Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/63F244BC09E011EABBE86068F8AEA228.roa
File:                     63F244BC09E011EABBE86068F8AEA228.roa (raw, json)
Hash identifier:          rH9w8A2Hx03qsaKaYN1Ve0mrHxXEDay6xPkrGT6SARc=
Subject key identifier:   66:C2:6C:95:FC:1E:BC:BA:2C:AA:86:50:16:DF:A1:1F:35:62:B0:76
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       5E
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/63F244BC09E011EABBE86068F8AEA228.roa
Signing time:             Mon 18 Nov 2019 08:49:55 +0000
ROA not before:           Mon 18 Nov 2019 08:49:49 +0000
ROA not after:            Sat 17 Nov 2029 08:49:49 +0000
asID:                     327687
IP address blocks:        137.63.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 08:49:49 2019 GMT
            Not After : Nov 17 08:49:49 2029 GMT
        Subject: CN=5dd25b32-5d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:67:9f:f6:7b:85:fb:2d:e4:cd:74:5b:b6:
                    99:08:79:00:b5:cb:e2:98:23:37:13:1b:3a:6d:9a:
                    ca:f3:d0:fe:90:03:3e:9b:7a:12:31:06:dd:e5:a4:
                    1c:0a:e0:62:57:98:55:11:8d:af:c9:72:dc:53:3b:
                    35:15:2c:33:4a:f6:a8:7a:d0:04:d3:5d:37:09:91:
                    34:8a:90:f0:c3:1f:42:14:f2:87:2f:30:17:ce:9e:
                    e7:29:6f:40:a3:47:4a:62:f7:2f:d7:05:0c:c7:be:
                    d8:b4:71:f9:6d:c7:53:a9:0a:19:65:58:82:b6:82:
                    93:aa:a7:53:35:f6:4a:54:1b:c4:c1:d5:c6:05:91:
                    44:6e:a4:de:76:af:4f:61:85:de:19:d9:55:b8:14:
                    4e:72:9b:52:9c:82:9c:4c:40:f9:7d:23:3c:7e:af:
                    97:e2:d9:32:c1:4d:9a:c9:0e:75:c2:33:fb:7f:be:
                    e6:ff:c9:84:a2:16:e4:d7:db:48:32:b7:33:37:49:
                    f9:c8:ea:f3:a5:2d:3d:56:f9:45:dd:0f:a5:66:cd:
                    6d:ee:cd:8f:87:47:45:98:d4:f6:9c:9e:bd:b2:b6:
                    af:6c:ff:55:79:b0:8d:ee:b3:ff:3d:da:c9:e0:35:
                    f5:1c:60:95:8f:11:03:bf:2d:04:92:9e:fb:74:4a:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C2:6C:95:FC:1E:BC:BA:2C:AA:86:50:16:DF:A1:1F:35:62:B0:76
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/63F244BC09E011EABBE86068F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:d0:c5:88:11:2a:2d:b9:7e:39:5c:0c:ed:cf:f9:0d:70:
         43:ba:b5:8a:5a:26:33:7b:79:43:96:a3:50:a1:37:60:c5:5f:
         47:a6:ea:ad:e0:28:61:f8:f3:c5:c4:b7:32:a3:cf:74:57:43:
         85:cf:e3:44:16:eb:5a:02:24:24:83:ef:8b:5d:ab:fd:1a:96:
         48:78:54:b1:85:b0:06:b7:a2:85:c9:f5:76:9e:32:4e:db:3f:
         ea:c1:e0:fb:de:38:fd:c2:67:98:b6:8e:e3:8e:de:c5:a7:48:
         23:d1:8e:07:ae:fe:59:b4:6d:d1:0b:b7:41:fb:a1:21:4f:9d:
         be:ce:a9:36:1e:11:73:48:8c:08:bb:ce:8d:13:a3:83:b2:5a:
         00:b0:7a:cf:e1:00:6c:05:c3:d6:d4:3d:28:3f:94:4f:92:09:
         92:55:da:49:18:5b:c5:f9:fc:57:8b:4c:ae:d4:0c:b4:30:63:
         c8:80:0f:ee:de:cc:be:f4:9f:ec:96:7a:e7:e3:0f:67:85:43:
         9e:c5:be:e0:3c:0e:5d:4c:10:eb:0b:63:31:87:9f:29:37:02:
         c3:21:de:9f:5f:00:29:2e:55:29:48:a2:fa:d8:8d:22:d7:75:
         d4:14:08:ae:e3:fb:67:95:d0:15:2b:47:92:74:21:e9:57:08:
         a2:c0:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org