Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/69A1F2C0061711F080CCF878762E951A.roa
File:                     69A1F2C0061711F080CCF878762E951A.roa (raw, json)
Hash identifier:          Ex6nQC5DgsvsC7lUryCITr4nMXhAKyA471JzJe3Fwv0=
Subject key identifier:   95:17:08:35:48:1B:70:F2:41:93:E1:F7:63:99:BB:6F:2A:82:99:1D
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       078D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/69A1F2C0061711F080CCF878762E951A.roa
Signing time:             Fri 21 Mar 2025 05:43:27 +0000
ROA not before:           Fri 21 Mar 2025 05:43:23 +0000
ROA not after:            Tue 01 Dec 2026 05:43:23 +0000
asID:                     56913
IP address blocks:        102.135.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 21 05:43:23 2025 GMT
            Not After : Dec  1 05:43:23 2026 GMT
        Subject: CN=67dcfc7f-c412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:23:2b:8d:4e:4f:f5:2f:9b:f8:a0:b8:b5:
                    14:b4:05:a0:47:40:54:e1:94:34:ef:cd:d8:8a:7a:
                    97:f4:80:1a:74:af:43:6b:dc:7b:b3:e4:82:12:3f:
                    ed:a6:04:8d:ac:da:83:c8:66:e9:36:90:1a:65:4f:
                    00:d0:0c:c6:b0:bd:28:fe:c7:7a:a9:db:4d:52:e9:
                    cc:4d:a8:8a:e6:fc:05:a7:2b:58:a8:6a:b2:16:1e:
                    ca:2f:ff:e5:48:d5:bc:af:10:96:59:61:e1:7b:e3:
                    ae:b9:9a:57:19:9a:b2:5d:56:b2:74:2c:f3:17:d6:
                    7c:cf:fa:f6:22:11:b2:24:6c:14:ff:75:19:17:75:
                    b6:8a:e6:be:14:bb:57:e3:f2:75:3b:11:d4:82:f7:
                    60:7a:bc:6c:2f:c3:93:90:10:7d:44:c9:be:61:67:
                    86:fa:3e:ca:d5:e5:bd:f2:66:c1:6f:d4:19:16:df:
                    32:45:37:40:43:e0:63:78:6c:ac:78:d1:e5:2e:83:
                    7a:1e:d8:bc:ff:fe:3b:6f:c5:69:cf:a9:98:e9:ab:
                    6f:d4:d0:4c:54:f8:4c:42:76:2a:50:a2:66:ec:3f:
                    0d:b6:5b:e9:fd:1b:a8:5d:c9:d2:67:70:a8:e1:f1:
                    6f:b4:82:78:03:67:f4:c3:af:b1:d6:ca:94:c2:e3:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:17:08:35:48:1B:70:F2:41:93:E1:F7:63:99:BB:6F:2A:82:99:1D
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/69A1F2C0061711F080CCF878762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:49:4c:0a:7a:e4:ce:2d:4a:e9:f5:62:90:fe:21:2a:e7:0b:
         03:8c:2c:28:29:ca:97:df:83:d7:13:71:e7:17:31:e1:9e:53:
         5e:42:4d:24:8a:2e:3c:44:09:44:73:6c:ba:b4:0a:82:ea:3b:
         98:64:f0:33:e0:00:5b:ad:38:08:da:c4:9f:90:b4:b8:1f:f7:
         6b:0f:10:19:cf:b1:4f:ea:0c:82:de:4c:41:17:8a:6d:b6:2f:
         ca:c4:4f:d7:dd:d1:b9:a7:19:a5:51:1d:22:2e:d2:8d:c9:68:
         72:d3:3f:57:78:1a:da:51:88:a8:3a:73:14:d7:84:ca:60:75:
         a2:c9:85:49:a3:7f:f5:a7:33:0d:73:7a:7b:7d:3b:c9:1d:5b:
         51:48:5d:8b:ee:36:b5:35:89:3a:3f:b8:97:c1:e7:41:0b:6a:
         60:c1:97:ab:62:a0:86:e3:ac:c4:e3:c1:87:bc:86:3b:7b:3d:
         09:ae:85:1b:65:22:29:49:9c:34:19:da:b6:81:b9:bc:8f:a5:
         8b:1c:78:fb:56:c8:42:3c:cf:b3:11:24:ac:55:4a:c6:b8:22:
         57:7a:9c:c5:cb:72:de:45:bf:98:cc:39:bf:d1:39:0a:63:9d:
         4e:81:45:a2:3a:39:5c:bc:12:18:da:45:85:a2:7c:6a:d2:e8:
         56:1b:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:27:43 2025 by rpki-client