Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/B44578A803B411EF95522E17017001B1.roa
File:                     B44578A803B411EF95522E17017001B1.roa (raw, json)
Hash identifier:          936Q411o1qc4pT0Zx9jhIXN0Wgiyr6no0KJUyaCEE/c=
Subject key identifier:   C1:8C:D1:91:90:3D:0C:08:FF:1A:C3:C4:5D:65:DE:52:30:21:CE:8A
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       01D5
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/B44578A803B411EF95522E17017001B1.roa
Signing time:             Fri 26 Apr 2024 10:06:53 +0000
ROA not before:           Fri 26 Apr 2024 10:06:49 +0000
ROA not after:            Thu 30 Apr 2043 10:06:49 +0000
asID:                     30988
IP address blocks:        196.200.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Apr 26 10:06:49 2024 GMT
            Not After : Apr 30 10:06:49 2043 GMT
        Subject: CN=662b7cbd-934c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:6a:85:51:13:42:a7:ef:3c:d0:cd:b7:be:
                    1b:cb:b9:a6:f4:3a:5b:c9:4f:c7:db:72:84:52:d8:
                    97:30:17:22:df:a2:6f:2a:24:e2:21:34:84:ae:ca:
                    ad:e9:4c:06:b2:03:03:08:79:76:9e:8d:40:3b:76:
                    75:f7:cd:ea:d4:d8:5a:78:10:da:3d:24:c7:e8:36:
                    5a:dd:fa:28:c5:5d:8f:70:2a:6d:81:ef:54:24:88:
                    1d:50:86:d6:e5:74:a5:20:81:fa:d3:8d:3c:06:20:
                    94:7f:bd:ee:d0:7a:cb:42:38:2f:a6:d1:8c:94:95:
                    06:8e:56:65:1d:97:54:6d:bc:7d:e0:e5:fd:f1:cf:
                    24:ff:2b:d2:94:8e:bb:47:c7:af:08:cc:ac:c4:e1:
                    88:f4:3d:0e:bb:07:c2:96:86:de:02:13:01:5d:d6:
                    e9:ac:13:a7:6c:e4:ea:71:5b:09:ed:4d:b2:eb:8f:
                    83:2f:24:44:24:4d:cc:ad:f6:7c:6a:1b:11:0a:04:
                    25:06:8e:08:16:08:6f:53:4d:09:3e:94:79:bb:cd:
                    4e:de:d3:87:58:38:23:e7:d2:8c:54:6c:7c:e7:9d:
                    1d:73:29:cc:43:91:19:97:2c:6a:df:03:34:2a:00:
                    53:e3:e3:57:bc:e4:99:7d:9c:97:b0:a6:e0:4f:1a:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:D1:91:90:3D:0C:08:FF:1A:C3:C4:5D:65:DE:52:30:21:CE:8A
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/B44578A803B411EF95522E17017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.200.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:61:da:cf:ea:7e:27:af:44:ee:cb:2d:b9:bf:6f:d6:04:16:
         0e:53:1b:e7:e8:e6:88:e7:42:99:ff:87:77:94:f5:60:ee:f3:
         1a:a7:d9:e0:4d:64:a3:c4:3c:fb:49:40:9a:b1:77:40:cb:51:
         73:f2:08:b5:cb:19:a5:62:d0:46:39:da:ea:79:6f:d9:5f:ad:
         91:4f:86:68:c1:4c:f6:bd:d0:0f:3a:14:c7:20:8f:93:dd:e4:
         cb:7b:58:c7:9d:bf:45:a7:db:ab:40:5a:92:dd:94:75:49:69:
         c6:67:f7:f1:b0:c2:a2:05:24:56:53:ba:43:09:0d:3f:d0:1a:
         6e:b8:a7:ed:fa:b3:ee:49:2a:d9:8d:fd:fc:7a:76:29:79:80:
         14:52:5c:a1:f4:ee:8d:4c:7b:49:be:11:5b:c9:70:50:81:8c:
         eb:ca:6e:7a:fa:d0:bd:5a:66:9c:19:a6:65:00:0c:fe:ff:53:
         a9:57:e0:27:04:a8:fc:be:64:89:65:a6:eb:e9:4a:98:74:40:
         4a:c8:57:3d:67:93:0d:cd:a1:e0:81:21:9a:5e:35:24:c0:06:
         14:81:71:33:cc:de:0d:cc:a0:0f:e5:e2:c8:49:9c:8e:5a:7a:
         42:0d:25:14:40:64:e0:72:ca:4e:e0:82:85:01:e5:08:d4:bc:
         c1:f0:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:20 2024 by rpki-client on console-fra.rpki-client.org