Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0C5CB3E202EE11F0AF3B294D762E951A.roa
File:                     0C5CB3E202EE11F0AF3B294D762E951A.roa (raw, json)
Hash identifier:          h4XOZqZXnVYYeyycDvhXxlR1H9zTIP4VMmzg1eL1Ovw=
Subject key identifier:   01:CF:5C:AD:F2:28:95:B1:16:BE:09:C1:9A:7A:FC:00:C6:F7:D2:B4
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0714
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0C5CB3E202EE11F0AF3B294D762E951A.roa
Signing time:             Mon 17 Mar 2025 05:09:48 +0000
ROA not before:           Mon 17 Mar 2025 05:09:44 +0000
ROA not after:            Tue 17 Mar 2026 05:09:44 +0000
asID:                     401120
IP address blocks:        196.251.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 17 05:09:44 2025 GMT
            Not After : Mar 17 05:09:44 2026 GMT
        Subject: CN=67d7ae9c-b46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b8:36:6a:6f:a4:91:d8:c5:bb:14:1f:92:d3:
                    67:99:0e:12:6b:f0:4e:fe:04:f8:9b:aa:a3:ea:50:
                    b0:82:89:37:6e:44:37:fc:5e:2f:c4:69:ea:9d:22:
                    2a:6a:c3:35:a9:84:49:42:f1:1b:4b:ad:c8:2a:9b:
                    9a:8e:3c:4d:cb:21:d2:10:07:f6:e7:05:f0:6e:2e:
                    be:b2:08:60:58:e0:fe:15:a2:32:3b:d5:f4:92:5c:
                    b4:f8:de:c0:df:33:30:9f:86:d5:b1:68:3c:14:3f:
                    bb:d8:b2:3b:92:4b:dd:de:ad:78:b6:73:19:2b:e0:
                    5f:e9:b7:9e:e8:6a:9b:f8:9c:b1:6a:bd:70:0c:34:
                    51:52:25:6c:56:b7:7a:74:96:27:be:66:c2:52:45:
                    65:41:63:43:2d:c1:e7:9a:c3:a9:c8:ff:46:2c:86:
                    20:57:15:82:f5:ae:d5:e2:5d:05:c4:57:f7:bf:01:
                    31:5a:42:eb:0f:9d:95:89:04:57:d8:4c:f6:4c:47:
                    39:bb:77:9a:ef:b6:f6:0e:b7:b4:1c:78:37:07:0c:
                    92:bb:37:ef:0e:db:88:77:35:2c:34:c9:89:6f:18:
                    59:8c:b3:f5:e9:f1:1a:70:28:37:aa:6c:8b:55:93:
                    48:41:95:34:4b:4d:d7:5d:b4:25:93:d5:2a:f6:e5:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CF:5C:AD:F2:28:95:B1:16:BE:09:C1:9A:7A:FC:00:C6:F7:D2:B4
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/0C5CB3E202EE11F0AF3B294D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:1e:9b:1e:5c:d0:94:21:21:63:ea:3c:d1:21:c9:52:5b:
         af:05:a9:f4:d6:65:d8:64:06:04:94:2c:50:9d:3f:1a:7c:42:
         5e:e1:20:f5:de:5b:40:02:75:72:c8:86:46:f2:d8:14:8a:f8:
         43:05:43:00:2b:28:88:9f:ea:95:50:35:16:fd:82:1a:39:a3:
         1b:57:68:66:c0:62:0e:49:90:c4:d5:81:35:3e:2d:7a:af:9a:
         b6:cc:07:eb:7a:44:7e:eb:e7:85:ae:93:4e:be:77:ad:91:89:
         cc:e5:7a:4d:0d:7d:70:77:54:ae:93:81:24:c7:d2:3f:74:bb:
         68:89:55:b6:a5:99:75:ff:8d:de:29:5b:6a:b8:38:51:e9:91:
         6e:54:0b:23:88:01:ee:05:8b:80:64:3a:70:2c:0c:ce:5a:55:
         37:75:bb:bb:41:8c:5b:74:4d:02:e8:ff:34:e0:d9:f0:f8:90:
         2c:67:9a:08:4d:06:d5:a8:9e:58:af:42:07:37:e3:ac:a2:6a:
         a5:8f:ce:2f:51:29:3f:c4:d0:c9:8f:7e:e0:5a:01:c9:ad:d1:
         71:19:2d:35:b8:ba:43:74:69:d2:aa:ce:c5:a1:90:44:a2:a6:
         84:c6:8e:03:e2:58:50:b5:51:4e:59:c9:45:39:37:85:c9:76:
         c1:3c:52:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:37 2025 by rpki-client