Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/4B74453409F911EA9171097BF8AEA228.roa
File:                     4B74453409F911EA9171097BF8AEA228.roa (raw, json)
Hash identifier:          RjUaSsQiF8kvf8Yk6tQqgO1bbpocI2WKC6SexAnmAyQ=
Subject key identifier:   89:A4:C9:D0:37:18:F1:EF:39:29:29:79:C0:21:B8:D8:01:1C:A2:D1
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       A6
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/4B74453409F911EA9171097BF8AEA228.roa
Signing time:             Mon 18 Nov 2019 11:48:11 +0000
ROA not before:           Mon 18 Nov 2019 11:48:07 +0000
ROA not after:            Sat 17 Nov 2029 11:48:07 +0000
asID:                     327687
IP address blocks:        137.63.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 11:48:07 2019 GMT
            Not After : Nov 17 11:48:07 2029 GMT
        Subject: CN=5dd284fb-355c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:73:3f:88:53:e7:34:68:0e:9e:e5:ea:55:
                    ea:50:24:42:4d:1f:e0:32:97:f3:7a:dc:92:c4:42:
                    42:5f:23:6b:fa:eb:6f:83:f9:63:ac:b5:c6:10:2f:
                    97:30:bd:a4:8b:71:b1:e6:48:d7:f2:f0:c9:af:9d:
                    b5:5c:bc:4b:9f:0f:6a:86:a7:81:f3:4a:27:ea:34:
                    d0:bc:d1:42:ef:ba:3c:d1:b0:5d:51:98:df:0b:cc:
                    6e:d3:dd:ec:f6:c9:a5:d2:04:d2:65:87:da:db:04:
                    96:f2:38:91:8b:07:63:52:48:93:64:34:23:a1:94:
                    c9:52:35:a2:63:45:af:46:65:18:c9:49:0f:f1:98:
                    93:f2:9b:da:99:f4:1a:da:77:01:91:6e:62:79:88:
                    06:41:ab:db:35:68:ca:5e:b9:e9:db:9d:73:5d:d7:
                    9e:a3:69:4e:b2:86:d2:e6:52:20:be:55:83:6a:22:
                    6f:f3:3b:0e:17:2e:4b:b6:37:58:d9:81:d3:27:33:
                    e9:34:da:22:30:65:91:23:19:a2:61:27:f2:e5:0f:
                    5d:a6:44:cf:87:d6:f1:5d:7d:fe:4f:0b:a9:aa:61:
                    98:0a:52:74:7f:c7:24:7f:bf:55:c4:51:0b:88:46:
                    49:04:bd:ff:57:d7:a1:6f:53:05:c2:d4:23:15:63:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A4:C9:D0:37:18:F1:EF:39:29:29:79:C0:21:B8:D8:01:1C:A2:D1
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/4B74453409F911EA9171097BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:8e:5f:e0:79:af:c7:03:bc:e2:c1:d8:89:e1:97:08:e6:
         20:d9:72:31:bf:dc:11:a4:72:b6:8d:8b:b6:b1:16:d9:c2:0a:
         e9:98:11:ab:84:df:1d:a3:83:4e:8f:7f:fb:f3:21:6f:99:75:
         e6:7d:18:20:f8:79:08:29:f7:dc:97:25:ef:96:e1:ca:01:a7:
         ce:6d:90:c2:40:ad:11:27:8b:cf:1e:02:77:2e:ba:bf:fe:1a:
         32:af:05:2d:be:e6:82:a9:ce:e9:ff:6d:01:b3:1e:04:9b:d4:
         9e:d9:15:1c:11:69:ef:ba:32:e5:6a:45:b9:c2:db:34:c0:21:
         6b:eb:82:93:93:86:12:62:24:05:ff:e7:9a:af:75:7f:d6:c2:
         22:d5:a3:7f:05:d9:a2:d9:02:39:96:ec:da:92:a7:42:ed:e1:
         d0:7e:bb:04:bc:de:c1:25:4b:b3:9a:4d:dd:41:61:dd:83:02:
         46:87:34:c0:bf:3b:87:7b:61:66:b7:1b:31:63:1a:51:29:ac:
         e0:04:77:75:5e:24:9c:79:ec:33:40:5d:da:dd:80:8f:76:4b:
         07:7b:85:ed:6f:bf:a3:eb:7c:40:a4:9d:22:34:ba:4e:e1:b3:
         8f:4f:12:47:f4:9e:a5:ef:8d:49:52:06:4b:28:71:6e:e3:30:
         fb:c4:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org