Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DC08E20A912711ECA197D2AC5A40D577.roa
File:                     DC08E20A912711ECA197D2AC5A40D577.roa (raw, json)
Hash identifier:          3/6OJdScup0+U1oN3sdryApTLmKnKl3f2xyaHX9olAw=
Subject key identifier:   56:55:56:FA:72:4D:B1:6B:75:D1:3D:3D:40:B6:FE:2F:1F:B1:8B:26
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       02AB
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DC08E20A912711ECA197D2AC5A40D577.roa
Signing time:             Sat 19 Feb 2022 02:01:32 +0000
ROA not before:           Sat 19 Feb 2022 02:01:28 +0000
ROA not after:            Sun 19 Feb 2023 02:01:28 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 19 02:01:28 2022 GMT
            Not After : Feb 19 02:01:28 2023 GMT
        Subject: CN=62104f7c-db25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:8d:a2:38:d4:4e:9a:a3:7b:32:e2:44:40:
                    e9:13:6a:6e:8b:41:75:69:4c:be:29:39:c7:c6:59:
                    59:71:56:05:4e:7a:7e:fd:5e:31:c7:6f:cb:0b:01:
                    22:83:24:84:11:86:e6:07:a5:af:27:11:5c:58:76:
                    96:b7:d3:3e:2e:db:d1:4b:45:38:a7:3b:11:75:e5:
                    2a:3d:ba:c1:db:65:2e:0b:8c:a7:66:dc:cd:3e:ef:
                    7f:ef:19:ec:cd:53:67:9d:c7:2b:fb:c6:8d:ed:cc:
                    f6:a2:90:9e:93:0a:02:dc:92:ed:1d:0b:27:c6:d5:
                    fc:b2:69:ff:92:ef:aa:a6:b7:92:56:c5:c8:d5:af:
                    f2:43:f0:d7:e9:99:f5:8e:ef:f2:57:65:74:a1:99:
                    4d:f6:ff:48:d5:5b:4f:10:58:af:0a:c7:b3:d7:be:
                    e8:6e:c6:50:5a:7b:3b:8f:e7:d2:d0:0c:81:b2:cc:
                    1b:6f:2e:8f:1d:f4:a0:92:2e:c0:c8:78:7d:04:fb:
                    36:70:3d:b1:ba:b3:4e:da:68:ea:08:01:72:4e:b7:
                    93:ec:ec:b1:a1:a7:4d:6b:28:ff:6e:29:e5:d6:7f:
                    64:18:49:2b:dc:76:09:f9:00:fd:fd:3c:e0:4e:37:
                    a8:92:8a:bb:f9:33:20:4d:74:93:65:9a:c2:26:d6:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:56:FA:72:4D:B1:6B:75:D1:3D:3D:40:B6:FE:2F:1F:B1:8B:26
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DC08E20A912711ECA197D2AC5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:bf:69:5c:86:bd:95:fd:c3:b5:5f:a1:84:5e:70:37:5c:61:
         29:ff:44:04:f1:b4:d5:af:2b:0e:58:14:ca:be:52:b0:51:a3:
         92:1b:c8:93:6e:90:90:76:ec:76:2a:f5:e8:43:ca:6c:c1:af:
         b5:9e:3f:36:a4:b2:65:3b:1b:e4:2b:41:a4:15:28:2b:3d:24:
         32:56:79:53:98:7d:0a:98:c9:ef:27:5b:c2:b3:e9:a4:a5:26:
         51:03:0b:d0:af:7b:04:be:50:da:2a:de:30:98:4e:06:ac:6f:
         9b:30:9a:79:00:3b:74:5e:f2:ba:3e:98:95:cf:c1:ad:da:36:
         6b:50:df:05:44:2f:65:53:b8:01:34:af:3a:bd:9a:8b:30:ef:
         1c:1b:3b:71:ad:39:1c:de:43:ae:82:80:f4:b0:fb:d6:a8:b7:
         f3:36:a3:ff:64:cf:ed:80:76:df:4b:21:1c:48:36:04:e0:87:
         7a:95:b6:1e:11:be:d5:23:c5:5c:00:0f:49:57:5c:d8:82:fb:
         c3:fa:c7:6b:c8:80:b8:63:93:a3:93:06:60:0b:e4:16:25:f8:
         f3:42:c8:06:7a:64:81:30:bc:00:63:4f:0d:8b:63:d6:58:ee:
         0d:94:4c:0a:5b:94:9a:a1:b2:5e:db:38:68:a7:3d:ec:a8:04:
         5d:db:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org