Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/9D413B06934311E9A21F097CF8AEA228.roa
File:                     9D413B06934311E9A21F097CF8AEA228.roa (raw, json)
Hash identifier:          6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=
Subject key identifier:   66:62:32:70:55:BC:DE:8E:F3:AE:DD:2C:EF:D4:A9:1A:6C:2E:DB:6E
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       06
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/9D413B06934311E9A21F097CF8AEA228.roa
Signing time:             Thu 20 Jun 2019 10:10:23 +0000
ROA not before:           Fri 21 Jun 2019 10:10:16 +0000
ROA not after:            Sat 18 Jun 2039 10:10:16 +0000
asID:                     6968
IP address blocks:        196.216.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Jun 21 10:10:16 2019 GMT
            Not After : Jun 18 10:10:16 2039 GMT
        Subject: CN=5d0b5b8e-36c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:f0:0b:fe:a5:10:d1:1c:3a:45:1d:f7:a3:
                    bf:44:2d:95:67:cd:c6:25:79:4d:7a:d7:f8:d5:5f:
                    5f:da:32:1e:56:ac:07:af:54:fb:e0:ca:a0:e9:71:
                    5e:fc:1a:d4:64:0a:b1:2f:22:2c:94:36:eb:97:8c:
                    fa:90:05:c8:c6:2d:a6:96:cf:96:37:47:c1:90:1f:
                    37:b3:b7:51:de:a9:ac:6d:54:32:b0:7a:e0:38:75:
                    d1:3d:b4:03:71:01:e6:c6:a7:fb:b1:69:4f:d0:21:
                    39:13:78:ef:1d:01:6e:ad:e1:99:36:9e:c9:8a:67:
                    fb:4f:6a:ab:7f:5e:8c:d7:70:a7:3f:1c:32:47:d3:
                    a1:d2:21:ae:bd:8f:8f:5b:70:c7:a9:35:6c:67:b1:
                    60:a4:23:24:3c:22:6f:f9:dc:3d:f5:57:76:b2:82:
                    7b:3d:c9:a8:3b:31:35:cd:0b:ba:e0:b5:17:3f:56:
                    03:52:35:2e:75:ce:1f:06:0a:7e:9d:44:a7:b6:43:
                    a2:59:10:0e:1d:c0:eb:90:f8:ee:14:c1:22:de:a6:
                    6d:13:42:75:2d:08:f2:af:e0:9e:bd:f4:6c:00:f8:
                    ca:eb:35:d2:49:a1:c4:ce:d4:7f:ae:ec:86:d2:69:
                    1a:22:d4:62:09:98:ba:b8:29:7c:87:92:b6:d9:56:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:62:32:70:55:BC:DE:8E:F3:AE:DD:2C:EF:D4:A9:1A:6C:2E:DB:6E
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/9D413B06934311E9A21F097CF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:19:14:14:c2:98:d5:bb:69:d9:14:4b:be:83:4f:fe:b3:
         ad:3f:8d:ac:61:df:3a:d1:d6:aa:0d:74:0e:88:3b:73:0c:35:
         0c:aa:8c:54:ba:da:e1:91:41:88:91:14:13:ff:49:98:be:1e:
         f8:72:98:8a:ce:e4:b7:c6:1c:1f:0f:25:8f:9a:81:62:e0:51:
         a6:8b:6e:9c:28:aa:b7:f1:d5:a9:83:f6:a5:40:cf:a3:e0:d8:
         11:83:33:74:20:67:86:71:ca:74:34:08:8a:c3:5c:10:d3:e9:
         13:9d:97:c6:fd:21:a8:35:95:30:a2:43:6f:00:a2:ad:dd:f5:
         47:6e:de:f7:37:99:32:0a:bc:f8:07:1e:7d:a9:91:cb:67:28:
         7e:39:9c:96:1f:3b:b5:52:89:fa:65:e3:d5:bc:48:44:93:0b:
         a0:e6:b9:02:fd:8d:7d:25:22:e1:c9:74:cf:fa:26:c9:e8:44:
         80:ab:66:dd:89:b4:4e:83:02:1f:15:0e:1c:bb:e0:28:d7:ab:
         45:6e:e8:b3:00:a9:e7:e4:76:dd:50:1f:c7:7a:51:e8:14:28:
         5a:19:57:e5:d6:37:46:2c:2d:42:bb:04:f1:1a:da:81:d0:45:
         47:1f:33:a2:24:1a:6b:0a:75:24:b1:15:e6:dc:b1:b8:70:c1:
         5c:37:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:21 2024 by rpki-client on console-ams.rpki-client.org