Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/8EA813E090A111EC8127949F5A40D577.roa
File:                     8EA813E090A111EC8127949F5A40D577.roa (raw, json)
Hash identifier:          zo7xDA+ofK1a3NA0ns2DPQnrKdrcHVuw3l7ExwhqFcI=
Subject key identifier:   2F:14:3B:F1:28:5E:1C:F1:8E:4F:C6:61:10:DF:A1:EC:52:AC:1C:98
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       2C
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/8EA813E090A111EC8127949F5A40D577.roa
Signing time:             Fri 18 Feb 2022 10:00:10 +0000
ROA not before:           Fri 18 Feb 2022 10:00:06 +0000
ROA not after:            Mon 02 Mar 2026 10:00:06 +0000
asID:                     33763
IP address blocks:        196.216.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 10:00:06 2022 GMT
            Not After : Mar  2 10:00:06 2026 GMT
        Subject: CN=620f6e2a-2a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:c6:60:f5:d9:35:3b:06:57:19:8b:ae:f7:
                    d3:fc:10:3d:33:ef:fb:ff:3b:9e:6a:68:53:00:b9:
                    3f:dd:23:b8:49:08:30:cd:0c:dc:a4:e6:0a:4a:23:
                    63:f3:e0:d1:d8:e5:e4:63:ab:be:c2:89:61:db:4b:
                    cc:f5:6d:f1:51:57:c9:58:78:9b:ff:41:96:66:19:
                    d6:8a:62:6a:76:02:55:79:fc:96:41:7a:2d:5f:20:
                    b7:ce:57:55:59:b0:1e:92:a9:c6:89:27:cd:a9:f5:
                    e0:54:1e:7c:03:6a:0d:21:ab:1e:62:76:a5:ba:59:
                    f2:d7:ba:78:74:06:10:26:1c:c1:af:db:bf:70:8c:
                    20:63:bd:33:05:44:fb:ac:c9:49:93:50:85:14:60:
                    06:85:7f:36:b8:4f:74:c3:e4:58:a1:33:79:b4:5a:
                    dc:f4:93:7b:91:77:c7:04:a1:19:0c:c8:23:01:fe:
                    7d:7f:e7:b5:86:06:c5:94:aa:45:4c:68:a6:f6:aa:
                    3c:c3:21:f0:8b:5c:46:dc:9b:bf:92:e2:c4:cf:c9:
                    34:41:27:ec:3b:d4:fa:51:ac:f9:36:91:7f:22:c5:
                    c3:15:4c:da:4f:09:65:3e:e6:b7:6a:c8:7f:b7:72:
                    ba:a3:08:15:a6:31:0b:7b:8a:83:f8:42:4d:40:5e:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:14:3B:F1:28:5E:1C:F1:8E:4F:C6:61:10:DF:A1:EC:52:AC:1C:98
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/8EA813E090A111EC8127949F5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:59:74:e4:dc:87:72:a9:5c:66:71:79:6d:01:4c:34:28:84:
         49:ed:c7:21:03:10:d4:b1:13:64:da:f4:33:28:39:86:07:68:
         c0:fb:dd:e5:8e:b1:84:0f:4a:aa:7f:29:62:78:d8:e4:2f:60:
         cf:f7:0b:49:f4:9a:a0:0c:da:a1:fb:64:6b:06:ab:e6:2e:e4:
         8a:03:2d:01:4e:9c:4b:15:42:16:d2:a9:84:59:03:14:73:66:
         4a:a6:91:94:fc:cf:3e:3a:89:20:75:a8:03:bc:c6:a8:5d:89:
         2d:42:ad:58:95:27:b9:b6:97:83:9e:b1:3b:83:29:49:a3:b9:
         44:90:b0:fc:27:db:3a:0e:6b:6c:ef:6b:ca:5e:c7:a1:9e:13:
         ba:ee:dc:70:fe:c0:62:97:26:79:8b:06:9e:8c:05:fc:6e:75:
         1d:ac:bb:12:7a:68:e1:ad:99:57:e7:96:d5:6b:06:d1:7d:b5:
         42:33:e7:7c:be:47:f0:13:c6:ff:3a:96:45:23:58:32:06:1e:
         eb:2c:7e:84:04:ba:3a:69:cd:d0:03:7e:7d:a9:11:13:7d:c7:
         77:4e:c3:38:dd:3e:7a:1a:a7:2a:9b:db:e3:77:90:bd:68:53:
         14:9b:2f:34:25:f4:10:e9:61:3e:ef:c1:9a:96:12:3d:12:14:
         08:99:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org