Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/D3006436676211EEA91C94534AD9E6FC.roa
File:                     D3006436676211EEA91C94534AD9E6FC.roa (raw, json)
Hash identifier:          w89c/LfvYKtXhwSf2AclM6hy6f8BEt96tqB+gW/yOAc=
Subject key identifier:   D6:DD:50:BA:1A:E9:C6:4D:37:26:77:76:4C:17:A2:D7:35:33:19:F1
Certificate issuer:       /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial:       E0
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/D3006436676211EEA91C94534AD9E6FC.roa
Signing time:             Tue 10 Oct 2023 11:47:44 +0000
ROA not before:           Tue 10 Oct 2023 11:47:41 +0000
ROA not after:            Fri 10 Oct 2025 11:47:41 +0000
asID:                     15964
IP address blocks:        195.24.192.0/19 maxlen: 19
                          195.24.192.0/24 maxlen: 24
                          195.24.193.0/24 maxlen: 24
                          195.24.194.0/24 maxlen: 24
                          195.24.210.0/24 maxlen: 24
                          195.24.211.0/24 maxlen: 24
                          195.24.212.0/24 maxlen: 24
                          195.24.213.0/24 maxlen: 24
                          195.24.215.0/24 maxlen: 24
                          195.24.216.0/24 maxlen: 24
                          195.24.217.0/24 maxlen: 24
                          195.24.219.0/24 maxlen: 24
                          195.24.220.0/24 maxlen: 24
                          195.24.222.0/24 maxlen: 24
                          195.24.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
                          rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
        Validity
            Not Before: Oct 10 11:47:41 2023 GMT
            Not After : Oct 10 11:47:41 2025 GMT
        Subject: CN=652539e0-bd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:c9:fb:b4:cb:fd:08:d3:d3:13:b8:3b:f8:
                    d5:e2:01:fc:fc:99:77:60:3a:c4:0a:77:ab:72:41:
                    34:5d:1b:5c:16:ef:c5:6a:ad:a1:5b:56:66:33:13:
                    cd:7a:ae:51:64:09:03:fb:aa:84:b0:e1:18:46:99:
                    bf:8b:21:39:67:d9:97:5f:c4:3c:9e:2b:a1:c5:79:
                    8b:14:d9:ae:15:c9:2d:48:74:8e:df:7c:4f:b9:91:
                    00:d2:0f:d3:c6:ca:ae:de:c4:04:38:f4:e9:d0:18:
                    67:76:fc:32:44:f5:e3:de:84:a7:53:98:9f:2d:b1:
                    22:1f:8e:69:66:48:86:a6:99:34:95:bb:50:e0:46:
                    f0:69:6f:09:eb:22:a6:d8:5e:7f:99:3f:f5:8a:36:
                    28:76:98:ce:1f:a8:a4:eb:e1:45:c1:00:a9:b6:7c:
                    d5:69:fe:6d:a5:35:e1:ac:0d:ad:db:f4:c0:62:ca:
                    b4:8a:8c:1f:7b:c5:48:bc:59:02:f2:6e:3b:4b:b3:
                    52:24:e3:50:3b:fc:29:93:e9:3f:a5:0c:bf:68:20:
                    20:1e:50:d5:88:68:0f:a2:94:f8:3d:a1:09:70:85:
                    54:ff:e9:aa:79:54:eb:d1:b9:98:cc:39:ee:ef:44:
                    4e:7d:e9:9d:1f:c1:68:83:36:3a:b1:9a:32:22:94:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:50:BA:1A:E9:C6:4D:37:26:77:76:4C:17:A2:D7:35:33:19:F1
            X509v3 Authority Key Identifier:
                keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/D3006436676211EEA91C94534AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.24.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:b6:de:bd:3c:ef:7b:93:6b:8a:3f:dc:fd:2d:81:e5:2a:
         f0:3c:ad:90:25:0c:c6:12:d1:44:c1:d3:42:d3:f7:41:6c:d2:
         60:76:3d:93:df:05:d8:91:1e:96:6f:e8:43:69:f9:55:76:6f:
         10:0b:26:22:c4:36:e2:4d:6f:30:52:2a:34:3c:b1:db:da:ff:
         33:ab:e0:0f:ba:ab:e4:e7:d9:f6:e1:91:b3:33:5c:9a:6c:47:
         9f:c1:b3:42:d9:cc:b4:db:88:7a:e5:65:f3:c4:b2:c4:9a:3c:
         ba:c5:69:dc:c3:da:0e:6e:42:1e:9a:8f:b8:c9:e9:1a:57:e7:
         b3:64:27:50:ee:ae:ff:c6:f7:e2:0c:5d:ed:af:23:f1:7c:c3:
         52:2d:28:3c:c2:fd:af:89:a1:d9:24:53:bc:e2:d7:26:68:3e:
         86:19:f8:94:34:0b:40:55:b5:b1:67:4f:38:fa:92:d5:27:8a:
         d9:fb:81:64:c1:ce:aa:2c:b1:fc:83:88:2d:7a:1c:d9:b1:b1:
         e2:9a:49:d1:db:c2:94:64:63:98:30:ee:0c:ab:20:fd:25:b7:
         06:57:08:a6:eb:97:e9:99:3c:50:be:01:2e:0d:6c:0b:e5:95:
         b8:97:4b:6f:0c:75:a3:9d:d1:fb:0d:1d:52:bd:e1:4d:c9:96:
         05:c6:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:14 2024 by rpki-client on console-ams.rpki-client.org