Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/919DA40036A511EFBF337885762E951A.roa
File:                     919DA40036A511EFBF337885762E951A.roa (raw, json)
Hash identifier:          YDoNSbdRbwVpvrX6CYt8JW+3OLrJQPRThugqNM9/C8w=
Subject key identifier:   DE:F3:B2:E2:64:F6:91:9A:E6:17:64:39:7A:A8:F8:A9:C2:21:1F:15
Certificate issuer:       /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial:       01D7
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/919DA40036A511EFBF337885762E951A.roa
Signing time:             Sun 30 Jun 2024 05:57:01 +0000
ROA not before:           Sun 30 Jun 2024 05:56:58 +0000
ROA not after:            Mon 29 Jun 2026 05:56:58 +0000
asID:                     17400
IP address blocks:        41.221.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362CE41AF
        Validity
            Not Before: Jun 30 05:56:58 2024 GMT
            Not After : Jun 29 05:56:58 2026 GMT
        Subject: CN=6680f3ad-7196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:62:38:37:e7:d5:bd:70:80:dc:38:74:bf:
                    6a:59:ea:86:6b:cd:48:5f:1b:97:a1:d8:46:94:6d:
                    85:d0:90:8a:fd:ff:3e:1e:d8:e8:93:32:67:0c:75:
                    86:3e:88:19:fa:64:48:1f:23:75:55:fb:3d:5b:99:
                    c9:3c:60:8d:f3:ff:38:98:0e:00:57:f3:15:58:fd:
                    b2:84:5d:02:22:4f:d3:6f:57:10:02:ca:10:25:23:
                    59:41:54:69:30:ae:e4:2c:54:e2:ce:ec:b8:70:0b:
                    70:0d:ee:45:52:13:71:c0:36:69:3e:c4:f3:5d:32:
                    e0:18:f3:81:ce:d0:5f:ce:d4:a1:1e:11:3c:5e:bf:
                    7f:62:79:be:32:24:94:f2:b3:67:fc:c9:97:f9:6f:
                    fb:d6:b7:5d:15:9c:e0:99:1e:4d:a0:e8:f8:1b:5e:
                    08:ec:27:67:00:25:ab:07:0b:c0:cd:ec:3a:d7:5d:
                    7c:17:a3:38:18:2d:cc:11:5b:da:94:74:52:52:3d:
                    eb:3b:7c:55:ef:60:f7:ec:27:a3:07:b0:7e:e2:9e:
                    da:26:75:dd:7e:1f:01:8c:00:2f:70:a8:80:ef:e9:
                    3d:6b:d3:a4:c2:50:9b:82:73:a9:51:c1:69:30:c7:
                    98:83:8d:63:6d:7c:26:ac:f3:bc:6b:76:e4:27:53:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F3:B2:E2:64:F6:91:9A:E6:17:64:39:7A:A8:F8:A9:C2:21:1F:15
            X509v3 Authority Key Identifier:
                keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/919DA40036A511EFBF337885762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.221.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:be:d3:d2:dc:b3:d4:60:14:2e:cb:ff:ba:7a:e1:63:41:fb:
         f6:cb:ff:37:19:d1:6a:7b:2e:22:2c:50:7a:fd:e9:be:63:eb:
         89:7a:93:8f:7e:d2:4a:52:b4:89:36:fa:fa:3e:82:ae:63:bd:
         be:c2:7d:46:0f:58:5e:8c:a9:06:a5:c5:37:d2:c4:64:30:a3:
         03:38:d7:3f:7f:c1:19:29:ab:72:30:9e:99:75:3b:68:59:b4:
         3d:b8:ac:30:27:01:c5:9f:21:f4:99:48:51:96:19:ed:27:08:
         1d:22:fe:d8:e6:9c:c4:78:a9:30:b7:17:48:73:f0:4b:4d:dd:
         75:0d:78:aa:c7:24:ec:cf:7d:f8:40:91:33:3e:b3:45:2c:a9:
         b0:1c:1b:1b:84:94:c8:5b:d5:27:ec:e1:7c:93:a6:ec:02:eb:
         ad:5c:34:1f:f7:96:58:b5:22:0f:a2:e3:62:c6:02:e0:07:31:
         2b:82:06:be:46:1c:ca:1d:f0:13:be:b5:0a:b0:1c:c9:34:b0:
         47:3d:19:69:ac:81:6a:17:65:d1:08:2c:17:e2:f6:05:6b:7c:
         fc:77:cf:59:e7:2d:bf:3e:63:21:5f:f1:17:7a:10:1c:9c:de:
         e5:40:11:60:2e:7e:10:65:23:81:47:69:4b:4a:6e:83:71:88:
         2c:6f:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:01 2025 by rpki-client