Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/B3A13152AD3A11ED98CD22B3F1222468.roa
File:                     B3A13152AD3A11ED98CD22B3F1222468.roa (raw, json)
Hash identifier:          CtBBbsU2cLWpym/InD5LqZTL5ZpfCQ9WzmfmwkkEuoY=
Subject key identifier:   19:31:88:8D:32:61:71:A2:3E:67:04:3D:C9:25:A9:FA:19:4B:8C:C9
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       01B2
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/B3A13152AD3A11ED98CD22B3F1222468.roa
Signing time:             Wed 15 Feb 2023 14:11:55 +0000
ROA not before:           Thu 16 Feb 2023 14:11:51 +0000
ROA not after:            Fri 28 Feb 2025 14:11:51 +0000
asID:                     29286
IP address blocks:        41.218.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 16 14:11:51 2023 GMT
            Not After : Feb 28 14:11:51 2025 GMT
        Subject: CN=63ece82b-9945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:86:c0:30:46:6d:63:9c:e9:7f:8b:5d:8e:
                    5f:bb:0f:14:6e:98:87:5c:46:aa:45:c0:f8:d4:0c:
                    cc:1f:87:ad:b4:ce:19:76:68:8c:7d:0e:05:0d:d1:
                    83:7a:3a:41:40:e3:8c:bb:9a:17:2a:15:56:c4:23:
                    e0:fa:d0:27:50:7d:3c:aa:14:3e:d0:4d:fb:2e:02:
                    51:4f:9d:13:f6:ba:cd:21:87:ef:f7:f2:5a:64:f1:
                    23:86:d3:3d:1b:bd:ca:25:f7:f8:ce:c2:0b:55:cb:
                    d3:1f:f4:fc:a3:4d:7d:94:de:08:8b:2a:df:5b:48:
                    5e:9b:e2:19:17:50:55:29:2e:89:d4:52:89:74:7d:
                    26:ce:03:04:7c:58:62:bb:65:73:0c:1d:13:c2:06:
                    c7:5a:91:6e:c8:91:b5:e9:ce:84:38:9e:b0:44:a7:
                    7e:b5:e4:1d:1b:34:dd:b1:e8:73:4f:29:8b:1d:14:
                    ed:1b:0e:49:a9:a3:c1:cd:f0:89:9d:3e:84:a8:64:
                    1f:15:48:91:ff:23:e3:91:ec:18:76:a8:1e:79:57:
                    c9:5f:e7:a1:f4:fd:79:7d:44:0a:42:9f:24:02:67:
                    03:b5:3d:56:86:86:23:d5:dd:90:ff:05:ff:e8:f2:
                    4b:4e:27:bb:d0:42:34:77:6c:2b:a0:91:c6:c2:e8:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:31:88:8D:32:61:71:A2:3E:67:04:3D:C9:25:A9:FA:19:4B:8C:C9
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/B3A13152AD3A11ED98CD22B3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.218.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:90:48:e9:cb:95:de:e6:2b:23:64:d3:18:f5:2e:bf:bd:
         86:2c:87:34:b1:c5:de:94:0a:2d:d1:d9:df:dc:86:70:77:09:
         8c:2b:eb:0f:d8:af:19:8e:8d:8b:f0:32:67:16:d0:49:ba:a6:
         c7:08:bb:e7:82:3b:9c:ee:b6:1c:ed:58:1c:fc:b6:61:34:e4:
         97:60:a0:66:f3:92:6b:0a:b9:35:1f:de:78:9a:d2:aa:b0:b2:
         9e:b5:8a:ad:be:09:35:a0:c3:03:cf:dd:ad:94:04:7d:5f:39:
         51:43:13:9f:0b:50:4b:df:95:93:cc:f1:1b:b5:0a:8d:dc:d6:
         ec:4a:bb:40:d1:4b:eb:c8:67:fb:bf:83:92:15:07:52:e4:a1:
         76:4f:b7:bb:97:16:03:c8:6e:72:d1:51:cf:15:5b:05:f5:5a:
         dd:6d:ca:20:4d:f4:a5:45:5e:a9:10:87:37:e9:ec:ed:17:81:
         df:32:4b:7d:51:0e:66:33:cf:e4:06:f8:54:fd:e8:61:02:d0:
         2a:6a:ce:6d:ea:95:83:e3:63:10:11:e1:7d:c6:18:37:10:4c:
         bb:1a:ff:4b:65:87:89:51:51:3e:e6:df:f6:fb:0d:47:b0:33:
         d4:1b:76:f1:d2:6b:df:2c:fd:3b:6c:36:c8:9c:ab:73:e6:32:
         f2:81:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org