Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/FAEBDC4803B411EFB029601B017001B1.roa
File:                     FAEBDC4803B411EFB029601B017001B1.roa (raw, json)
Hash identifier:          xzzx0ugjkRS9PYdo0KLQ7+H2uxfJ0K+cSqgvb2XnuPk=
Subject key identifier:   69:21:EB:59:D2:D2:C7:D5:51:67:5D:72:F6:23:06:1F:76:5D:4B:66
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       01D9
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/FAEBDC4803B411EFB029601B017001B1.roa
Signing time:             Fri 26 Apr 2024 10:08:51 +0000
ROA not before:           Fri 26 Apr 2024 10:08:47 +0000
ROA not after:            Thu 30 Apr 2043 10:08:47 +0000
asID:                     30988
IP address blocks:        196.200.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Apr 26 10:08:47 2024 GMT
            Not After : Apr 30 10:08:47 2043 GMT
        Subject: CN=662b7d33-71ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:75:4a:2b:0c:b5:4d:38:0b:1d:87:33:12:
                    4c:f8:71:c1:81:bb:17:44:56:0b:8f:cd:9c:3c:ee:
                    60:10:d8:d4:f3:ab:64:a1:58:d7:00:e2:de:01:11:
                    a3:61:79:70:b5:37:82:32:60:d9:7c:6d:02:0b:f3:
                    44:06:37:4b:d4:36:11:08:07:d6:f8:21:16:fe:7c:
                    29:c7:24:ff:f7:09:6f:08:96:09:f4:c5:36:e0:37:
                    4b:02:84:c0:48:7d:5e:c4:31:24:80:a2:e7:ed:67:
                    66:57:3f:57:8f:f6:6b:fe:38:f6:23:00:38:3c:74:
                    a1:1a:28:4c:7e:8c:d9:e0:f7:84:78:6d:ad:fb:be:
                    33:ed:28:32:2d:d1:43:6b:96:a7:71:d2:26:47:74:
                    66:66:19:f8:c2:aa:6a:41:d0:29:e3:a1:69:af:85:
                    8d:5d:5a:ca:e2:0c:e8:8d:a9:e2:46:d1:6b:ab:33:
                    00:ef:da:82:45:1c:b0:cb:41:16:06:26:11:6c:0a:
                    ec:f5:ab:db:b9:33:dd:82:b5:91:09:25:ed:cf:38:
                    df:8b:89:90:fe:36:96:1a:f9:43:5f:bc:09:37:6c:
                    db:e8:88:d8:bb:93:35:42:f5:2b:a6:e0:f9:93:a0:
                    e9:96:33:b9:d2:9b:9f:34:ac:b4:4d:72:5c:86:8b:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:21:EB:59:D2:D2:C7:D5:51:67:5D:72:F6:23:06:1F:76:5D:4B:66
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/FAEBDC4803B411EFB029601B017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.200.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:18:a2:5a:20:0f:46:f9:9e:09:da:41:93:aa:df:35:c5:5e:
         f8:ab:cc:85:a0:b0:32:80:e5:3a:ef:ad:43:80:ee:c5:f7:d5:
         85:da:81:2d:0f:81:76:d8:69:c3:06:a2:d1:c4:48:e8:ee:eb:
         24:da:72:d7:ce:66:c3:70:96:3e:49:69:56:3d:f6:5a:ac:2c:
         58:e9:03:95:da:2f:f6:fe:f5:09:19:fc:23:b1:1b:a5:4b:dd:
         69:2a:12:54:11:62:dd:fa:56:43:f5:7a:4d:17:d6:60:27:a6:
         9e:fa:e4:ef:73:83:c6:87:51:a5:a1:3f:2f:14:f3:e0:2d:4e:
         b1:80:36:d5:22:36:aa:3d:e8:0c:62:f7:19:cc:cf:22:f5:b7:
         76:57:56:63:d3:cb:d5:42:2f:7f:89:63:1e:d9:c4:be:39:1c:
         02:2e:e3:d9:c8:f7:06:06:96:58:20:bf:8c:6a:4f:33:93:a6:
         42:aa:ff:8f:d8:ec:b7:5a:07:ab:24:43:44:ae:56:11:9a:ed:
         35:11:c1:67:54:b5:c2:13:c8:23:5f:41:6c:7c:46:86:50:da:
         13:27:7f:fe:c1:b3:e3:28:d1:90:d4:36:2a:49:ce:c9:db:77:
         02:8c:90:7d:8d:bd:02:a6:2f:16:66:f9:27:ac:41:92:33:a9:
         5b:4c:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:53:20 2024 by rpki-client on console-fra.rpki-client.org