Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/717250DC0B1F11F0979AD09D762E951A.roa
File:                     717250DC0B1F11F0979AD09D762E951A.roa (raw, json)
Hash identifier:          EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=
Subject key identifier:   38:F5:11:A1:F8:0C:F4:80:83:65:BC:3F:70:47:D8:55:79:53:62:AF
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0CDE
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/717250DC0B1F11F0979AD09D762E951A.roa
Signing time:             Thu 27 Mar 2025 15:23:33 +0000
ROA not before:           Thu 27 Mar 2025 15:23:28 +0000
ROA not after:            Wed 24 Mar 2027 15:23:28 +0000
asID:                     29286
IP address blocks:        41.193.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3294 (0xcde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF
        Validity
            Not Before: Mar 27 15:23:28 2025 GMT
            Not After : Mar 24 15:23:28 2027 GMT
        Subject: CN=67e56d74-5ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:f9:7f:49:08:af:f8:47:0e:ef:de:2c:49:
                    52:1d:8e:bf:75:dc:eb:e0:50:2f:3f:b0:a8:9c:5f:
                    c6:45:7f:70:ee:c7:6a:14:2c:e6:e9:c2:e2:de:6a:
                    28:ae:30:e9:e1:b0:fd:88:c5:c2:50:81:dd:7d:fe:
                    31:3f:6f:44:d1:23:7d:13:1f:9e:51:40:5f:29:fd:
                    b6:03:66:f3:2b:e6:50:bb:44:7c:0b:05:5b:ff:14:
                    0c:2d:2c:69:32:7e:07:7e:83:e8:c1:89:b2:30:27:
                    ab:10:3e:fe:8f:c4:e8:a5:3e:22:f0:83:89:8a:6e:
                    07:df:f0:17:05:1c:5b:cf:da:5e:1d:80:57:53:b9:
                    a7:41:8d:3c:f0:4f:8a:53:62:71:0b:1b:09:02:33:
                    45:75:ee:d1:38:64:2c:49:70:a7:a9:67:7d:1c:89:
                    10:6a:ff:b8:13:7f:25:74:35:1d:e4:81:73:ed:90:
                    22:63:75:69:6f:f7:14:86:eb:96:e3:33:8f:3e:2f:
                    6f:b3:2a:60:72:f3:63:62:a4:cd:3f:39:a0:35:6f:
                    f0:d9:9e:96:52:07:a5:54:cf:a6:f6:48:27:b6:f6:
                    0f:84:9f:4f:95:20:be:e5:fd:1a:90:1f:73:c1:f9:
                    3e:8b:04:1a:19:cf:f7:32:39:cf:87:b4:1b:bf:41:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F5:11:A1:F8:0C:F4:80:83:65:BC:3F:70:47:D8:55:79:53:62:AF
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/717250DC0B1F11F0979AD09D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.193.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f4:9d:fc:d8:f8:a2:22:9f:ca:2f:28:96:29:a3:e6:56:cb:
         e5:bc:88:b1:4a:d8:98:56:4d:9b:ad:7c:fd:f9:11:38:53:e3:
         59:25:79:7e:4b:c6:72:70:68:24:cf:c4:00:d3:1c:c0:4e:eb:
         ba:37:a7:11:67:43:64:cc:5f:fe:8b:58:9c:6d:10:a4:f5:8d:
         69:d5:47:26:07:73:b7:87:80:e0:e3:dc:ee:6f:85:80:2f:0e:
         90:9b:10:97:72:b2:52:46:f3:7d:0d:19:6d:d1:ce:6f:4f:8f:
         28:43:4a:52:67:a1:41:fe:9c:97:4a:29:57:ec:91:63:e6:37:
         23:51:80:08:8a:e4:57:4e:f5:15:66:51:43:b4:72:8f:4c:3b:
         d9:75:22:1f:22:50:e1:bf:ca:78:26:f6:68:53:91:40:22:b4:
         49:f1:d4:c8:f2:6d:7a:12:33:65:fe:d3:e9:4e:f6:27:cc:be:
         ab:64:1a:ca:2e:f5:88:0f:78:29:b8:a0:87:d2:e9:b3:c6:9c:
         e4:3e:f9:d4:66:fb:25:65:ac:b8:5d:e6:03:3f:d3:e0:ff:74:
         06:6b:8a:71:3c:6a:57:1c:42:74:3b:19:6c:f5:99:4a:e9:13:
         55:b9:4b:1f:c4:3e:7c:7e:49:90:d1:8a:13:0a:9c:15:3e:a0:
         9d:78:6e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:18:36 2025 by rpki-client