:c2:e0:6e:b3:62:b7:57:71:2d:6d:
         66:7b:bb:c2:a5:4a:e5:75:0e:2f:66:b4:22:03:29:e7:90:8e:
         6f:ca:65:fe:92:ca:33:31:3a:57:5e:fd:a9:62:e1:d4:df:d6:
         c1:ec:3d:9a:89:68:be:ef:67:9e:a4:09:99:b3:03:5a:44:c2:
         e6:41:27:b1:a5:b3:b3:54:eb:37:c5:cb:86:ad:a3:0c:cd:3b:
         45:56:d7:c7:f5:e5:b5:47:2c:5c:15:82:82:7c:79:64:68:15:
         0e:2b:c5:1f:39:19:08:3f:f7:b5:97:96:b2:79:38:f6:d2:8d:
         92:9c:bb:70:0c:9d:e1:d6:f5:0b:9d:7e:f6:5e:fe:71:cd:0d:
         ba:ac:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:43 2024 by rpki-client on console-fra.rpki-client.org