Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0D4C979209DC11EA8A2AE064F8AEA228.roa
File:                     0D4C979209DC11EA8A2AE064F8AEA228.roa (raw, json)
Hash identifier:          fCgpTez6iXBeosxDtOt9UerwpyN/z3HHAK8Okwt56Ps=
Subject key identifier:   8E:19:4C:92:41:C9:65:58:20:83:D4:F6:1E:B6:B3:BB:4F:A6:97:F7
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       3A
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0D4C979209DC11EA8A2AE064F8AEA228.roa
Signing time:             Mon 18 Nov 2019 08:18:51 +0000
ROA not before:           Mon 18 Nov 2019 08:18:47 +0000
ROA not after:            Sat 17 Nov 2029 08:18:47 +0000
asID:                     327687
IP address blocks:        137.63.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 08:18:47 2019 GMT
            Not After : Nov 17 08:18:47 2029 GMT
        Subject: CN=5dd253eb-2067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:a2:f2:8a:cd:2e:72:d1:53:4f:37:1a:6d:
                    d8:38:27:42:31:a2:50:5b:94:a4:88:80:4b:a3:88:
                    38:80:25:b2:8d:ee:ea:1b:14:63:6a:bb:0e:00:d2:
                    19:67:f5:f8:53:9d:c3:ba:ad:b2:7e:19:38:27:27:
                    7d:ae:91:02:a4:9d:66:20:e3:6f:74:1f:af:c2:31:
                    77:7c:40:36:64:90:5d:20:e0:fd:04:4b:cf:d2:ba:
                    11:eb:c9:de:c5:55:e8:17:de:e8:e1:c9:49:ba:c8:
                    be:73:ac:26:80:be:5e:96:41:73:ef:79:28:a5:be:
                    ad:c9:f3:7e:ca:ab:36:8a:27:73:6d:52:c3:c0:3b:
                    5f:ba:9f:51:c3:ce:f3:f9:ef:3d:8b:94:96:e7:61:
                    3f:ec:cb:1d:93:9c:8f:f8:85:97:ef:61:d3:56:fd:
                    da:49:9f:de:6c:69:f5:11:e6:a4:5b:b4:16:64:37:
                    67:d8:69:24:7e:23:da:55:31:75:c8:24:3e:22:2c:
                    00:e7:e7:20:c2:be:e2:e0:52:ff:d0:25:68:7d:fe:
                    c8:cb:44:50:5d:0d:b0:18:b2:73:df:d0:f8:24:d3:
                    06:3d:f4:fe:91:eb:68:94:52:4c:17:7c:a2:96:36:
                    e3:ad:a2:ae:7a:13:23:75:76:3e:76:ad:c8:d1:75:
                    75:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:19:4C:92:41:C9:65:58:20:83:D4:F6:1E:B6:B3:BB:4F:A6:97:F7
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/0D4C979209DC11EA8A2AE064F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:46:b8:3e:99:dc:56:15:f2:07:01:ab:88:38:3b:3d:75:
         a7:6c:5c:66:35:c3:9a:80:c9:4f:36:1c:0b:e7:07:73:86:89:
         02:c0:aa:07:cd:c0:6c:83:29:6a:9e:47:73:4e:61:52:b5:5e:
         88:27:01:c5:37:74:66:45:7f:55:47:9f:f2:26:1d:23:f4:26:
         fd:28:6f:51:0b:cb:6a:f5:68:bc:fa:35:32:55:d7:5e:cb:3f:
         2d:3d:2e:d6:2d:c5:e3:18:61:21:35:49:72:eb:80:66:c7:07:
         0b:63:e2:1c:8c:8e:88:0d:7a:f1:bd:57:58:6e:6b:96:4b:0c:
         84:17:7c:d4:a6:a1:71:5a:98:81:a6:36:9c:47:cf:61:66:1e:
         9e:6e:6c:c0:76:b1:7a:6b:16:10:1f:8d:c6:33:03:9a:dd:17:
         60:a8:e3:3e:1f:01:ae:30:58:c1:20:25:07:6e:ad:bb:fc:67:
         93:aa:ef:64:e0:9f:69:11:4c:0c:bb:2f:4d:a5:ab:c8:4a:a3:
         8c:d5:bd:7f:79:25:6a:1f:0e:12:49:c9:2d:0b:1c:27:08:f7:
         38:32:59:08:7f:8c:96:8d:c6:89:a9:a0:04:0b:42:3b:4b:6b:
         e3:a3:92:cd:c5:81:66:82:09:9f:13:89:a4:ef:49:b9:3b:90:
         e2:5c:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:43 2024 by rpki-client on console-fra.rpki-client.org