Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/4AB71224AC1911EC964105D15A40D577.roa
File:                     4AB71224AC1911EC964105D15A40D577.roa (raw, json)
Hash identifier:          aFwsDrIoFBaMUc1CPeOezGJHKCo9dEASMl5fyRetgnU=
Subject key identifier:   53:46:60:3A:18:E1:29:0B:4E:04:DB:75:78:1B:39:5B:B7:5E:4F:6E
Certificate issuer:       /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial:       0E
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/4AB71224AC1911EC964105D15A40D577.roa
Signing time:             Fri 25 Mar 2022 08:55:17 +0000
ROA not before:           Fri 25 Mar 2022 08:55:13 +0000
ROA not after:            Sun 24 Mar 2024 08:55:13 +0000
asID:                     36914
IP address blocks:        41.89.1.0/24 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A34AF
        Validity
            Not Before: Mar 25 08:55:13 2022 GMT
            Not After : Mar 24 08:55:13 2024 GMT
        Subject: CN=623d8375-3c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:1a:2d:24:ec:e3:2f:30:58:dd:d8:5d:f7:
                    88:c4:e5:72:68:cd:59:a3:00:2f:de:98:73:3c:a0:
                    e9:73:45:1e:ca:97:1a:40:5f:5a:3c:d6:54:48:fc:
                    aa:f4:6f:3a:ce:41:07:32:14:d0:10:fb:c2:6a:ef:
                    b3:3a:58:95:18:16:1d:6a:aa:c0:65:b2:16:dc:97:
                    65:35:c5:39:06:4e:49:0c:9b:85:2c:f8:19:fb:ef:
                    a9:fb:dd:87:f7:87:31:7b:26:8a:fe:e1:4a:fe:ca:
                    c4:05:30:b8:b2:b9:c0:b7:c8:64:9c:be:c4:70:54:
                    89:69:bb:fa:19:d1:0c:0a:b3:74:8b:11:e7:07:63:
                    5f:67:b2:de:25:3f:99:ce:68:a0:83:91:49:d4:88:
                    3c:df:a2:3b:8b:32:48:21:70:70:8d:31:d3:53:44:
                    3d:f7:07:77:68:b1:ba:cc:93:00:6c:7c:9d:1b:5c:
                    f5:3d:4f:c8:68:4e:ca:42:34:31:de:42:42:27:e8:
                    f5:b5:7b:f0:57:0a:83:2d:b5:3a:0d:a5:fd:75:d5:
                    82:e8:3f:40:80:7a:b2:5d:5b:ac:0c:ee:a3:6b:0a:
                    b9:f2:2a:f8:c0:c0:98:0f:26:39:a5:cd:aa:95:86:
                    60:85:70:d0:ea:06:f9:c1:ff:7a:c0:43:12:03:c6:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:60:3A:18:E1:29:0B:4E:04:DB:75:78:1B:39:5B:B7:5E:4F:6E
            X509v3 Authority Key Identifier:
                keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/4AB71224AC1911EC964105D15A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.89.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:bb:58:3b:e1:2b:49:dd:69:cd:4a:60:48:c4:88:e6:52:05:
         02:58:ca:70:76:a5:3c:43:e2:35:86:8a:07:e7:e8:a6:de:71:
         84:ed:e3:b8:40:72:a1:50:2c:bc:ef:90:9d:c6:d9:61:08:a3:
         e5:04:ba:e7:5e:41:0f:8f:4f:d7:d5:a0:46:71:55:ca:83:9e:
         a0:c5:51:bd:77:4b:2b:8d:c8:ed:eb:1d:63:e5:5f:42:db:ce:
         6d:59:2c:ed:12:42:59:cd:e3:69:c9:28:8c:8b:79:fe:88:30:
         15:82:12:8d:c4:c3:bc:b0:4b:9b:4d:8c:ff:2d:ba:f9:6f:85:
         da:37:fa:e5:99:55:d7:7f:0e:9b:b2:7c:0d:1b:d1:57:0a:ba:
         d3:73:5f:98:62:0c:fa:51:e2:6c:de:98:b2:80:aa:00:2e:a2:
         66:e2:2a:cd:73:62:b9:84:0a:04:85:b1:95:fc:71:d2:61:85:
         47:20:87:61:72:a0:f3:38:ad:23:e4:e1:c8:d8:9a:9e:5e:79:
         03:71:8f:e4:9f:5c:58:e8:6a:44:5e:09:5f:40:ad:7a:e8:98:
         59:7d:6f:92:82:74:3a:cd:e8:9e:14:4d:b3:1a:91:d4:09:f6:
         50:b6:a1:04:90:7e:0b:a0:37:b0:92:99:ff:ee:e5:c7:8f:e2:
         9d:be:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:31 2025 by rpki-client