Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4E32DC3AF80611EF8293019D762E951A.roa
File:                     4E32DC3AF80611EF8293019D762E951A.roa (raw, json)
Hash identifier:          Pkd5swb6cGQYuNxw/FRhQ6AQhCSWCoeMCK6rYmlpAKc=
Subject key identifier:   73:CB:2C:BD:62:B9:3D:E3:24:B2:F7:1D:70:28:B9:B3:EF:6F:6C:6E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       06C6
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4E32DC3AF80611EF8293019D762E951A.roa
Signing time:             Mon 03 Mar 2025 08:05:44 +0000
ROA not before:           Mon 03 Mar 2025 08:05:40 +0000
ROA not after:            Tue 03 Mar 2026 08:05:40 +0000
asID:                     329007
IP address blocks:        196.251.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734 (0x6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar  3 08:05:40 2025 GMT
            Not After : Mar  3 08:05:40 2026 GMT
        Subject: CN=67c562d8-81bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:dc:38:2e:09:d0:df:b1:b5:ff:c4:4d:98:
                    7c:69:52:86:6f:52:62:05:18:9e:14:a0:f5:7a:a7:
                    6e:da:ce:8e:b5:de:00:32:f5:5a:d2:99:b4:30:51:
                    21:68:c6:f3:1e:cd:88:10:b2:ac:ca:ed:1d:ba:22:
                    3c:d3:a1:e5:b4:41:6f:a6:bf:ed:ee:3d:63:63:68:
                    fe:45:2e:3f:dd:41:34:50:58:ea:65:d4:54:99:6a:
                    de:de:d7:07:8d:78:f0:21:bc:f3:78:9f:25:41:39:
                    3a:d5:0a:e6:76:b6:c9:c1:56:ca:32:6d:29:36:49:
                    5f:f0:44:f0:ce:19:32:77:cd:81:c9:ab:69:1e:74:
                    e5:4c:3c:ea:5d:d7:d6:ed:9c:2c:09:0a:77:c3:01:
                    ec:e2:45:7a:16:a4:1c:67:ba:be:81:4c:40:b5:87:
                    46:57:c0:62:51:d3:a8:79:43:75:27:be:53:29:79:
                    b9:48:e7:59:81:db:24:4a:0e:a6:c8:4e:13:63:ed:
                    a8:11:47:9c:97:d5:ce:17:a2:9d:b9:0f:99:9a:f5:
                    05:92:d0:45:28:3b:a6:47:d3:3a:21:81:64:2f:44:
                    bc:a3:99:ff:b1:d7:a5:b2:11:91:3f:a8:10:8b:37:
                    57:79:c9:c3:20:c0:60:52:97:7c:34:dc:58:d8:8b:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CB:2C:BD:62:B9:3D:E3:24:B2:F7:1D:70:28:B9:B3:EF:6F:6C:6E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/4E32DC3AF80611EF8293019D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:d0:00:8c:b8:b6:b5:c4:6e:a1:80:85:41:f5:f8:ab:49:
         5a:4e:42:64:6a:b1:e9:dd:8a:16:21:35:bf:59:9a:e3:a6:d5:
         1f:df:8e:d0:2e:49:18:ff:52:b4:f0:46:07:25:c7:2a:8a:3d:
         6d:71:34:2d:a7:78:f1:7d:1c:81:6b:b6:58:e7:a8:00:05:ed:
         74:b6:0e:9f:07:15:6b:47:bd:74:e4:6b:2d:89:cb:7d:cd:f8:
         94:1b:95:b7:ee:b5:41:90:e0:d7:70:ae:59:49:05:be:87:74:
         54:39:77:58:bc:d4:6c:9c:e1:40:4d:69:47:33:89:aa:77:43:
         08:90:aa:a3:a3:c1:c8:41:f7:93:27:cb:13:e2:c9:3b:b0:63:
         89:38:df:c7:14:0d:44:ac:bb:04:90:ee:f9:bf:eb:c8:a2:d7:
         81:de:38:c1:68:ca:dc:15:0e:39:fe:c8:c9:f8:36:df:11:e8:
         d4:f3:18:7b:3f:9f:f2:dc:40:46:3a:f2:29:4e:1e:15:dd:e4:
         d4:06:3d:0d:e8:e3:ae:47:78:be:ad:4f:35:45:a6:03:16:c1:
         03:fc:3f:16:24:45:43:11:d8:7a:27:7e:58:2b:2e:bf:cd:fc:
         3a:44:e1:92:5f:ab:91:dd:03:eb:c2:db:79:60:2f:b2:45:52:
         34:f2:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:06 2025 by rpki-client