Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/33AE3BF6C1CF11EFA64D3E7E762E951A.roa
File:                     33AE3BF6C1CF11EFA64D3E7E762E951A.roa (raw, json)
Hash identifier:          w6CduNEHywD7Ytq56VnqaZe3vKxFx7h7eG0G6WCJEe8=
Subject key identifier:   1C:04:B4:73:E5:4E:9F:F8:B7:95:FD:55:2E:B8:A4:36:DF:5D:DF:35
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0435
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/33AE3BF6C1CF11EFA64D3E7E762E951A.roa
Signing time:             Tue 24 Dec 2024 08:15:14 +0000
ROA not before:           Tue 24 Dec 2024 08:15:10 +0000
ROA not after:            Wed 24 Dec 2025 08:15:10 +0000
asID:                     329007
IP address blocks:        196.251.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 24 08:15:10 2024 GMT
            Not After : Dec 24 08:15:10 2025 GMT
        Subject: CN=676a6d92-4486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:e5:b5:60:fc:45:41:92:2e:9a:3f:e1:12:
                    c6:ea:7a:b2:f4:82:e7:69:d1:e7:49:36:d0:f5:4d:
                    12:ce:16:4f:79:03:79:2d:11:d1:15:c5:6e:a0:fe:
                    c6:b6:13:88:85:6e:47:ed:b9:b5:18:80:f0:59:f8:
                    46:34:80:c8:7c:bb:08:4a:f5:98:7e:18:bf:fd:f6:
                    50:49:79:81:ad:86:d0:c6:d8:7d:3f:1d:0c:8f:45:
                    a9:f3:98:d7:c7:25:67:f4:63:8e:7a:73:f4:eb:01:
                    4b:07:5c:61:99:7a:40:dd:62:5a:8d:d7:92:b9:71:
                    42:43:65:1a:b0:67:6f:13:31:65:e8:3f:09:d9:a0:
                    b6:70:6f:57:77:53:16:1e:14:49:1e:93:10:f8:86:
                    8a:4a:f9:1e:5c:6e:00:de:d9:b5:a7:72:95:a6:ea:
                    d9:a4:a5:c0:40:da:38:0a:7c:f9:db:76:b3:3f:ba:
                    cf:c3:fd:4f:e3:cd:bc:d3:86:dc:e8:7f:03:6e:ae:
                    c9:82:f1:53:3f:90:1e:30:c0:ba:71:32:92:d4:ed:
                    0b:c6:e1:66:91:d6:b6:6b:5b:a8:66:9c:f8:12:ef:
                    b0:f0:67:b3:71:7f:22:5d:44:83:a8:08:c9:61:16:
                    2a:78:d3:e2:3d:77:b2:96:5e:37:10:c5:88:db:c6:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:04:B4:73:E5:4E:9F:F8:B7:95:FD:55:2E:B8:A4:36:DF:5D:DF:35
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/33AE3BF6C1CF11EFA64D3E7E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:37:35:cd:b9:db:1b:47:9f:44:80:13:dc:1e:96:89:e8:a8:
         4a:58:66:37:87:e2:ed:df:03:5b:ab:13:7d:bd:f9:7b:84:a5:
         5f:94:3e:35:a3:c7:31:d8:c0:c0:2f:82:81:eb:42:c2:f9:66:
         f2:f9:d0:da:05:a6:91:5a:5b:9a:0f:e8:df:22:51:70:00:fd:
         14:97:93:b0:13:ee:05:d6:44:3d:24:19:64:3c:70:4b:3b:5e:
         d6:57:92:90:6e:5a:32:10:64:07:4a:a6:c3:2a:64:64:30:be:
         3c:8c:47:03:c3:68:45:e3:49:b2:54:c2:ad:d4:af:e9:5c:5c:
         f7:c5:71:e6:be:e7:de:d1:43:a7:00:57:29:56:75:94:71:16:
         04:39:ec:2a:54:bb:8c:c0:8f:bf:48:d7:3c:73:73:52:78:b2:
         cf:40:78:3b:f7:3d:fc:7a:f1:48:c6:2f:ba:18:c3:ee:8c:e0:
         51:17:6b:17:32:d0:97:05:79:a6:85:b6:5f:b2:ff:36:40:55:
         d1:fa:35:53:43:0b:f7:aa:fb:d8:ad:94:6e:24:3a:0a:cd:a0:
         22:c1:fe:35:f0:dd:8c:68:39:b9:21:ae:db:a9:7d:66:05:97:
         d0:49:6f:0a:33:d1:c4:2c:b8:87:5c:0f:e0:fd:2e:44:9b:4e:
         32:2d:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:37:38 2025 by rpki-client