Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/45475CD8ED2311EF9021A97A762E951A.roa
File:                     45475CD8ED2311EF9021A97A762E951A.roa (raw, json)
Hash identifier:          l58h9mwWYSbU2u6VuItE/TTeErK7BGxDT1FUOSgpnpI=
Subject key identifier:   2A:BC:5F:EE:7C:2D:8D:93:B6:6F:0E:01:30:98:CA:07:1A:B3:C8:A6
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0673
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/45475CD8ED2311EF9021A97A762E951A.roa
Signing time:             Mon 17 Feb 2025 11:35:22 +0000
ROA not before:           Mon 17 Feb 2025 11:35:07 +0000
ROA not after:            Tue 17 Feb 2026 11:35:07 +0000
asID:                     208485
IP address blocks:        196.251.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Feb 17 11:35:07 2025 GMT
            Not After : Feb 17 11:35:07 2026 GMT
        Subject: CN=67b31efa-3d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:0a:26:e3:9c:31:4e:79:a4:2e:c5:63:8a:
                    9d:5c:f8:5d:95:ac:2d:c8:92:13:bd:60:31:20:04:
                    21:b4:7a:9b:5b:6d:06:b0:58:81:14:3b:41:44:e8:
                    cc:a2:50:38:aa:82:94:18:7b:4b:58:49:9c:da:33:
                    49:ac:c9:13:35:e1:f9:ec:bc:2d:fa:f9:18:f6:bd:
                    ec:ec:15:05:36:77:c8:be:f3:71:b3:49:2c:4f:07:
                    9a:30:00:eb:40:3b:0d:05:9d:d5:bd:8f:41:77:34:
                    7b:91:10:8b:dc:2d:c5:a7:99:3a:e2:a3:97:a2:8a:
                    e6:42:89:8a:b9:15:5e:d2:d8:d2:78:9c:30:8b:83:
                    7a:01:2a:d9:05:99:13:0f:7b:22:cf:72:c6:db:2a:
                    f4:be:bb:f8:05:e6:4d:51:dd:c6:1c:29:37:12:4c:
                    c3:5b:b6:e8:74:8a:3f:33:e4:61:d4:cd:0a:53:ad:
                    9d:49:58:a0:c9:c2:b4:81:1b:5e:59:e6:75:43:ab:
                    84:48:67:d7:43:7b:50:ea:b1:10:16:0c:a5:98:63:
                    e7:17:15:23:9e:79:30:c9:2f:dd:1e:f4:5a:00:bd:
                    7b:65:f9:0a:a3:59:ea:27:91:eb:02:4c:9a:81:ba:
                    8b:4e:49:00:a9:7f:7a:3a:da:4e:cc:d0:5c:e0:1a:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BC:5F:EE:7C:2D:8D:93:B6:6F:0E:01:30:98:CA:07:1A:B3:C8:A6
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/45475CD8ED2311EF9021A97A762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7e:aa:7e:66:b0:39:45:89:32:f4:35:98:5c:c6:75:53:40:
         b9:cf:71:e7:88:93:d0:74:6f:11:cf:f4:eb:02:00:3a:9d:dd:
         0b:bf:95:43:3a:5d:58:f8:1b:04:21:d3:a1:6b:28:2e:bc:0a:
         d9:c4:85:bf:71:e7:5e:32:ad:32:2d:ee:aa:b4:78:fc:44:b9:
         bc:63:ee:5e:b5:b9:11:64:0d:aa:7d:ad:50:65:08:73:ab:eb:
         9d:38:17:a0:f8:9e:28:0f:ad:2f:4d:81:e4:1d:05:0b:ef:15:
         a9:0f:d3:5c:77:14:a9:45:3a:cb:29:30:81:60:5b:d6:fb:0a:
         1a:46:c1:e7:bf:0b:db:22:91:cb:bc:10:5e:87:ea:4a:f7:e5:
         49:48:d0:64:ff:49:20:9b:d0:be:cd:19:b7:be:d5:bb:6e:05:
         b7:22:88:87:41:a8:b8:93:07:b2:e1:fb:12:ab:94:e3:bf:8d:
         6d:ca:68:6b:6b:c5:f7:9c:31:f1:4b:c1:8f:ff:40:4c:f2:4b:
         57:0e:26:6d:93:27:fb:35:46:14:b1:f5:0c:a0:e1:61:99:1c:
         19:f4:25:94:ff:7d:6e:2e:02:17:01:c5:b7:c4:9f:8b:5a:17:
         3c:5c:ac:1b:bf:64:85:2e:d0:03:b1:79:bd:ab:4b:5c:ca:89:
         54:ed:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:01 2025 by rpki-client