Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/57CE8E244FFF11EF959DB964762E951A.roa
File:                     57CE8E244FFF11EF959DB964762E951A.roa (raw, json)
Hash identifier:          fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=
Subject key identifier:   8E:6C:42:32:0A:E7:17:08:56:F7:7B:62:7F:7C:23:1E:C9:05:12:B5
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       06AF
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/57CE8E244FFF11EF959DB964762E951A.roa
Signing time:             Thu 01 Aug 2024 12:12:38 +0000
ROA not before:           Thu 01 Aug 2024 12:12:35 +0000
ROA not after:            Wed 01 Aug 2040 12:12:35 +0000
asID:                     31713
IP address blocks:        196.50.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Aug  1 12:12:35 2024 GMT
            Not After : Aug  1 12:12:35 2040 GMT
        Subject: CN=66ab7bb6-c923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:fd:2a:3a:6c:66:25:01:1c:8e:6c:3c:e3:
                    17:d6:38:7e:1d:31:50:aa:5b:91:2f:03:a5:08:40:
                    86:74:d4:be:de:17:cd:19:10:38:ea:ec:68:f8:6c:
                    cb:3c:f1:9a:9e:3d:3b:08:44:c8:c1:72:e4:48:8c:
                    f3:9c:b6:05:15:f3:70:6a:6d:f3:c4:49:ae:22:72:
                    49:29:59:a7:43:4c:46:48:a3:7e:96:f2:65:2d:12:
                    dc:5a:2e:de:67:72:b7:a2:f5:7d:bf:7f:a6:ea:61:
                    bf:9a:0c:59:cc:44:ca:2f:c8:dc:0a:ca:43:7a:48:
                    03:65:67:47:cd:fb:95:39:38:ef:ab:d8:37:d9:7f:
                    16:65:3d:f5:cd:88:1e:e4:01:d6:58:f3:09:b7:a8:
                    e3:8f:3e:1f:08:79:a0:34:3d:79:1c:b6:db:51:0c:
                    ae:ca:cf:1b:15:1f:f8:81:29:e0:92:83:05:79:0b:
                    c4:d1:23:32:b9:6b:44:c2:4e:96:06:58:9a:50:6f:
                    d7:ad:aa:83:4f:15:52:e5:2f:c0:dc:d3:6d:21:d2:
                    cd:f5:a3:e6:10:0b:9b:6f:c2:26:b0:eb:d0:1f:c3:
                    62:07:f5:65:23:7d:ed:10:e2:e3:4d:73:c4:c5:fc:
                    f8:b5:08:9b:1f:5e:3f:cf:ac:fd:fa:9f:87:b4:f3:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6C:42:32:0A:E7:17:08:56:F7:7B:62:7F:7C:23:1E:C9:05:12:B5
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/57CE8E244FFF11EF959DB964762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.50.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:47:c9:b3:93:29:84:e0:45:f1:b7:95:40:e5:79:55:ab:d9:
         0c:25:cf:05:ba:ad:ee:82:38:66:0a:99:c0:7c:c2:d9:3b:43:
         82:ad:ae:1a:6a:76:87:12:7a:92:61:3d:16:1e:e8:fa:ec:5e:
         1f:2f:36:c5:ee:fe:4c:58:98:74:f1:20:0b:46:9b:9b:51:8b:
         db:39:37:fa:04:ef:66:de:45:26:88:fe:87:f9:01:45:0d:dd:
         e0:97:ee:ca:53:d7:85:cb:51:3f:8e:fd:d4:a8:21:c6:a9:42:
         e1:c1:90:0e:3e:7a:fe:9b:24:83:13:39:52:4d:cb:69:5b:c8:
         69:b5:49:19:59:22:cd:52:95:9f:c9:c9:e4:c5:f4:4c:7a:45:
         60:d6:b0:2b:ca:1d:34:15:28:ed:ce:e3:d4:f5:38:1d:a6:88:
         56:3d:e3:c1:de:d8:53:04:2f:78:e4:a5:f1:e6:92:eb:5d:69:
         0c:c0:5d:39:a4:d4:d5:fb:24:34:ba:86:f5:17:ed:ed:d4:99:
         94:c0:1e:d3:b1:be:c0:86:44:b7:c4:1f:c0:1b:e3:58:d0:49:
         e6:ed:97:8c:c6:f8:df:dd:c5:7f:8f:16:ed:b1:3d:4d:7a:46:
         44:60:0b:58:86:1a:8d:b7:15:8b:e0:8f:90:f4:0e:d8:78:f4:
         d2:f0:68:7b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjZFNEFBRjExMC8GA1UEBRMoNEZFRTEyOUQwOUFCODUwREEwMzlFN0Y1QkIyNEI2
Njk5QTBGODE3OTAeFw0yNDA4MDExMjEyMzVaFw00MDA4MDExMjEyMzVaMBgxFjAU
BgNVBAMTDTY2YWI3YmI2LWM5MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyqf0qOmxmJQEcjmw84xfWOH4dMVCqW5EvA6UIQIZ01L7eF80ZEDjq7Gj4
bMs88ZqePTsIRMjBcuRIjPOctgUV83BqbfPESa4ickkpWadDTEZIo36W8mUtEtxa
Lt5ncrei9X2/f6bqYb+aDFnMRMovyNwKykN6SANlZ0fN+5U5OO+r2DfZfxZlPfXN
iB7kAdZY8wm3qOOPPh8IeaA0PXkctttRDK7KzxsVH/iBKeCSgwV5C8TRIzK5a0TC
TpYGWJpQb9etqoNPFVLlL8Dc020h0s31o+YQC5tvwiaw69Afw2IH9WUjfe0Q4uNN
c8TF/Pi1CJsfXj/PrP36n4e086g1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjmxC
MgrnFwhW93tif3wjHskFErUwHwYDVR0jBBgwFoAUT+4SnQmrhQ2gOef1uyS2aZoP
gXkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2RTRBLzlENTk0RjcyNDFBNjExRUE4ODg2M0UyOEY4QUVBMjI4L1QtNFNu
UW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1QtNFNuUW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkY2RTRBLzlENTk0RjcyNDFBNjExRUE4ODg2M0UyOEY4
QUVBMjI4LzU3Q0U4RTI0NEZGRjExRUY5NTlEQjk2NDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbEMoAwDQYJKoZIhvcNAQEL
BQADggEBAA9HybOTKYTgRfG3lUDleVWr2QwlzwW6re6COGYKmcB8wtk7Q4Ktrhpq
docSepJhPRYe6PrsXh8vNsXu/kxYmHTxIAtGm5tRi9s5N/oE72beRSaI/of5AUUN
3eCX7spT14XLUT+O/dSoIcapQuHBkA4+ev6bJIMTOVJNy2lbyGm1SRlZIs1SlZ/J
yeTF9Ex6RWDWsCvKHTQVKO3O49T1OB2miFY948He2FMEL3jkpfHmkutdaQzAXTmk
1NX7JDS6hvUX7e3UmZTAHtOxvsCGRLfEH8Ab41jQSebtl4zG+N/dxX+PFu2xPU16
RkRgC1iGGo23FYvgj5D0Dth49NLwaHs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org