Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/B0109E46FC9F11E9A7249141F8AEA228.roa
File:                     B0109E46FC9F11E9A7249141F8AEA228.roa (raw, json)
Hash identifier:          mWLr9gpGgYGc2eTR3HzordVAt5z5qlqSSvhvwmTMGaQ=
Subject key identifier:   1D:91:3F:13:F9:39:1F:CD:12:8A:21:65:3D:34:A3:43:DD:8F:7E:22
Certificate issuer:       /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial:       0A
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/B0109E46FC9F11E9A7249141F8AEA228.roa
Signing time:             Fri 01 Nov 2019 12:04:00 +0000
ROA not before:           Fri 01 Nov 2019 12:03:55 +0000
ROA not after:            Thu 01 Nov 2029 12:03:55 +0000
asID:                     37682
IP address blocks:        154.73.8.0/24 maxlen: 24
                          154.73.9.0/24 maxlen: 24
                          154.73.10.0/24 maxlen: 24
                          154.73.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
        Validity
            Not Before: Nov  1 12:03:55 2019 GMT
            Not After : Nov  1 12:03:55 2029 GMT
        Subject: CN=5dbc1f30-22ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:84:1d:25:05:ba:4c:22:67:7a:4c:a1:15:
                    35:13:47:b7:79:be:07:e4:45:9a:08:0d:9a:90:95:
                    d3:74:de:bf:15:58:78:ca:d9:6e:30:98:23:e8:a6:
                    3c:4b:50:0a:00:d9:bc:ff:6b:d4:73:3e:ec:51:24:
                    6b:53:8b:45:9f:b5:88:35:a9:af:92:96:3d:b3:2a:
                    84:d0:ca:80:ef:26:0e:a9:db:2f:5f:ee:b0:28:e7:
                    57:1f:56:ff:d8:88:90:92:16:7c:02:2d:53:9a:ea:
                    30:23:3f:6d:97:a3:01:d8:4a:23:e7:c9:01:0a:92:
                    20:b6:f0:ad:b5:da:cc:05:f6:6c:af:97:60:a9:c1:
                    0d:7c:64:50:a3:93:26:81:5d:8d:72:e0:1f:97:a9:
                    44:ea:ab:a2:79:a1:98:68:5d:c0:32:bd:83:b2:6f:
                    51:61:be:96:dc:27:63:08:fb:2a:65:71:0c:70:78:
                    45:a4:e7:59:4d:98:f7:a6:04:c0:22:78:59:03:39:
                    f5:a4:56:1b:63:cf:75:83:24:be:cd:17:ed:21:ee:
                    e2:8c:52:76:25:f4:44:46:b8:d1:0d:0c:64:94:8a:
                    a3:ac:6c:fd:81:a0:af:93:37:bd:b2:0e:99:b9:39:
                    5f:52:e0:e8:bc:c6:c6:9a:52:6c:d9:df:7a:69:c7:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:3F:13:F9:39:1F:CD:12:8A:21:65:3D:34:A3:43:DD:8F:7E:22
            X509v3 Authority Key Identifier:
                keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/B0109E46FC9F11E9A7249141F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:c1:00:e9:67:81:d1:f0:58:e5:29:92:cf:85:3a:9b:83:1f:
         2b:6d:2f:70:e7:90:47:fa:f0:79:4f:8f:66:ed:5b:a3:00:86:
         1e:91:4d:a9:c3:99:af:66:7f:c4:5a:0d:1c:f8:33:4a:17:36:
         e7:f9:25:1c:5a:dd:88:8e:1b:95:d6:3e:38:14:89:b8:86:9b:
         e6:b3:8e:58:d4:5c:ee:48:8c:65:63:f9:63:a4:da:06:6b:92:
         ed:4f:fe:ea:92:5a:c1:ec:9e:a6:49:53:21:f9:23:c1:a5:81:
         62:d0:6e:e3:86:3c:b9:8a:2d:8c:19:ec:de:13:2c:6a:ba:65:
         97:c3:59:a4:37:03:6c:73:ce:ae:56:1d:ca:e9:38:bb:c5:0e:
         50:67:8e:fd:a6:97:48:6b:6d:bb:49:e4:bc:4f:42:b2:15:d8:
         cd:03:d8:7b:02:f2:d8:91:29:b2:81:c7:8f:ca:0d:f6:bb:8f:
         ff:28:2f:64:48:aa:29:90:cf:4a:4b:2e:01:fd:45:a3:f9:73:
         77:c4:92:64:6e:e7:e3:ff:9f:c3:40:53:09:33:57:3d:53:31:
         1e:11:ad:c0:6c:ea:a7:e8:84:d7:fc:57:02:77:56:33:10:93:
         ed:61:20:37:a2:b9:8f:11:8c:c3:cd:76:69:7e:09:4f:3f:c2:
         46:a0:5a:e2
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MDE2M0FGMTEwLwYDVQQFEygzOUQwMzBBRTBBRkFDNjkxMkIwQjEzM0ZGN0EzNDJG
Nzg0RDBFQThDMB4XDTE5MTEwMTEyMDM1NVoXDTI5MTEwMTEyMDM1NVowGDEWMBQG
A1UEAxMNNWRiYzFmMzAtMjJhZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL94hB0lBbpMImd6TKEVNRNHt3m+B+RFmggNmpCV03TevxVYeMrZbjCYI+im
PEtQCgDZvP9r1HM+7FEka1OLRZ+1iDWpr5KWPbMqhNDKgO8mDqnbL1/usCjnVx9W
/9iIkJIWfAItU5rqMCM/bZejAdhKI+fJAQqSILbwrbXazAX2bK+XYKnBDXxkUKOT
JoFdjXLgH5epROqronmhmGhdwDK9g7JvUWG+ltwnYwj7KmVxDHB4RaTnWU2Y96YE
wCJ4WQM59aRWG2PPdYMkvs0X7SHu4oxSdiX0REa40Q0MZJSKo6xs/YGgr5M3vbIO
mbk5X1Lg6LzGxppSbNnfemnHl5MCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBQdkT8T
+TkfzRKKIWU9NKND3Y9+IjAfBgNVHSMEGDAWgBQ50DCuCvrGkSsLEz/3o0L3hNDq
jDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhBRUEyMjgvT2RBd3Jn
cjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvT2RBd3JncjZ4cEVyQ3hNXzk2TkM5NFRRNm93LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhB
RUEyMjgvQjAxMDlFNDZGQzlGMTFFOUE3MjQ5MTQxRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmkkIMA0GCSqGSIb3DQEBCwUAA4IBAQAy
wQDpZ4HR8FjlKZLPhTqbgx8rbS9w55BH+vB5T49m7VujAIYekU2pw5mvZn/EWg0c
+DNKFzbn+SUcWt2IjhuV1j44FIm4hpvms45Y1FzuSIxlY/ljpNoGa5LtT/7qklrB
7J6mSVMh+SPBpYFi0G7jhjy5ii2MGezeEyxqumWXw1mkNwNsc86uVh3K6Ti7xQ5Q
Z479ppdIa227SeS8T0KyFdjNA9h7AvLYkSmygcePyg32u4//KC9kSKopkM9KSy4B
/UWj+XN3xJJkbufj/5/DQFMJM1c9UzEeEa3AbOqn6ITX/FcCd1YzEJPtYSA3ormP
EYzDzXZpfglPP8JGoFri
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:16 2024 by rpki-client on console-fra.rpki-client.org