Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/673B2F8862F511EC91DC27A45A40D577.roa
File:                     673B2F8862F511EC91DC27A45A40D577.roa (raw, json)
Hash identifier:          0d9YkFjEuxu+gB44eV3Kl8jLwEZioVfOhFukLTXqqJo=
Subject key identifier:   E5:46:7C:6D:00:16:D9:F0:A5:84:7A:61:26:95:91:B8:9D:FD:2A:62
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       0274
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/673B2F8862F511EC91DC27A45A40D577.roa
Signing time:             Wed 22 Dec 2021 07:04:28 +0000
ROA not before:           Wed 22 Dec 2021 07:04:24 +0000
ROA not after:            Wed 31 Dec 2031 07:04:24 +0000
asID:                     19905
IP address blocks:        197.176.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Dec 22 07:04:24 2021 GMT
            Not After : Dec 31 07:04:24 2031 GMT
        Subject: CN=61c2cdfc-f449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:40:98:e9:2f:18:0b:c3:4b:70:b7:a7:02:
                    8b:11:1d:93:9d:7c:fd:a5:e7:80:90:85:d0:be:9c:
                    a2:42:1b:f2:f7:95:97:43:d7:27:07:56:62:b3:20:
                    75:22:f6:52:01:a2:e1:88:71:34:b2:3f:47:56:93:
                    8f:f9:88:24:3a:6e:df:bd:3c:cc:49:04:a1:45:8f:
                    26:c6:c0:f1:68:4b:b4:2f:cc:f0:49:1f:50:3b:44:
                    cc:2f:68:8b:85:90:02:8f:81:ee:e3:96:da:2a:61:
                    9c:9e:25:58:4e:ea:4e:6e:1f:ef:30:c3:83:31:58:
                    3e:9d:46:64:52:e3:87:11:24:76:2f:30:a7:9e:57:
                    0b:2a:f4:4a:d9:3f:31:3f:2e:c4:4d:49:fd:93:fc:
                    44:02:f6:30:70:44:c1:4b:1c:1d:44:24:e9:56:16:
                    0c:a2:27:03:e8:15:1f:b7:3b:80:0c:e7:ba:30:c2:
                    7e:f0:52:02:b4:e0:f8:41:c4:4b:31:85:45:e5:58:
                    9a:ce:4f:04:66:53:32:2c:54:ab:41:f0:2a:7d:fb:
                    f3:69:2c:57:98:19:16:60:b0:b9:13:84:cd:f4:f9:
                    96:07:6d:cc:46:c7:91:a5:71:e3:28:63:10:b3:7f:
                    38:49:2d:cf:9d:0f:d7:db:76:de:1d:f1:75:85:e5:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:7C:6D:00:16:D9:F0:A5:84:7A:61:26:95:91:B8:9D:FD:2A:62
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/673B2F8862F511EC91DC27A45A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.176.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:fa:ce:92:d7:7d:ff:ff:fe:54:22:e5:76:04:8c:9b:9d:
         4c:c9:96:62:d3:e0:4e:3b:2f:3f:68:5e:52:81:37:eb:63:4a:
         b5:53:22:68:86:d7:d8:d2:92:17:d5:40:6e:3e:cb:8d:f7:fa:
         3f:c2:70:68:c7:d6:cf:75:59:b7:35:87:60:90:8a:17:ad:d7:
         43:a1:bf:3c:13:aa:cf:ed:5f:60:05:5f:10:f5:c1:68:27:24:
         7c:15:e0:dd:49:51:9b:f0:8c:ee:2c:00:9a:1a:05:bd:e4:2e:
         18:39:39:97:98:3c:36:77:1f:78:18:90:10:86:ed:81:f9:71:
         72:38:49:2f:3c:e4:44:19:27:6c:41:ed:8b:5d:bc:62:a9:1b:
         37:ae:36:bb:6c:83:8c:26:a1:2b:8b:8e:b1:39:5c:6e:b7:4b:
         08:8a:d8:32:05:3a:bc:ba:84:aa:00:e5:8e:d5:f5:29:e6:44:
         c0:b2:db:32:83:fd:27:6f:68:9d:94:24:1f:30:47:9c:2a:dc:
         22:61:3a:70:e3:a0:36:b9:63:60:2c:50:9b:ed:19:0e:e7:4f:
         1a:28:3d:3a:ae:56:84:4a:85:22:2a:d6:9f:24:48:51:e2:ce:
         b8:bd:68:61:60:87:3d:a6:87:0e:75:79:e2:a7:bd:3d:4f:af:
         bd:5e:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:03:43 2024 by rpki-client on console-fra.rpki-client.org