Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/569C905009E611EA981A186DF8AEA228.roa
File:                     569C905009E611EA981A186DF8AEA228.roa (raw, json)
Hash identifier:          fvR8481UnrxpOsKzB3HXDFQQE0rAI0UNGZBD3eZYw4A=
Subject key identifier:   FA:17:62:EC:76:B4:8E:E0:ED:3C:94:AE:38:3A:4A:85:02:C4:42:B3
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       80
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/569C905009E611EA981A186DF8AEA228.roa
Signing time:             Mon 18 Nov 2019 09:32:29 +0000
ROA not before:           Mon 18 Nov 2019 09:32:22 +0000
ROA not after:            Sat 17 Nov 2029 09:32:22 +0000
asID:                     327687
IP address blocks:        137.63.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 09:32:22 2019 GMT
            Not After : Nov 17 09:32:22 2029 GMT
        Subject: CN=5dd2652d-3481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:16:e0:ef:e3:06:51:69:76:70:f9:48:75:
                    87:98:57:2f:a2:c1:63:d3:d9:72:a5:65:6c:99:c0:
                    e3:95:f1:4d:6f:46:48:0c:b9:50:59:6a:ab:aa:51:
                    c0:19:43:89:49:18:38:67:b7:49:ed:16:11:58:e8:
                    43:92:24:fb:d2:1f:e9:fc:6e:8e:af:2a:51:21:63:
                    e6:36:a3:62:00:2e:78:c5:f2:ad:f5:b0:81:5f:92:
                    cb:8c:30:15:29:05:35:d1:43:0b:b2:32:de:36:ad:
                    46:2d:ea:ee:66:ec:56:76:85:94:8e:93:61:07:cd:
                    90:88:5d:bf:84:f4:60:90:0c:52:77:09:25:e9:4d:
                    84:4b:86:3a:6f:55:e7:ba:4b:19:67:bb:44:14:b3:
                    83:ba:83:f0:31:48:3f:9d:9d:b5:69:25:04:97:27:
                    45:60:ab:b2:5f:9c:78:57:c0:75:36:e6:c6:8b:1b:
                    2d:10:f9:74:ea:a9:05:d9:ea:6b:63:8c:f7:f5:be:
                    87:73:0b:5d:8a:73:e0:68:bf:99:1c:77:0a:76:50:
                    6e:95:9a:bc:9d:b1:93:67:1e:fd:83:b9:36:c7:df:
                    a5:89:a2:ad:1d:04:bf:07:86:7d:52:e7:27:19:26:
                    07:74:c2:39:d0:60:d9:88:2e:42:5c:11:90:19:af:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:17:62:EC:76:B4:8E:E0:ED:3C:94:AE:38:3A:4A:85:02:C4:42:B3
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/569C905009E611EA981A186DF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:2b:6f:25:c7:c3:f4:89:0d:c4:a1:ea:40:c4:f4:5f:02:11:
         bb:96:52:3c:e9:76:0e:af:aa:94:3a:a2:28:63:4f:b3:b2:a7:
         dd:19:da:52:13:70:26:5c:7a:20:6e:56:16:ec:be:32:d2:54:
         36:53:c3:93:2b:66:fc:eb:ad:7e:32:a9:e5:3f:4e:1f:3d:8f:
         c0:a7:60:ac:90:89:41:cc:be:9b:2d:c9:98:7f:d2:c0:84:a1:
         22:17:9f:cf:d6:6e:b0:d5:55:28:ab:dd:98:b9:12:f3:f4:01:
         37:a2:44:6d:33:73:7d:06:2b:6c:13:43:c0:93:45:95:f0:5a:
         79:42:7c:4d:9a:5a:83:2a:3b:97:d2:29:f2:8e:9b:af:7a:a0:
         40:9f:c5:23:3d:a3:14:df:b9:05:3c:8d:e2:d9:e9:65:b0:58:
         5e:ac:ea:27:f4:ef:91:8e:61:9c:68:9a:94:48:ef:b5:18:d4:
         51:88:5c:50:9e:e9:4c:8f:26:b8:60:2d:46:39:6f:08:e0:fb:
         a1:c6:fd:57:08:ae:68:21:45:a6:9e:5e:45:90:f5:af:e2:18:
         1c:8b:0f:a5:d2:02:0e:04:07:f9:65:9c:b8:37:68:cf:26:83:
         6d:e1:61:05:a3:db:c9:41:4a:97:31:49:4c:b3:86:4c:ff:61:
         47:8f:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org