Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/20CE933A895311EC993B32AC5A40D577.roa
File:                     20CE933A895311EC993B32AC5A40D577.roa (raw, json)
Hash identifier:          plbWjdtwg+SzbeZPX7PLF1+Ol4mOKlIH4+0hND3L0/0=
Subject key identifier:   E3:68:5B:45:64:A7:4F:4C:B7:82:9E:FC:F1:F1:87:29:06:C2:DD:DD
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0268
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/20CE933A895311EC993B32AC5A40D577.roa
Signing time:             Wed 09 Feb 2022 02:51:07 +0000
ROA not before:           Wed 09 Feb 2022 02:51:02 +0000
ROA not after:            Thu 09 Feb 2023 02:51:02 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb  9 02:51:02 2022 GMT
            Not After : Feb  9 02:51:02 2023 GMT
        Subject: CN=62032c1b-0dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:bc:16:27:b8:ba:10:94:c6:c9:af:86:10:
                    fa:ad:af:b1:b6:41:04:70:56:5d:18:51:11:34:02:
                    b9:61:d2:f7:71:e6:0f:74:5a:94:16:a5:7a:88:10:
                    ea:62:37:24:a7:20:7c:37:fa:5b:3e:ba:b9:de:2f:
                    ed:67:b3:ba:4d:38:af:32:07:0c:c0:9e:58:34:e7:
                    65:82:77:52:c2:88:40:76:a9:b5:43:ac:4e:e6:b0:
                    20:37:7b:14:d5:6d:56:d0:00:c6:49:8f:0a:27:e0:
                    cb:a2:95:92:93:7c:11:cb:23:75:9d:3f:3e:74:1a:
                    16:f3:e4:47:2a:dc:ad:4a:5b:79:14:d2:c2:9e:6a:
                    9c:98:13:28:e5:80:52:96:e4:86:0f:79:3d:2f:76:
                    57:5b:12:f0:be:eb:0c:a8:d8:b1:1b:f1:1e:1e:18:
                    8a:90:ee:2e:6d:73:01:b7:f7:0d:a3:08:89:4c:6f:
                    e9:c2:a1:45:22:39:a5:b6:03:44:9a:86:1a:03:1f:
                    c5:b5:6b:a0:19:f9:c4:2d:08:b7:77:5a:60:ef:6f:
                    a4:27:a8:f0:93:ac:d1:9f:7c:8f:36:0e:29:b8:c9:
                    b5:16:4a:f5:a9:1c:9d:bc:a3:ab:3c:f8:ae:c4:53:
                    58:7b:f4:66:92:eb:d3:99:75:9a:11:81:1d:81:bf:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:68:5B:45:64:A7:4F:4C:B7:82:9E:FC:F1:F1:87:29:06:C2:DD:DD
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/20CE933A895311EC993B32AC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:b6:ed:81:57:f2:5f:fe:c3:10:01:7f:a2:70:2b:b0:8b:
         97:ab:0b:75:52:2b:a5:d0:64:51:58:67:23:16:53:b5:82:e1:
         3e:a3:21:9c:b8:63:3a:6e:61:50:65:d4:d0:47:bc:2e:7a:af:
         e6:93:32:17:cc:96:7f:88:ba:c6:4f:a2:8a:02:fa:2d:30:85:
         d9:23:87:97:43:27:ac:d7:c6:49:74:a0:10:b6:d6:73:f2:a1:
         fe:68:8b:2c:08:15:a9:cd:40:82:ae:a3:1c:a8:35:70:3c:92:
         c9:f0:85:e6:6d:83:f2:97:13:c6:d6:e1:b2:aa:b9:a2:54:b6:
         ef:72:71:9d:b3:69:da:df:4b:0c:85:d4:7c:67:8e:de:c6:00:
         27:50:e8:ea:67:5e:9a:23:5d:21:76:df:8d:d5:a2:14:4c:37:
         58:2d:88:27:45:ab:06:79:d1:9d:46:65:86:34:c9:eb:2d:7d:
         83:3e:2f:ed:03:79:da:19:e4:4e:a3:6c:a4:5c:67:67:92:9c:
         bc:d9:96:7f:7a:49:bb:d4:8a:a5:18:58:60:4d:ca:e7:d7:bb:
         ed:35:7c:88:d5:d0:18:ad:6f:53:09:4f:33:8d:08:70:39:59:
         12:14:a4:11:60:a4:d6:e6:ff:54:57:1d:36:65:80:b8:47:f9:
         54:38:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org