Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/548444FC886811E9ADF34468F8AEA228.roa
File:                     548444FC886811E9ADF34468F8AEA228.roa (raw, json)
Hash identifier:          1UElPZRMsw/FlEPeVKGSteHH7UZ+xvNvTZQ/F+SkwW4=
Subject key identifier:   51:ED:E2:95:3A:24:D6:A1:A8:8F:1F:36:99:66:7E:60:7D:88:D6:25
Certificate issuer:       /CN=F36AA888AF/serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
Certificate serial:       06
Authority key identifier: 22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/548444FC886811E9ADF34468F8AEA228.roa
Signing time:             Thu 06 Jun 2019 14:35:32 +0000
ROA not before:           Thu 06 Jun 2019 14:35:24 +0000
ROA not after:            Wed 06 Jun 2029 14:35:24 +0000
asID:                     327824
IP address blocks:        2c0f:f7b8::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AF/serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
        Validity
            Not Before: Jun  6 14:35:24 2019 GMT
            Not After : Jun  6 14:35:24 2029 GMT
        Subject: CN=5cf924b4-2d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:9e:58:ba:19:ed:d6:4b:79:98:4f:0d:bb:
                    3a:f6:ba:76:bd:c8:47:b5:72:ef:30:ed:e9:2d:d2:
                    01:bf:5a:55:a3:da:8f:2b:2c:1e:a2:23:b1:11:ea:
                    f1:26:ef:d6:2d:77:5c:74:7e:cf:2c:74:b3:be:13:
                    ac:7f:25:c2:d0:b1:bd:c9:a4:65:c8:2c:d5:58:bf:
                    22:65:34:ea:22:e2:a1:29:78:33:17:6d:d7:90:9b:
                    1c:8e:79:84:be:0a:a1:fa:c6:38:55:b4:76:68:b3:
                    f5:9e:3f:fb:c2:71:47:69:30:19:ad:6b:96:dc:02:
                    49:c5:07:e0:95:56:06:17:36:c0:02:1b:8b:f7:d2:
                    ad:5f:c3:e8:b1:8d:7a:8a:d4:b7:ef:b5:cc:3e:32:
                    b2:58:ad:67:01:2c:7d:02:5e:07:f5:f9:9b:4d:c8:
                    38:fd:86:50:f9:0c:db:65:8c:6e:fa:b5:f2:0e:f7:
                    b7:fd:5b:54:18:c6:83:3f:3d:f1:db:70:50:51:10:
                    e2:74:ec:83:a0:de:d5:d7:46:37:1a:14:77:61:43:
                    c8:41:7d:22:37:66:88:a0:db:25:cc:a4:c9:e7:e5:
                    2b:0b:7c:9c:15:3f:f6:d0:c9:cf:c7:3c:37:f3:61:
                    b1:11:e0:7b:9a:0d:2f:00:3f:64:d4:37:36:84:a0:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:ED:E2:95:3A:24:D6:A1:A8:8F:1F:36:99:66:7E:60:7D:88:D6:25
            X509v3 Authority Key Identifier:
                keyid:22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/548444FC886811E9ADF34468F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f7b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:fc:68:38:da:7e:7b:9c:47:84:bf:ad:52:c7:a8:31:37:b8:
         92:dc:4e:c7:d4:94:80:30:39:5a:85:2b:9e:49:86:81:8f:f2:
         cb:b6:9d:41:b9:43:5f:be:d1:32:13:af:e5:7f:3a:60:44:78:
         42:8e:1b:8c:b1:f9:9f:99:b7:df:16:45:62:af:22:ea:9a:92:
         f3:54:32:88:59:e9:ce:3c:d9:bf:82:19:e1:fb:95:65:8f:59:
         8b:5f:78:9b:3c:06:05:ba:ea:e2:4f:5f:16:c2:0b:ed:9e:8b:
         a9:4c:9e:ac:f7:69:80:10:d1:43:ec:d8:d0:ec:1d:9b:4b:94:
         80:f4:39:7d:4b:36:a1:0f:c9:13:b7:63:3f:7a:3e:c1:7f:b0:
         fd:61:cd:9b:ac:9f:00:47:73:fb:ab:3f:c1:07:a3:c2:0a:04:
         89:bd:ad:24:13:d2:23:6c:03:b4:47:cf:0b:8f:85:e8:ef:d5:
         3d:c8:24:80:a6:a0:77:ca:53:0e:98:19:c9:2c:0c:08:52:f1:
         57:3d:c8:80:ea:9b:22:ce:78:7d:5a:d0:ec:45:f9:3c:1d:ab:
         b4:01:c5:a2:f7:c1:4b:44:b6:a7:50:56:4b:8a:ea:c6:f5:1a:
         e8:28:82:72:ca:97:2f:53:9a:e8:92:36:7d:3b:6d:9f:44:9e:
         b9:03:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:10 2024 by rpki-client on console-fra.rpki-client.org