Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5D52DB4C02ED11F0B44BA748762E951A.roa
File:                     5D52DB4C02ED11F0B44BA748762E951A.roa (raw, json)
Hash identifier:          q3Pw1JTWhcxu3sqsYRd4WuS655bbKhKLggtqkoM4lcs=
Subject key identifier:   E4:47:CF:2F:74:22:CE:AB:29:F8:76:9D:BB:68:44:B9:5B:67:4E:A0
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       070A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5D52DB4C02ED11F0B44BA748762E951A.roa
Signing time:             Mon 17 Mar 2025 05:04:54 +0000
ROA not before:           Mon 17 Mar 2025 05:04:51 +0000
ROA not after:            Tue 17 Mar 2026 05:04:51 +0000
asID:                     401120
IP address blocks:        196.251.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 17 05:04:51 2025 GMT
            Not After : Mar 17 05:04:51 2026 GMT
        Subject: CN=67d7ad76-a154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6c:a2:96:64:93:8d:d4:03:84:48:1f:47:c0:
                    a2:ab:73:f9:b3:2c:43:ab:5d:ad:5d:ae:1d:05:97:
                    a5:06:5c:7b:45:c9:9b:d3:8f:0f:b8:13:7a:69:ef:
                    1a:0d:c0:27:8f:eb:6b:2a:75:a1:50:a6:06:c4:f0:
                    27:ca:9f:87:38:22:e9:bd:a9:e9:69:3a:83:77:b6:
                    ed:10:12:d8:af:21:94:40:4b:f3:4f:e9:44:dc:5a:
                    45:07:40:b8:92:ea:f2:14:fd:29:e7:71:35:93:66:
                    2d:33:78:78:09:72:0d:5c:b7:d7:00:96:40:f4:1a:
                    b6:ec:37:8c:93:b0:68:69:37:3d:bc:2d:dc:e7:f1:
                    50:15:81:b1:12:b7:76:1c:f9:18:3d:c6:b5:77:cf:
                    67:94:ef:75:f4:df:a9:af:6e:03:66:9b:d4:bf:63:
                    12:4f:8b:8d:69:99:35:4d:3f:e6:b7:07:cc:b9:38:
                    f6:cc:94:e0:b6:bc:0e:a2:93:4b:8b:24:11:f3:3a:
                    df:48:75:0b:4d:34:4f:a0:70:1d:17:cb:19:84:ab:
                    c6:ae:11:f3:b6:75:0d:97:8d:7e:27:5d:ba:3a:3d:
                    93:01:47:54:30:d9:8a:71:bf:ba:84:77:2a:d4:f0:
                    3a:cd:d0:ca:4d:71:41:61:cc:20:aa:ff:b7:8e:7a:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:47:CF:2F:74:22:CE:AB:29:F8:76:9D:BB:68:44:B9:5B:67:4E:A0
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/5D52DB4C02ED11F0B44BA748762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:9a:34:4a:43:76:31:2e:f6:5e:dc:91:a8:ea:7b:a3:05:f7:
         02:e9:aa:92:06:07:c7:49:44:c0:b5:56:f7:10:96:a0:f7:01:
         4e:00:78:d6:5d:b2:73:b5:96:da:75:1f:71:2b:93:0a:12:f1:
         b1:1d:98:4c:75:d9:a4:3f:f7:b0:88:b1:9a:4a:4d:4c:ba:7b:
         61:17:bb:d1:7f:80:28:de:69:9d:c9:b9:b7:52:f5:6a:32:03:
         e7:68:5e:fa:b8:6b:32:f1:aa:03:aa:ae:ea:43:92:78:1a:2c:
         91:e8:02:a0:3f:37:cd:3e:67:6f:d2:fc:be:c1:3b:07:d2:75:
         57:3c:ba:2c:73:0d:d2:af:b8:7c:6d:db:fc:74:42:9d:a0:53:
         ac:6e:ea:ab:9c:c1:1f:51:04:16:94:5e:0c:65:c4:38:65:11:
         a5:b4:3c:44:5d:4b:63:da:e0:ee:f6:64:f8:f3:0f:3c:4f:1f:
         ec:25:57:a4:0d:cc:42:ef:61:b4:3c:55:01:23:08:70:e3:a5:
         27:ff:61:e5:81:39:04:9b:14:67:6c:5c:36:52:4d:8d:59:f4:
         63:21:0f:cb:d4:72:77:56:e1:b0:d6:bc:d5:12:36:cd:ae:fd:
         ed:2f:b0:68:93:8e:53:94:70:6c:07:c4:dd:73:b4:d8:80:db:
         ce:4e:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:14 2025 by rpki-client