Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/6CF64EE6A62211ED8F649780F1222468.roa
File:                     6CF64EE6A62211ED8F649780F1222468.roa (raw, json)
Hash identifier:          NWE8clw8CF7WBnE8BhZlyK4mx7cNZXF3h1x6LHBwvwc=
Subject key identifier:   BF:EC:A8:AD:50:B4:A8:3B:56:3D:6D:C4:D5:DB:F2:DB:56:1C:43:53
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       09FC
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/6CF64EE6A62211ED8F649780F1222468.roa
Signing time:             Mon 06 Feb 2023 13:30:31 +0000
ROA not before:           Mon 06 Feb 2023 13:30:25 +0000
ROA not after:            Sun 06 Feb 2033 13:30:25 +0000
asID:                     22690
IP address blocks:        2c0f:6100::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF
        Validity
            Not Before: Feb  6 13:30:25 2023 GMT
            Not After : Feb  6 13:30:25 2033 GMT
        Subject: CN=63e100f7-c6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:9f:9f:b5:d4:9f:d3:61:80:ea:fb:e1:97:
                    6a:40:13:d0:0b:62:a6:3d:d0:e9:01:d7:b6:3c:51:
                    2a:64:43:8a:12:6b:57:af:9b:d6:6d:72:66:33:e3:
                    d6:ec:df:94:8e:ad:3b:b8:0f:04:52:86:83:19:0d:
                    0a:79:9f:9c:ce:ad:3b:94:ff:71:fd:3e:2b:bf:4e:
                    aa:e8:f1:37:17:64:1c:7d:a0:6d:43:56:1d:19:a7:
                    01:16:4a:93:ae:c0:d3:68:19:84:bc:bf:b1:af:60:
                    c8:98:1f:74:89:bf:1d:33:a0:de:f3:b1:00:55:fa:
                    20:e9:23:67:2e:e7:95:30:9e:09:3f:7e:e2:9a:3c:
                    80:d9:f3:f1:32:ac:dd:8c:65:2e:01:1e:5a:35:c7:
                    33:63:eb:59:93:23:8b:40:a4:be:20:ed:18:7a:9e:
                    b8:95:12:ae:df:d8:fc:5c:b0:07:db:75:fb:e1:78:
                    79:da:04:41:29:11:33:57:82:36:6d:35:af:34:47:
                    9c:56:a8:ef:5e:d1:aa:f6:f7:48:76:44:ff:cf:a0:
                    55:fa:77:34:46:ff:53:7c:89:f7:e0:13:9a:3d:de:
                    e4:a1:0a:f6:1c:1c:29:87:2a:09:cb:2c:e7:c3:93:
                    cb:1c:9f:01:17:b1:76:cf:bf:1f:cc:b0:20:53:19:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EC:A8:AD:50:B4:A8:3B:56:3D:6D:C4:D5:DB:F2:DB:56:1C:43:53
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/6CF64EE6A62211ED8F649780F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6100::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:0c:60:8b:63:6b:c6:4b:96:26:47:7d:64:e1:17:b7:55:
         f4:64:b8:b8:a8:f1:3e:55:1f:09:75:d3:e5:23:5b:38:01:cf:
         49:a5:fa:7d:01:e1:c1:93:2d:6b:f8:14:b6:40:66:63:c5:0b:
         e5:b3:9c:08:27:e8:27:5d:2e:72:d9:f1:9d:89:8b:94:e1:45:
         b8:9f:69:c9:75:7b:12:5a:d9:c7:50:ac:d7:55:fc:1f:02:f4:
         93:42:8c:1b:6c:d8:6f:c1:5a:d8:90:8f:8f:8e:af:b3:fe:e1:
         70:64:55:57:47:28:7a:cf:e5:a9:c7:6d:f6:43:2c:7f:22:ae:
         de:8b:73:c8:ba:ee:84:66:ad:86:47:a9:81:0a:b2:10:da:2b:
         75:80:76:a8:78:05:63:d3:25:78:15:5b:bb:92:89:c0:df:0b:
         4a:ed:4e:09:1f:22:98:7e:fa:af:a5:47:02:36:4a:b7:1e:c1:
         d8:c3:52:30:71:ea:b9:08:de:d6:05:ef:13:0a:b6:f2:7f:c8:
         91:2f:ea:e0:77:2f:c3:46:55:1d:f1:5e:03:cd:2c:45:e6:23:
         6f:1f:11:f1:9c:69:26:7b:2a:19:a4:e9:87:1e:ec:0e:74:69:
         5c:3d:16:83:14:39:90:a7:fb:56:fc:55:b4:49:83:df:c2:2e:
         32:a4:f6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:16 2025 by rpki-client