Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6BD2A214268C11ED96642BB3F1222468.roa
File:                     6BD2A214268C11ED96642BB3F1222468.roa (raw, json)
Hash identifier:          wX/lECmraadm82m6WR+wnoHylIgrEmYA5nXu2r3Q0jQ=
Subject key identifier:   0E:4B:C7:18:C9:7A:92:1F:D0:E4:79:CA:BC:14:A1:C9:28:7D:C6:BA
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       066B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6BD2A214268C11ED96642BB3F1222468.roa
Signing time:             Sun 28 Aug 2022 04:46:46 +0000
ROA not before:           Sun 28 Aug 2022 04:46:42 +0000
ROA not after:            Mon 28 Aug 2023 04:46:42 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643 (0x66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Aug 28 04:46:42 2022 GMT
            Not After : Aug 28 04:46:42 2023 GMT
        Subject: CN=630af336-21a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:ed:6d:04:f2:b6:a3:3e:97:0b:2e:47:44:
                    d7:32:a6:e7:e5:cd:64:53:b8:d7:03:b6:0f:fd:0d:
                    46:df:5c:94:af:73:00:4b:a1:61:a6:91:88:65:0e:
                    24:49:d2:80:f7:44:75:24:42:45:65:00:97:94:c0:
                    1e:93:10:ec:24:1d:8f:ae:d7:f4:66:c0:72:04:70:
                    fd:ec:80:53:53:9b:80:50:4e:91:50:97:7e:4c:13:
                    92:f2:d7:b7:7b:39:f9:a3:94:f3:92:3f:2d:78:cd:
                    87:0a:a6:6b:ae:5d:c4:f5:08:33:a8:58:1e:63:5a:
                    5a:51:53:a6:7b:a7:9a:29:dd:7d:2b:6e:2e:53:e3:
                    f7:0c:ea:70:dd:7a:93:66:e6:77:ad:1b:7e:4d:e1:
                    0f:0d:9e:19:e1:a5:ba:37:86:bf:28:1a:eb:e9:9b:
                    72:8c:73:1d:4c:11:d0:7f:04:5c:e9:6e:4a:cc:70:
                    44:68:5c:e4:3b:26:c7:6e:b1:35:52:58:35:f8:6b:
                    2d:a4:46:3e:88:cc:b3:1f:8f:87:f3:78:e8:42:63:
                    02:f4:21:1f:a3:cd:cb:fd:a0:be:4e:66:73:5f:38:
                    05:8f:cb:91:4e:95:62:36:e3:cf:02:6c:08:77:85:
                    e7:20:5f:ee:5f:b0:9d:90:74:a1:d4:0e:d2:59:bf:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:C7:18:C9:7A:92:1F:D0:E4:79:CA:BC:14:A1:C9:28:7D:C6:BA
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6BD2A214268C11ED96642BB3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:9d:6a:33:91:c8:3c:95:7d:32:75:ae:74:7a:06:bc:8c:
         02:c5:17:1a:eb:52:47:49:2b:f5:1d:42:1e:23:2f:85:96:b4:
         24:ce:cc:7d:cd:97:2a:83:ed:d7:70:05:31:01:84:08:45:02:
         d7:d7:ec:06:25:da:31:0d:6e:35:5d:e1:2a:55:92:95:02:83:
         3e:78:47:c2:0a:38:93:b7:12:87:c1:61:96:49:8e:8e:ee:3d:
         a5:b3:82:25:11:8b:75:6a:7b:2f:84:f6:88:e6:7f:28:43:61:
         a9:96:8a:7c:06:99:9a:0d:67:a3:c1:81:80:73:64:1b:57:a2:
         ae:ec:c2:14:35:41:72:96:09:46:5d:fd:b2:7e:a8:6f:b2:35:
         0b:8e:2b:4f:db:37:00:f1:75:2f:45:a1:da:a8:7e:91:4f:f7:
         0e:a3:4e:01:36:dd:f3:62:92:c7:c5:b9:19:8b:70:49:47:9d:
         0c:c3:bc:04:ed:ae:a1:08:d1:14:13:10:40:2b:e7:3b:9e:ec:
         fe:0a:f1:97:fd:9e:08:1a:01:9c:65:01:e3:ba:43:aa:82:5c:
         bf:37:00:59:32:05:fd:91:7d:50:c1:19:0b:36:13:66:87:48:
         5d:3c:c0:b5:98:b8:46:32:5f:76:d2:dc:ad:ff:e3:f8:84:47:
         6e:09:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org