Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/D955A76630FE11ECB753D321D8A014CE.roa
File:                     D955A76630FE11ECB753D321D8A014CE.roa (raw, json)
Hash identifier:          xjCeaYd+LKJvUwcXfMZMX504OiVLskv9I2sBgX5AZDo=
Subject key identifier:   F6:FD:10:4B:32:B8:15:F1:B2:4D:DB:B1:E5:7F:E3:21:97:F5:C0:5F
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       C6
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/D955A76630FE11ECB753D321D8A014CE.roa
Signing time:             Tue 19 Oct 2021 17:06:07 +0000
ROA not before:           Tue 19 Oct 2021 17:06:02 +0000
ROA not after:            Sun 19 Oct 2031 17:06:02 +0000
asID:                     36994
IP address blocks:        196.6.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Oct 19 17:06:02 2021 GMT
            Not After : Oct 19 17:06:02 2031 GMT
        Subject: CN=616efaff-0b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:ba:68:bb:71:d4:0c:48:f8:bd:ef:29:a5:
                    9c:85:50:60:6e:68:fa:36:f2:60:61:9b:78:39:d5:
                    30:27:d8:a9:52:00:ae:35:97:d3:b5:7f:eb:6f:78:
                    c7:f7:11:2a:2d:56:ae:9d:69:9b:b8:34:fc:ea:db:
                    d6:00:ed:2a:fe:3c:62:f3:3a:78:95:6c:51:48:31:
                    a9:29:ff:d5:9f:80:a6:f7:26:95:76:d8:2c:74:9e:
                    4d:d5:ed:3a:1b:23:df:6b:aa:e5:02:d9:6f:3f:26:
                    a4:8a:f8:83:23:1f:ce:a4:6e:87:b4:6c:a4:cf:be:
                    36:e5:66:39:cb:c2:7b:bf:4e:cc:c4:bb:1b:84:75:
                    08:b4:46:9d:a5:cc:3e:09:7f:29:c9:e2:66:81:b1:
                    74:ba:81:88:23:32:e4:5a:8d:ec:e0:7c:8f:be:c8:
                    7e:bc:f9:ac:1f:5a:e2:35:76:ae:fa:33:36:f0:9c:
                    64:7b:b5:12:5e:2d:3b:da:f2:c8:73:c7:5a:c4:1f:
                    01:ed:4d:59:b1:0d:3f:24:6f:b8:90:55:72:0a:bb:
                    37:92:5b:10:64:68:9e:2e:b9:69:62:f4:e4:ab:4f:
                    5e:c9:4e:2d:a0:91:f6:1b:cd:da:9b:73:07:6d:56:
                    ce:3b:1f:ea:0d:cd:a8:ef:bc:34:bd:b5:78:c1:a7:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:10:4B:32:B8:15:F1:B2:4D:DB:B1:E5:7F:E3:21:97:F5:C0:5F
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/D955A76630FE11ECB753D321D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.6.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:32:f4:21:38:86:c8:d9:12:56:f8:31:74:c2:a5:9e:58:75:
         07:73:a1:1f:ff:d6:d3:be:69:18:ff:0d:d9:73:62:64:04:be:
         bf:40:7f:79:52:e8:34:55:97:8a:20:37:9a:ec:fb:c5:8a:7a:
         81:7a:2e:ab:fe:65:c6:6a:95:9b:42:0a:bf:9a:85:b0:6a:f0:
         e3:bb:b6:64:de:23:35:26:45:c2:1f:c7:b9:28:52:e2:be:ca:
         12:18:6b:d3:60:76:90:a9:43:f5:03:3a:cc:31:1e:9f:a5:5d:
         0f:c2:77:91:e5:12:e2:6c:2e:86:fc:15:fa:b2:68:d6:cf:1c:
         e4:be:ab:58:d4:e7:c4:2a:ac:15:5e:4c:fe:33:79:7e:f1:a6:
         05:f7:ef:39:14:b4:32:35:fb:5f:34:62:a4:7b:0e:b8:97:49:
         1b:eb:c0:91:ea:5d:c5:6e:33:64:24:dd:b7:71:ca:56:10:86:
         00:ec:25:f7:f9:dd:06:49:32:c7:69:5f:fa:28:32:a5:88:5b:
         b5:16:60:1a:2c:9e:6f:48:bc:25:66:bd:b7:bb:74:ac:43:76:
         aa:cb:7d:07:f2:cb:50:f5:92:e0:9c:5e:2e:94:33:9c:be:ad:
         62:8f:2a:3a:24:b8:66:82:01:51:6a:47:e4:24:f9:b4:a9:4a:
         c7:92:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:30 2024 by rpki-client on console-fra.rpki-client.org