Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6BE75EEC894911EC977F808F5A40D577.roa
File:                     6BE75EEC894911EC977F808F5A40D577.roa (raw, json)
Hash identifier:          b5W+2jKQUzrdv9f1eP/eWuY3P3dq7kv+pV3l8I35cm4=
Subject key identifier:   24:92:A4:3A:81:38:C2:F2:53:9F:7D:A3:2C:45:03:7F:62:24:A8:DF
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0265
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6BE75EEC894911EC977F808F5A40D577.roa
Signing time:             Wed 09 Feb 2022 01:41:38 +0000
ROA not before:           Wed 09 Feb 2022 01:41:33 +0000
ROA not after:            Thu 09 Feb 2023 01:41:33 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb  9 01:41:33 2022 GMT
            Not After : Feb  9 01:41:33 2023 GMT
        Subject: CN=62031bd2-6f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:cf:d8:2a:45:ac:92:14:23:8b:21:7a:b0:
                    4e:de:47:58:b8:6e:e9:eb:59:08:be:e7:d9:4c:45:
                    69:8c:57:04:8c:6e:89:55:df:ec:09:6c:e7:bd:ba:
                    92:43:8a:50:e7:22:05:1b:b1:da:d8:86:5a:d2:fe:
                    c6:88:5e:11:45:39:ca:23:39:45:20:35:f8:55:18:
                    ed:89:cb:0f:1d:62:e6:19:d5:54:60:52:44:71:f3:
                    7a:75:38:61:30:15:ff:20:5f:75:ed:e0:24:3c:0c:
                    1c:84:44:1c:90:6f:58:b3:0b:c5:65:f9:e2:ed:71:
                    ca:63:26:e6:42:29:fc:f6:20:79:39:9d:43:74:53:
                    a5:f4:4f:9e:9d:fc:5c:58:c3:94:18:56:84:65:cb:
                    46:6a:0e:42:24:18:6e:69:6f:b6:99:7c:ee:63:0a:
                    96:96:ff:8a:16:77:4e:f1:ef:59:a1:26:26:15:0a:
                    17:74:f0:49:ce:54:78:0d:e5:59:6a:db:c8:7b:32:
                    5a:8c:4d:6a:cd:f0:4e:5b:e1:49:8e:f6:d5:03:ad:
                    73:bd:6c:6c:93:6c:e5:9d:74:2b:0f:83:f2:d4:7f:
                    a0:d1:cb:4b:62:94:6c:47:e9:33:84:c6:e6:8d:a8:
                    89:be:91:d0:b5:4b:11:63:11:c1:65:6d:44:bb:d4:
                    1b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:92:A4:3A:81:38:C2:F2:53:9F:7D:A3:2C:45:03:7F:62:24:A8:DF
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/6BE75EEC894911EC977F808F5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:66:73:bc:81:e0:8c:5b:97:07:93:6e:56:5c:e3:b8:ca:a0:
         f9:14:5a:8b:e4:b4:fd:8d:56:bb:a9:d9:cf:c9:d2:f7:78:50:
         46:a8:6b:f9:ed:97:31:78:d4:a4:26:50:53:e2:77:1e:34:cd:
         88:ca:c8:e9:a1:df:c5:3c:7b:0d:c2:be:07:d7:23:88:18:27:
         55:b3:33:a6:71:d8:52:63:0f:a4:94:d1:92:d1:0a:d2:d3:db:
         92:15:ec:97:a1:59:ad:44:9b:07:bd:92:7c:c4:51:4f:36:f6:
         72:cc:29:e0:51:bb:7b:13:ff:f9:cf:11:df:92:33:47:a1:ad:
         d6:ad:2f:7f:9c:83:06:a4:be:66:ca:1f:ec:e6:ba:a2:69:44:
         53:55:11:76:93:8d:2b:06:49:d2:23:81:28:33:54:a7:89:e5:
         16:32:94:05:d4:89:ab:88:bb:3d:50:b4:7a:b0:d6:ab:8c:f4:
         5a:4d:9c:d1:b7:62:cf:21:fd:c0:c2:89:e7:ad:bb:38:43:e1:
         c0:3d:e1:21:51:f2:33:dd:97:51:55:4b:d8:2d:7c:e6:0e:23:
         2b:23:08:9b:19:f7:9a:89:78:02:94:e1:1b:fe:9f:3f:d8:68:
         47:a8:49:64:67:e1:a4:20:27:65:cc:13:40:54:f8:07:7d:5a:
         34:9d:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org