Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/FB2709E836A511EFB1B3CC89762E951A.roa
File:                     FB2709E836A511EFB1B3CC89762E951A.roa (raw, json)
Hash identifier:          gX6zzhnOMfXGJzs+U/OImYW4B+DHtOuToVDG/O96rSg=
Subject key identifier:   D6:E2:02:E2:69:C3:6D:97:06:E2:6D:6F:BC:E6:85:74:09:C0:66:E1
Certificate issuer:       /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial:       01DB
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/FB2709E836A511EFB1B3CC89762E951A.roa
Signing time:             Sun 30 Jun 2024 05:59:58 +0000
ROA not before:           Sun 30 Jun 2024 05:59:55 +0000
ROA not after:            Mon 29 Jun 2026 05:59:55 +0000
asID:                     17400
IP address blocks:        2001:4250::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362CE41AF
        Validity
            Not Before: Jun 30 05:59:55 2024 GMT
            Not After : Jun 29 05:59:55 2026 GMT
        Subject: CN=6680f45e-6350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:c0:d7:e4:9f:21:9e:09:ee:78:db:5e:5b:
                    f1:78:13:17:9d:cd:51:a7:5c:18:2c:f9:0b:70:54:
                    55:71:1e:3c:31:92:d6:5e:d2:64:85:8c:0b:61:d7:
                    0d:ef:7b:22:1d:e3:75:f0:92:b1:0b:dc:2d:4f:c2:
                    e5:f3:6f:e7:2b:5b:8e:b5:39:6b:e6:a4:aa:28:af:
                    32:17:d5:e0:34:da:57:57:5e:d0:9f:4b:f5:00:cd:
                    1e:72:df:ef:9a:ec:21:4d:ef:eb:bd:f4:56:d5:fa:
                    b6:5d:8a:f8:68:5b:fe:b9:c1:35:de:fc:e9:1f:52:
                    57:48:4e:3f:c4:fb:9d:5b:70:b5:52:ba:28:c7:26:
                    1e:4f:c8:93:b3:78:35:df:b4:84:16:08:61:f4:76:
                    39:60:75:ac:cc:46:fc:d3:22:c1:1a:75:eb:62:b0:
                    4c:c7:ca:21:9e:45:7a:b7:c0:59:2b:3c:9e:3e:07:
                    c0:a5:c0:34:04:e9:23:17:74:37:48:d1:f1:3d:3b:
                    f2:da:ff:ef:65:d4:61:4e:4b:52:c5:9c:aa:38:47:
                    4a:cc:07:20:5e:cb:14:64:f0:c7:92:f7:64:29:fb:
                    3c:b5:5a:fe:79:94:98:06:2f:29:14:0d:82:3a:9d:
                    5e:8f:07:33:a0:61:ac:03:b5:cc:42:9c:1b:88:dd:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E2:02:E2:69:C3:6D:97:06:E2:6D:6F:BC:E6:85:74:09:C0:66:E1
            X509v3 Authority Key Identifier:
                keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/FB2709E836A511EFB1B3CC89762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4250::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:e4:70:7b:d9:33:1a:c8:a0:0e:8c:98:3b:29:52:0d:e5:
         f0:e6:ea:84:32:01:1d:92:1a:3d:3e:50:17:a0:e9:5a:86:1a:
         6a:e0:83:c4:78:09:dc:df:cf:a8:ef:7b:80:e9:0e:22:1d:11:
         a4:6b:4e:88:6b:7e:54:a0:b7:80:d9:af:af:0a:ae:bb:d7:38:
         c6:cb:5c:b8:4f:9c:fa:14:0c:44:e4:dc:31:91:34:fc:24:b3:
         47:0b:90:51:17:ea:09:ab:f7:a7:d2:8f:e9:7c:72:02:73:f7:
         f0:77:90:67:8e:43:82:e6:25:49:3b:39:5a:bd:85:35:a8:0b:
         3d:fd:06:6a:1c:ff:bb:b6:db:eb:2c:81:9f:af:06:92:2c:0c:
         98:02:91:6f:2c:f6:27:6e:3f:e4:7e:88:d4:e2:a7:e7:94:15:
         eb:51:72:b0:69:71:55:7e:ad:72:6d:1b:95:a0:6b:8b:93:b5:
         40:f7:2c:73:a2:a1:29:e6:6d:58:29:91:a8:77:a9:ba:3a:f0:
         5a:43:3d:00:f4:47:29:c3:83:4e:37:37:42:4d:dc:07:72:c3:
         e3:dd:fd:e4:5d:1c:60:c3:78:b6:c0:75:93:44:c4:b8:69:bc:
         05:e7:51:c5:c0:c4:cb:5f:48:ab:b5:c9:d0:4e:d3:27:79:41:
         45:f4:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:30 2025 by rpki-client