Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/62C62618C1D111EFA174538B762E951A.roa
File:                     62C62618C1D111EFA174538B762E951A.roa (raw, json)
Hash identifier:          Mnmvkf1DTuvY/Dn609g7Vx3Ey+9Ez/VQoR58VvClnJQ=
Subject key identifier:   B9:49:5D:A5:FC:B6:39:A3:1B:42:BF:D5:88:86:69:41:02:F5:55:DD
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0443
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/62C62618C1D111EFA174538B762E951A.roa
Signing time:             Tue 24 Dec 2024 08:30:52 +0000
ROA not before:           Tue 24 Dec 2024 08:30:49 +0000
ROA not after:            Wed 24 Dec 2025 08:30:49 +0000
asID:                     329007
IP address blocks:        196.251.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 24 08:30:49 2024 GMT
            Not After : Dec 24 08:30:49 2025 GMT
        Subject: CN=676a713c-92e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:f1:81:77:17:b8:ed:9e:b9:3f:c1:56:54:
                    7d:f2:67:32:64:d6:b5:44:29:b6:3e:41:2d:0a:67:
                    e5:a0:30:95:13:63:44:5d:22:78:ca:65:36:8e:cd:
                    bf:b9:fe:f8:c3:5b:91:cc:ac:56:90:40:30:86:1c:
                    1e:a7:30:e5:a4:c5:d3:9a:e8:a6:ea:b0:7c:25:71:
                    6f:ec:28:0a:ff:c1:32:d2:e8:34:bd:5b:19:32:e8:
                    9e:31:40:74:5d:15:44:f6:5d:15:61:8f:72:a1:86:
                    be:dc:35:74:f2:5d:a1:cf:11:15:7a:8c:de:13:40:
                    cc:18:07:59:0c:9e:89:42:0f:c5:02:d6:4d:98:40:
                    92:6d:f9:09:c4:55:5e:77:22:b1:1c:8b:52:30:27:
                    06:b7:e5:e4:df:07:c7:18:94:e3:49:cc:2e:02:b5:
                    f8:af:b9:3d:47:f3:8b:49:45:89:57:8b:5e:9d:0b:
                    02:81:84:33:4c:18:e4:ee:77:49:6a:c7:89:b6:a2:
                    71:db:e7:a8:98:3d:2d:b6:9e:db:40:65:7e:89:89:
                    71:63:cf:f9:31:8a:c6:3f:a8:a1:77:8c:05:70:96:
                    89:eb:79:d9:bf:45:31:f9:7b:3e:a6:89:f9:a3:78:
                    9b:3a:a8:7c:8e:27:68:4f:e6:cf:e6:32:e4:2c:c1:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:5D:A5:FC:B6:39:A3:1B:42:BF:D5:88:86:69:41:02:F5:55:DD
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/62C62618C1D111EFA174538B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:33:a5:e6:59:98:5f:b5:ed:e2:df:26:52:a3:0c:cd:39:7d:
         9c:25:a1:5b:e6:58:c5:6d:5a:c1:ef:dc:c9:89:7f:a3:91:6b:
         a6:9a:37:87:26:d0:d0:26:1b:53:f6:49:34:01:4a:41:ca:76:
         6c:39:4e:97:40:7a:d3:a0:45:5b:e8:56:71:f6:ed:24:2d:21:
         cf:21:c3:98:9d:09:51:5a:b2:10:1f:23:71:21:f0:f4:8f:12:
         e9:de:f2:d1:2c:1f:1d:af:3b:8d:84:1a:5c:95:d3:e5:5f:c7:
         50:e7:6e:1a:9c:0d:8c:41:c0:18:5a:96:5d:0b:91:5d:3b:86:
         f2:90:f8:da:ed:7b:89:c2:48:e1:7c:e2:7a:5a:52:06:bf:80:
         f5:6d:38:7a:5a:88:dd:f0:a1:b3:61:e4:e0:f5:8d:90:69:dd:
         da:2e:c5:3d:7e:08:bd:58:6d:2d:d6:c7:36:e0:df:cb:92:d1:
         29:0e:1c:00:88:1a:88:42:d5:20:8c:1a:b6:80:ec:38:94:2e:
         52:6f:cb:0d:5e:dd:75:01:e1:5a:8a:f5:5e:21:22:af:ff:95:
         b4:b3:73:30:97:40:fa:c0:32:7d:c8:24:14:86:46:f0:f9:bb:
         09:7e:a6:1e:62:5b:4e:ec:c7:10:b7:fd:9c:02:2f:f6:23:17:
         6e:f4:8d:8f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNDEyMjQwODMwNDlaFw0yNTEyMjQwODMwNDlaMBgxFjAU
BgNVBAMTDTY3NmE3MTNjLTkyZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC89vGBdxe47Z65P8FWVH3yZzJk1rVEKbY+QS0KZ+WgMJUTY0RdInjKZTaO
zb+5/vjDW5HMrFaQQDCGHB6nMOWkxdOa6KbqsHwlcW/sKAr/wTLS6DS9Wxky6J4x
QHRdFUT2XRVhj3Khhr7cNXTyXaHPERV6jN4TQMwYB1kMnolCD8UC1k2YQJJt+QnE
VV53IrEci1IwJwa35eTfB8cYlONJzC4CtfivuT1H84tJRYlXi16dCwKBhDNMGOTu
d0lqx4m2onHb56iYPS22nttAZX6JiXFjz/kxisY/qKF3jAVwlonredm/RTH5ez6m
ifmjeJs6qHyOJ2hP5s/mMuQswcKbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuUld
pfy2OaMbQr/ViIZpQQL1Vd0wHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzYyQzYyNjE4QzFEMTExRUZBMTc0NTM4Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATE+2AwDQYJKoZIhvcNAQEL
BQADggEBABgzpeZZmF+17eLfJlKjDM05fZwloVvmWMVtWsHv3MmJf6ORa6aaN4cm
0NAmG1P2STQBSkHKdmw5TpdAetOgRVvoVnH27SQtIc8hw5idCVFashAfI3Eh8PSP
Eune8tEsHx2vO42EGlyV0+Vfx1DnbhqcDYxBwBhall0LkV07hvKQ+Nrte4nCSOF8
4npaUga/gPVtOHpaiN3wobNh5OD1jZBp3douxT1+CL1YbS3Wxzbg38uS0SkOHACI
GohC1SCMGraA7DiULlJvyw1e3XUB4VqK9V4hIq//lbSzczCXQPrAMn3IJBSGRvD5
uwl+ph5iW07sxxC3/ZwCL/YjF270jY8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:14:48 2025 by rpki-client