Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/47325A1809E711EAA347D36DF8AEA228.roa
File:                     47325A1809E711EAA347D36DF8AEA228.roa (raw, json)
Hash identifier:          kT2S0cdCKFVr+jhIRGEFlSt1DYcSAkBueWlSiExJDcY=
Subject key identifier:   D6:97:DF:AE:DC:84:FB:98:C6:FE:E9:14:A2:ED:D9:DC:EA:50:B3:43
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       86
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/47325A1809E711EAA347D36DF8AEA228.roa
Signing time:             Mon 18 Nov 2019 09:39:13 +0000
ROA not before:           Mon 18 Nov 2019 09:39:08 +0000
ROA not after:            Sat 17 Nov 2029 09:39:08 +0000
asID:                     327687
IP address blocks:        137.63.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 09:39:08 2019 GMT
            Not After : Nov 17 09:39:08 2029 GMT
        Subject: CN=5dd266c1-a3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:04:f3:8a:1e:93:c3:ff:f1:03:ca:19:6e:ae:
                    9a:ce:c2:3d:13:26:3c:79:4b:11:40:c7:6d:34:47:
                    bf:af:9e:2e:24:69:69:1a:4c:cc:60:a9:44:8d:06:
                    bd:2b:98:43:be:01:82:31:d1:4d:0c:bb:6b:f1:6a:
                    b5:37:77:97:bd:de:4e:3d:0b:8b:f8:52:63:c7:5e:
                    1f:cc:7a:69:ff:4e:d7:dc:7b:81:5d:4b:44:83:1a:
                    b7:f8:cd:a2:23:5b:d3:ce:ef:51:80:a4:67:20:a9:
                    64:3e:68:81:b0:92:05:63:03:25:0b:e8:70:04:66:
                    2a:93:95:30:8b:db:30:2d:13:28:96:1a:33:b3:39:
                    60:e6:1f:a8:d4:c4:d9:2e:fe:35:5c:cb:92:b9:57:
                    fa:0b:aa:9b:2b:a1:46:c4:12:f1:c5:ce:49:bb:72:
                    cd:16:8e:42:45:35:93:d3:30:52:4c:af:98:20:92:
                    cf:5b:89:f9:3b:a1:b8:40:7d:b4:af:f6:c1:72:ff:
                    11:99:a4:1b:5d:12:56:62:fd:48:17:1f:f3:f0:fe:
                    9b:1d:60:e1:f3:40:be:3e:59:94:03:0c:20:1c:6a:
                    ac:4c:ab:00:d7:81:8f:1c:0e:69:ea:6a:11:3d:e0:
                    92:cd:0b:e6:96:85:da:9d:b6:ed:66:bd:e2:84:e9:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:97:DF:AE:DC:84:FB:98:C6:FE:E9:14:A2:ED:D9:DC:EA:50:B3:43
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/47325A1809E711EAA347D36DF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:3d:57:bb:bb:fa:c5:d3:9a:c5:00:ad:f1:f3:d2:1a:13:
         75:01:b4:ec:ae:e5:6b:6a:99:fc:5d:d8:93:42:42:18:78:79:
         70:7b:c3:a4:05:f2:f7:5a:4f:8b:f8:79:67:c6:be:61:8b:35:
         6e:18:28:41:1d:1b:8f:52:24:53:a5:12:29:75:f6:0e:08:0f:
         e2:69:bc:bb:cb:ec:ff:c9:a7:cd:93:68:76:13:f6:6b:e1:53:
         da:8f:4e:81:03:34:18:53:ac:08:2f:59:c9:29:45:2a:f4:73:
         d6:e1:05:17:ef:fb:09:6e:4a:d2:01:5b:0b:5a:0f:35:b6:bd:
         ff:62:f1:b5:d7:90:30:b3:5a:c4:14:05:f1:2d:65:a1:53:b7:
         fe:5e:3d:71:57:77:55:02:e8:d2:f6:fd:e9:fc:4c:c0:71:7c:
         be:86:88:9a:e2:b0:66:2b:fc:9c:e6:0a:22:73:2c:17:09:fc:
         ab:cc:fc:82:c4:8f:80:d7:62:62:33:5d:ea:c9:b1:86:25:57:
         de:d7:6a:44:fc:eb:79:f6:27:74:26:5c:85:23:06:c7:b2:7e:
         4f:87:bd:1e:e7:26:ea:d1:99:c3:aa:0c:95:67:20:7e:f9:a9:
         c0:19:1e:12:54:20:b2:08:97:4b:d2:d0:9a:24:01:91:3c:dc:
         f3:ae:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org