Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/54C9E530A33C11EF8A87278C762E951A.roa
File:                     54C9E530A33C11EF8A87278C762E951A.roa (raw, json)
Hash identifier:          Fipj06TEsqxVsD67CiV+Mvae6ysLWsUXL2sTVldoRiY=
Subject key identifier:   6B:7B:19:80:F1:CB:3B:12:51:A5:28:51:4D:92:6B:D2:58:41:96:5D
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       0F13
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/54C9E530A33C11EF8A87278C762E951A.roa
Signing time:             Fri 15 Nov 2024 10:28:19 +0000
ROA not before:           Fri 15 Nov 2024 10:28:15 +0000
ROA not after:            Fri 15 Nov 2030 10:28:15 +0000
asID:                     33764
IP address blocks:        196.192.114.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3859 (0xf13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Nov 15 10:28:15 2024 GMT
            Not After : Nov 15 10:28:15 2030 GMT
        Subject: CN=67372243-6222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:f5:2f:1a:a1:65:19:fb:99:32:c5:53:39:
                    49:b8:9d:9a:cd:e9:64:91:c3:31:9b:c5:0f:ad:49:
                    d4:71:8a:6d:d0:d0:04:44:01:c7:91:27:0e:9a:e4:
                    2d:5b:56:99:ab:c0:e6:70:70:22:5e:b7:d9:99:3e:
                    78:a6:ef:a1:e5:f9:52:07:85:cc:ea:a0:e5:f9:3f:
                    0f:02:f7:cc:90:1f:70:b0:62:65:5a:ed:65:20:a2:
                    aa:74:fc:5f:41:90:01:dc:a1:b4:52:31:bc:06:e8:
                    16:2e:06:ea:35:7e:3a:67:8a:4a:52:cb:82:f1:51:
                    4f:d0:84:93:c0:6f:3d:79:f9:e1:d8:d0:02:9e:a4:
                    c4:12:eb:48:0d:c8:cd:d0:26:af:b9:ee:44:10:f1:
                    79:9f:d3:20:1b:d0:31:bf:e0:49:13:ea:ed:94:8d:
                    ce:21:63:fc:f7:4a:73:a6:7c:37:0b:ce:5c:ce:3c:
                    4d:f0:09:00:ba:74:e5:9d:a7:e0:b3:62:8f:b8:5c:
                    b5:85:cb:23:e3:e2:70:9a:97:ca:7a:c6:8f:01:ee:
                    8e:0a:50:83:de:08:3c:7e:bc:25:c1:3a:34:7f:de:
                    44:ef:55:f7:7e:cb:90:3b:7a:32:67:fb:69:62:92:
                    54:1a:d1:0f:5b:68:a9:66:4d:14:20:2f:0c:e7:14:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7B:19:80:F1:CB:3B:12:51:A5:28:51:4D:92:6B:D2:58:41:96:5D
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/54C9E530A33C11EF8A87278C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.192.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:c4:22:b9:ad:f1:d7:b2:3b:ee:c8:51:3b:d4:89:a4:59:
         59:ba:3d:fa:6c:33:d4:93:c9:70:1e:30:3c:1b:79:c8:35:9c:
         d5:61:fa:35:e6:26:8a:51:ec:4b:e1:b6:be:b9:9c:42:d1:c1:
         b8:00:d0:c5:b3:b1:a1:46:0f:a6:7f:ac:52:fa:9b:5c:85:a2:
         7b:93:dd:03:43:13:0a:45:51:4c:0a:9d:01:3d:b2:8f:5a:56:
         58:49:82:5d:e6:15:d2:70:f1:2e:00:fe:82:91:05:59:d6:11:
         3a:e3:94:e5:48:36:ea:93:e1:f2:29:d4:d8:f7:d5:e1:ef:0a:
         0e:fa:e1:fd:ea:a7:00:ba:f9:77:ef:b5:8e:49:79:15:b7:cc:
         ff:20:84:88:f9:eb:30:95:23:17:5c:29:db:e4:25:90:81:b7:
         2b:96:88:ff:b5:c1:cd:04:68:85:18:ec:7a:eb:61:9b:16:72:
         74:10:e0:76:eb:0d:e6:83:93:09:98:f1:88:c5:13:d2:28:3f:
         18:53:a6:91:e8:5e:09:ae:62:20:00:31:be:24:db:5f:e2:86:
         2f:b8:79:10:eb:ac:d7:20:b1:33:77:b6:95:38:da:3f:48:45:
         9b:71:d9:c5:43:d9:34:da:52:15:de:16:56:7d:40:61:85:27:
         67:27:05:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzREMjJBRjExMC8GA1UEBRMoOEQwMUQ4MDhFODk3NzQ1NDNERTIyRDBEQTg0NDM3
OEVDRUE4QkI5QjAeFw0yNDExMTUxMDI4MTVaFw0zMDExMTUxMDI4MTVaMBgxFjAU
BgNVBAMTDTY3MzcyMjQzLTYyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTnfUvGqFlGfuZMsVTOUm4nZrN6WSRwzGbxQ+tSdRxim3Q0AREAceRJw6a
5C1bVpmrwOZwcCJet9mZPnim76Hl+VIHhczqoOX5Pw8C98yQH3CwYmVa7WUgoqp0
/F9BkAHcobRSMbwG6BYuBuo1fjpnikpSy4LxUU/QhJPAbz15+eHY0AKepMQS60gN
yM3QJq+57kQQ8Xmf0yAb0DG/4EkT6u2Ujc4hY/z3SnOmfDcLzlzOPE3wCQC6dOWd
p+CzYo+4XLWFyyPj4nCal8p6xo8B7o4KUIPeCDx+vCXBOjR/3kTvVfd+y5A7ejJn
+2liklQa0Q9baKlmTRQgLwznFJs5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUa3sZ
gPHLOxJRpShRTZJr0lhBll0wHwYDVR0jBBgwFoAUjQHYCOiXdFQ94i0NqEQ3js6o
u5swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4QUVBMjI4L2pRSFlD
T2lYZEZROTRpME5xRVEzanM2b3U1cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pRSFlDT2lYZEZROTRpME5xRVEzanM2b3U1cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4
QUVBMjI4LzU0QzlFNTMwQTMzQzExRUY4QTg3Mjc4Qzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHEwHIwDQYJKoZIhvcNAQEL
BQADggEBAFyIxCK5rfHXsjvuyFE71ImkWVm6PfpsM9STyXAeMDwbecg1nNVh+jXm
JopR7Evhtr65nELRwbgA0MWzsaFGD6Z/rFL6m1yFonuT3QNDEwpFUUwKnQE9so9a
VlhJgl3mFdJw8S4A/oKRBVnWETrjlOVINuqT4fIp1Nj31eHvCg764f3qpwC6+Xfv
tY5JeRW3zP8ghIj56zCVIxdcKdvkJZCBtyuWiP+1wc0EaIUY7HrrYZsWcnQQ4Hbr
DeaDkwmY8YjFE9IoPxhTppHoXgmuYiAAMb4k21/ihi+4eRDrrNcgsTN3tpU42j9I
RZtx2cVD2TTaUhXeFlZ9QGGFJ2cnBfQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:53 2024 by rpki-client on console-ams.rpki-client.org