Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/B0054DCEDB4B11ECA2F3EBC6F1222468.roa
File:                     B0054DCEDB4B11ECA2F3EBC6F1222468.roa (raw, json)
Hash identifier:          CVtR8s1nmWQiOWTCX5M/tJIKYNhWS8VPa0YaTtKYyKQ=
Subject key identifier:   68:AC:07:07:EE:7A:A1:1F:8B:21:FE:39:3D:DB:9C:B3:3A:7F:E6:27
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       9E
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/B0054DCEDB4B11ECA2F3EBC6F1222468.roa
Signing time:             Tue 24 May 2022 10:24:26 +0000
ROA not before:           Tue 24 May 2022 10:24:22 +0000
ROA not after:            Mon 02 Jun 2025 10:24:22 +0000
asID:                     33763
IP address blocks:        41.218.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: May 24 10:24:22 2022 GMT
            Not After : Jun  2 10:24:22 2025 GMT
        Subject: CN=628cb25a-adec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:c4:e6:d6:4f:62:ed:16:86:47:3e:a2:d3:
                    39:21:8b:6f:01:31:de:fa:f5:aa:3d:64:4b:81:3d:
                    c9:12:b0:89:ee:da:87:68:6a:a0:79:0d:73:25:da:
                    28:02:2e:3c:07:f3:3d:7d:e4:5e:0a:26:d9:e6:36:
                    fa:80:58:67:05:f5:12:89:4c:54:fa:2c:2c:d8:df:
                    70:b8:c2:0b:1f:6c:b6:e5:a6:c5:4c:06:d9:17:99:
                    0a:f7:0f:41:18:1c:5f:43:81:2a:78:88:1e:1b:11:
                    08:75:12:95:09:f1:05:c9:43:63:46:c6:94:b9:68:
                    8d:8c:f2:52:f8:5c:1d:82:b3:53:df:07:33:9c:7d:
                    ba:fe:37:82:a3:58:8b:ad:51:9d:51:a3:84:20:08:
                    31:6f:cc:a3:d3:1a:1a:28:87:bf:9e:32:68:b0:65:
                    9b:d9:51:1c:10:83:eb:ab:c1:a7:9e:c8:ee:55:b3:
                    15:94:8a:02:51:2e:39:e7:9f:53:48:cd:9d:ff:0f:
                    a7:e5:95:14:b4:df:55:8a:2e:74:a3:46:64:7a:66:
                    c3:4c:14:35:dc:ae:72:dc:d7:90:09:91:b7:88:55:
                    7d:73:d1:99:22:4d:d7:0a:f3:c7:9c:03:aa:62:53:
                    36:64:7e:dc:d0:2e:5a:13:d6:02:7b:9d:8c:83:00:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:07:07:EE:7A:A1:1F:8B:21:FE:39:3D:DB:9C:B3:3A:7F:E6:27
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/B0054DCEDB4B11ECA2F3EBC6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.218.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:fb:57:f9:f1:8b:45:28:36:c2:73:75:54:a9:a1:dc:bf:
         67:41:f2:78:55:56:32:3a:df:9d:09:92:ec:05:1c:ac:5e:c9:
         f3:7d:73:88:84:be:cb:9d:18:2a:b5:f4:ef:e2:07:1d:bc:f7:
         17:03:9e:09:fb:a7:12:50:7f:d6:4e:30:fc:81:83:e9:8a:a4:
         1d:1d:19:6a:b2:b6:f6:e8:7b:0c:24:eb:6f:21:dc:9b:45:02:
         70:bf:67:48:04:46:24:74:cc:d3:0c:fd:2c:67:a3:1c:5e:d2:
         ad:e1:f8:61:ff:7e:01:fe:b4:6b:a6:e6:5d:1b:35:a2:ce:11:
         38:af:43:f0:32:00:8e:61:be:a6:7a:d0:ff:79:94:20:88:3d:
         52:28:fd:33:2c:26:7b:e2:97:6e:30:38:7a:1a:a2:ca:12:11:
         2f:bd:71:be:24:c3:a9:e8:36:31:2d:88:a7:d0:be:19:53:15:
         98:f3:1e:e2:aa:9f:1c:c4:ae:d5:81:54:10:92:c5:4f:e6:00:
         18:47:27:d9:44:0c:09:22:76:ff:bf:02:10:c0:01:d6:22:e4:
         32:25:ee:0e:e1:0d:54:3b:ab:66:21:c4:3c:8a:b8:50:38:55:
         81:d7:1e:fa:69:11:47:8b:9d:44:4f:5d:c6:2d:e9:a1:75:ef:
         18:ff:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org