Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0296D846BB8711EF88AD8472762E951A.roa
File:                     0296D846BB8711EF88AD8472762E951A.roa (raw, json)
Hash identifier:          jVv2YXW/M+7byYbjHj8D/sW2kkHipkAtmIWK75OuXBg=
Subject key identifier:   82:EB:82:17:C5:11:74:6C:34:D0:78:B7:05:5C:7C:62:30:79:CD:ED
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       059D
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0296D846BB8711EF88AD8472762E951A.roa
Signing time:             Mon 16 Dec 2024 08:23:21 +0000
ROA not before:           Mon 16 Dec 2024 08:23:17 +0000
ROA not after:            Mon 16 Dec 2030 08:23:17 +0000
asID:                     5065
IP address blocks:        102.215.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF
        Validity
            Not Before: Dec 16 08:23:17 2024 GMT
            Not After : Dec 16 08:23:17 2030 GMT
        Subject: CN=675fe379-31a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:35:79:b0:6f:38:1f:b5:ba:9a:a2:73:db:
                    d4:f1:cc:11:09:41:90:20:df:b0:9c:40:08:5f:12:
                    2e:b4:38:75:00:f9:40:63:2a:c2:4a:74:62:32:65:
                    f2:24:03:3b:55:00:06:f6:dc:f1:9c:36:6a:d2:de:
                    f7:c1:2d:f6:9d:a2:b6:f0:0d:98:3b:da:a6:df:91:
                    2b:14:fb:3d:85:99:97:58:4b:51:94:f5:e1:98:da:
                    d2:58:7f:91:f6:4f:76:11:ee:d2:90:51:8b:64:59:
                    ba:fa:9c:4e:89:75:35:e5:a2:a4:b5:72:66:c5:32:
                    bc:b1:5a:cb:41:1d:31:7d:f0:f2:c9:1e:df:d7:d5:
                    e5:2a:6e:fe:5b:19:c8:21:35:40:e3:7d:74:54:e2:
                    b3:bc:8c:1e:01:cb:5d:91:65:f7:25:92:e2:52:42:
                    07:d9:d8:87:3c:ea:ac:ae:36:f5:fa:36:e5:01:69:
                    dc:0a:6d:1f:45:db:61:2a:93:a0:f0:b5:6e:82:9f:
                    9f:d6:27:18:a9:16:d2:3e:b1:0a:c2:3e:31:5d:d4:
                    2f:19:e4:06:09:5a:09:bb:d5:97:1c:53:e9:e7:59:
                    66:92:f8:73:8c:ca:1f:27:6d:96:7d:8f:11:92:00:
                    66:32:6d:52:56:21:c5:5c:3a:69:9c:34:a5:9a:5f:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EB:82:17:C5:11:74:6C:34:D0:78:B7:05:5C:7C:62:30:79:CD:ED
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0296D846BB8711EF88AD8472762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:78:13:20:49:8a:00:70:9c:3a:54:0d:f5:01:97:4f:b8:6e:
         2a:8e:1a:57:fb:dd:0e:20:2e:f5:6d:0b:52:69:e5:10:38:f1:
         07:ea:77:7e:1b:21:bb:9a:86:d2:18:9a:63:59:1b:0b:b5:2f:
         c4:59:54:c5:be:75:4f:d1:f9:e9:1e:0c:36:05:06:35:20:03:
         1b:5c:f6:47:27:08:6a:f2:d8:d2:84:bf:82:62:e0:81:c3:a2:
         d9:c8:ae:55:e0:1c:e8:7b:20:c1:cd:65:49:f8:3a:38:17:fc:
         bb:09:bd:dc:13:2b:73:d8:80:72:59:09:2f:83:2c:f9:00:6b:
         a3:e9:ef:2e:4d:be:61:1a:92:d6:46:8e:5a:9c:8c:7c:52:af:
         fb:d1:bb:5f:79:46:32:ed:d6:f3:c9:7d:88:fd:af:59:e9:62:
         aa:56:46:dd:89:a0:45:f9:15:43:87:85:03:ea:1f:17:42:76:
         c6:0e:06:d3:6c:cd:fb:2e:ea:e1:aa:b3:82:5b:f4:46:d0:32:
         34:98:13:67:51:15:07:6f:ea:d7:2c:25:5e:2e:9b:5b:4a:d6:
         d1:cd:a5:12:20:93:a1:c5:e8:d2:fc:7d:0a:ad:77:a3:51:3c:
         86:af:ca:9f:99:ed:1d:96:16:e6:07:35:1e:b3:49:9e:35:b0:
         ca:23:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:03 2025 by rpki-client