Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/343D9586096D11F08590DE53762E951A.roa
File:                     343D9586096D11F08590DE53762E951A.roa (raw, json)
Hash identifier:          ZzHtgKwLqcyv9OQjl5Y0f58drU9x1FEqiYV+ko7a8Xw=
Subject key identifier:   AE:99:86:46:19:47:2B:65:B4:FD:02:87:48:A4:3D:D9:7A:14:6F:B8
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       082C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/343D9586096D11F08590DE53762E951A.roa
Signing time:             Tue 25 Mar 2025 11:35:08 +0000
ROA not before:           Tue 25 Mar 2025 11:35:05 +0000
ROA not after:            Wed 25 Mar 2026 11:35:05 +0000
asID:                     2914
IP address blocks:        102.135.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 25 11:35:05 2025 GMT
            Not After : Mar 25 11:35:05 2026 GMT
        Subject: CN=67e294ec-47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:98:39:a6:ff:1a:a3:ca:68:25:39:90:0c:
                    02:7d:61:4c:5b:f4:a2:8a:43:c2:07:14:34:18:c4:
                    29:c2:b9:e7:7e:db:44:8e:29:6c:6d:9e:af:3f:67:
                    0f:21:16:fc:25:8d:d7:21:84:d3:69:0e:aa:29:f2:
                    8d:0b:fe:a4:73:57:89:33:a1:9a:6c:55:74:61:31:
                    fc:f2:af:67:49:e2:9c:de:29:f5:a0:1f:94:7a:8b:
                    54:b7:a4:4a:cd:c8:d0:5b:ca:f2:51:78:59:ab:84:
                    ce:a3:f9:5c:51:34:a1:1b:74:42:d6:64:c2:38:de:
                    42:b4:f8:67:6e:60:18:f4:09:1a:b0:e9:51:e5:25:
                    fa:83:88:a7:9c:8f:60:18:c9:87:a6:be:df:41:57:
                    27:af:bf:78:b6:24:30:35:46:ed:ce:e8:f5:b6:b9:
                    3f:d2:59:fc:96:41:0b:68:2e:8c:10:ca:cc:0e:8e:
                    9a:be:c7:68:8a:b9:ce:e5:4b:1f:38:d8:03:59:fd:
                    24:67:0b:68:ac:8d:f7:89:63:bd:2f:0b:e5:76:ca:
                    c0:3a:8a:db:aa:65:7d:85:fa:3c:8a:88:94:0c:20:
                    97:6f:e0:1e:6c:fc:57:06:a6:e1:cc:df:39:2d:3c:
                    59:57:8f:91:58:1c:a7:ca:22:4a:e2:df:2a:61:f0:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:86:46:19:47:2B:65:B4:FD:02:87:48:A4:3D:D9:7A:14:6F:B8
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/343D9586096D11F08590DE53762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:e5:8d:84:38:f5:7c:29:29:54:5a:e0:9e:3c:d9:86:43:
         34:ec:e0:28:48:c5:1b:70:3b:e2:a6:17:44:86:a3:5d:1c:9d:
         4c:91:98:46:b0:33:de:7b:46:d0:37:f8:f8:c4:61:de:42:b7:
         43:25:db:7c:c1:be:44:5d:70:79:1b:a3:4c:6a:33:36:9e:21:
         6b:ae:79:56:b1:30:63:48:12:00:28:3a:2e:c3:30:f1:4d:5a:
         b5:7e:5d:f7:b7:21:80:81:ed:2c:1d:0a:33:91:28:70:d4:c7:
         ee:ec:db:69:1c:63:db:3d:b2:d2:a3:53:e5:15:6b:bd:d9:44:
         c3:55:85:08:b1:25:e4:71:7f:7c:4e:07:c8:7b:89:ec:3b:60:
         14:51:dc:b6:35:6a:b6:17:5d:c6:fb:5d:cb:db:bb:e4:ca:01:
         5d:84:87:68:6f:6f:2b:4e:c8:e5:d0:94:38:43:15:84:97:b8:
         af:41:4d:5b:b2:3f:c2:58:e5:5a:21:a2:df:50:b9:73:8b:20:
         45:22:4b:54:80:63:35:43:4d:d3:fa:08:cb:32:c1:54:72:37:
         c5:1d:87:13:ba:d2:b7:ab:a3:95:44:aa:c2:1c:73:69:4a:a7:
         94:bc:f2:4b:14:6c:4a:86:cb:f5:4d:5b:23:a0:db:b4:a4:33:
         d7:65:a9:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAzMjUxMTM1MDVaFw0yNjAzMjUxMTM1MDVaMBgxFjAU
BgNVBAMTDTY3ZTI5NGVjLTQ3ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+5Zg5pv8ao8poJTmQDAJ9YUxb9KKKQ8IHFDQYxCnCued+20SOKWxtnq8/
Zw8hFvwljdchhNNpDqop8o0L/qRzV4kzoZpsVXRhMfzyr2dJ4pzeKfWgH5R6i1S3
pErNyNBbyvJReFmrhM6j+VxRNKEbdELWZMI43kK0+GduYBj0CRqw6VHlJfqDiKec
j2AYyYemvt9BVyevv3i2JDA1Ru3O6PW2uT/SWfyWQQtoLowQyswOjpq+x2iKuc7l
Sx842ANZ/SRnC2isjfeJY70vC+V2ysA6ituqZX2F+jyKiJQMIJdv4B5s/FcGpuHM
3zktPFlXj5FYHKfKIkri3yph8EiXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrpmG
RhlHK2W0/QKHSKQ92XoUb7gwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzM0M0Q5NTg2MDk2RDExRjA4NTkwREU1Mzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmh1EwDQYJKoZIhvcNAQEL
BQADggEBAD8M5Y2EOPV8KSlUWuCePNmGQzTs4ChIxRtwO+KmF0SGo10cnUyRmEaw
M957RtA3+PjEYd5Ct0Ml23zBvkRdcHkbo0xqMzaeIWuueVaxMGNIEgAoOi7DMPFN
WrV+Xfe3IYCB7SwdCjORKHDUx+7s22kcY9s9stKjU+UVa73ZRMNVhQixJeRxf3xO
B8h7iew7YBRR3LY1arYXXcb7Xcvbu+TKAV2Eh2hvbytOyOXQlDhDFYSXuK9BTVuy
P8JY5Vohot9QuXOLIEUiS1SAYzVDTdP6CMsywVRyN8UdhxO60rero5VEqsIcc2lK
p5S88ksUbEqGy/VNWyOg27SkM9dlqbM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:48 2025 by rpki-client