Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/E75E05A46D2111EE8C23411E4AD9E6FC.roa
File:                     E75E05A46D2111EE8C23411E4AD9E6FC.roa (raw, json)
Hash identifier:          0O/BSVMJx3QcGl9pStzGQl0Z9gUsbCg2cUHJG/Fu70k=
Subject key identifier:   68:E1:EE:EA:06:E6:96:F9:64:C2:70:14:7D:31:8F:1F:D5:F2:95:A4
Certificate issuer:       /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial:       043C
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/E75E05A46D2111EE8C23411E4AD9E6FC.roa
Signing time:             Tue 17 Oct 2023 19:18:08 +0000
ROA not before:           Tue 17 Oct 2023 19:18:03 +0000
ROA not after:            Tue 17 Oct 2028 19:18:03 +0000
asID:                     37619
IP address blocks:        41.197.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
        Validity
            Not Before: Oct 17 19:18:03 2023 GMT
            Not After : Oct 17 19:18:03 2028 GMT
        Subject: CN=652eddf0-b382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:85:99:76:81:38:9d:6c:18:86:91:e8:92:
                    da:38:08:99:86:71:5d:5a:27:54:72:db:f7:db:e7:
                    59:b8:dc:cb:55:d1:75:0f:93:32:c4:22:5b:f8:ce:
                    44:b1:b5:05:d3:9f:9f:18:65:8d:fd:ce:95:49:10:
                    6e:3e:f5:55:1c:41:9a:e9:a4:03:7a:90:80:77:74:
                    9a:45:87:d7:ee:89:82:43:cb:bf:a9:ff:52:61:3b:
                    f6:f9:c9:23:34:0a:d2:f8:9c:4c:ca:0c:ec:19:d3:
                    ae:70:21:51:64:a8:d8:90:30:09:b0:c8:28:c2:be:
                    35:aa:77:bd:50:8b:2f:08:95:e7:31:44:5d:13:c8:
                    6d:87:20:92:46:bb:20:f8:03:cc:fa:0b:a8:de:d4:
                    76:d9:bc:47:2d:d3:0f:32:84:30:95:79:06:28:66:
                    02:ba:fa:94:65:b8:e5:b2:0b:5d:f9:5b:3c:e2:8f:
                    52:aa:2d:82:cc:e0:ca:c0:8a:cc:f7:48:3f:ec:21:
                    ae:4c:b3:7b:e5:f9:5d:6d:df:e9:aa:78:e4:1a:2b:
                    7f:95:90:00:63:3d:18:85:1e:ab:83:8f:0e:ae:92:
                    44:3c:e6:b2:43:c6:c0:b8:d6:4e:ee:40:4d:06:e0:
                    97:26:5f:54:26:9c:40:a9:5e:e4:86:1a:93:e6:74:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E1:EE:EA:06:E6:96:F9:64:C2:70:14:7D:31:8F:1F:D5:F2:95:A4
            X509v3 Authority Key Identifier:
                keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/E75E05A46D2111EE8C23411E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.197.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:d9:a5:05:5f:22:7b:d8:d9:73:79:9d:fe:eb:65:a4:20:3d:
         17:8d:39:ef:b4:90:cc:4e:dd:90:fc:dd:6f:a1:bd:29:5e:aa:
         c9:e4:ed:48:01:2c:83:fd:ef:84:90:ba:91:b5:52:1d:9f:91:
         b7:97:2f:52:7a:d4:23:fc:a9:84:0b:75:ad:6e:12:57:88:7c:
         4b:6f:33:07:06:e3:eb:53:7f:a2:ab:f8:92:e2:49:de:a7:6f:
         6d:bc:6c:9b:4d:af:65:ac:26:7d:5e:a6:7c:b9:c8:a2:ea:61:
         22:40:3c:9c:82:b6:f2:a7:56:58:69:f0:d9:a0:af:d4:f6:a4:
         5b:70:ef:0b:f0:b8:cd:c0:e6:db:e3:a6:e1:1f:d1:64:bf:75:
         ec:cd:8a:8e:f2:93:d4:e3:a7:c5:8e:e7:9d:cf:c8:de:be:73:
         4d:a5:e8:3b:bf:87:43:58:e8:5e:43:90:e4:fa:88:f5:ed:8e:
         4c:18:5b:41:6f:87:b0:89:4c:f7:d5:8e:11:af:fb:7f:7c:5c:
         f6:24:08:57:35:28:3d:72:a7:5c:8f:37:dc:9b:82:72:a6:aa:
         3e:48:8b:9b:ad:fd:8d:56:29:b0:68:0c:05:d6:4e:2e:3a:ac:
         9f:f2:4c:43:b3:c6:9d:41:40:e4:c4:f4:89:77:dc:2c:d3:5a:
         e1:db:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:46 2024 by rpki-client on console-fra.rpki-client.org