Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C0EB9FDABCCF11EB9233FF7CF8AEA228.roa
File:                     C0EB9FDABCCF11EB9233FF7CF8AEA228.roa (raw, json)
Hash identifier:          jzFVYd0erg1QJC14ZDjAWIWMT7CCItSDttGen7J63Cc=
Subject key identifier:   CB:5D:F7:F1:17:E4:AC:FC:75:80:03:07:E2:3F:6C:C2:4B:50:CB:EA
Certificate issuer:       /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial:       0156
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C0EB9FDABCCF11EB9233FF7CF8AEA228.roa
Signing time:             Mon 24 May 2021 20:36:45 +0000
ROA not before:           Mon 24 May 2021 20:36:38 +0000
ROA not after:            Fri 24 May 2041 20:36:38 +0000
asID:                     3741
IP address blocks:        196.28.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
        Validity
            Not Before: May 24 20:36:38 2021 GMT
            Not After : May 24 20:36:38 2041 GMT
        Subject: CN=60ac0e5c-c4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:23:c9:3c:00:09:fb:4a:df:71:06:27:b7:eb:
                    70:7b:f9:7e:21:02:4b:64:52:44:b9:fa:45:46:95:
                    f7:42:46:0f:6e:11:79:d8:0d:11:3d:6a:52:d2:ce:
                    b1:a9:95:ee:ea:23:1e:46:f7:a7:d7:a8:03:ea:b3:
                    83:41:25:ce:10:58:5f:6b:dc:40:aa:dc:1a:66:43:
                    f1:46:65:07:66:1a:b3:5c:1c:65:b4:dc:95:08:8d:
                    91:cc:c0:88:c6:58:44:19:34:78:25:c2:c3:4f:08:
                    c6:5a:57:e0:3b:5c:50:d9:e8:85:f6:5d:2c:5b:61:
                    03:e9:b3:b3:a2:f7:b3:06:89:5d:fc:20:bb:1e:bf:
                    cf:8c:a4:74:e9:d3:5d:23:d0:86:96:0f:6e:db:cf:
                    8a:a2:8b:22:03:43:87:32:64:01:d2:0b:54:02:30:
                    4e:98:e1:1b:bc:35:33:d7:b0:10:56:7d:e3:fe:eb:
                    21:09:d2:60:78:0a:e6:50:b6:2e:c2:05:2a:6f:b6:
                    a7:72:26:98:cc:de:a4:ae:e2:51:5d:92:7e:97:fb:
                    04:ea:f9:06:fa:73:f4:8c:f7:1b:f8:01:88:bb:5b:
                    47:f1:71:4e:04:ae:20:4b:99:d1:98:d1:74:c2:64:
                    b4:ec:f8:59:e2:3b:e7:33:bf:ae:d1:31:37:29:84:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5D:F7:F1:17:E4:AC:FC:75:80:03:07:E2:3F:6C:C2:4B:50:CB:EA
            X509v3 Authority Key Identifier:
                keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C0EB9FDABCCF11EB9233FF7CF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.28.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:98:9d:b2:57:97:70:c9:a0:04:98:34:3d:a9:09:83:96:
         57:32:ff:b8:40:8d:8a:e4:f9:d6:9d:5f:1e:ca:9e:7a:0d:05:
         7b:e0:45:a2:1d:19:63:46:08:8c:34:d3:7b:66:50:e0:19:08:
         f4:87:95:e1:6b:c5:ca:1e:29:1b:ae:8b:62:82:4b:40:18:fb:
         8d:d1:41:2b:64:54:8d:a4:dc:4c:d2:d3:47:65:75:89:1a:6c:
         eb:bb:b2:2a:c1:73:75:d1:58:7f:e5:40:52:6e:33:16:aa:63:
         e1:e0:d6:f6:fa:d1:cf:bf:fb:f4:cf:8a:3f:cf:8f:0f:71:f2:
         3d:08:ee:a4:70:cc:bd:69:e9:59:54:b9:ed:62:ab:a2:54:99:
         6b:0b:7c:fc:7b:7a:f3:46:69:db:fb:36:3a:58:2a:97:67:26:
         32:cb:5a:2c:2c:cc:04:80:93:30:8d:de:06:42:a1:75:ca:f1:
         27:35:cf:4e:26:23:44:ec:d5:bb:3d:a3:2b:e8:4d:ac:9e:74:
         6a:2c:41:4c:7a:0c:7a:39:b9:c6:59:a7:d7:c5:bf:a7:af:1a:
         eb:bf:db:12:a6:35:9d:b1:07:bb:a6:4b:2c:ba:a6:5c:a2:85:
         47:92:65:8b:24:38:7c:4a:ba:e8:8a:51:06:4f:01:9c:84:32:
         68:35:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org