Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/80917500D33611EFA181559E762E951A.roa
File:                     80917500D33611EFA181559E762E951A.roa (raw, json)
Hash identifier:          2erRTrkmrbf2J6NybnhzNHPkY380sVlsddPSxL7y3AA=
Subject key identifier:   8D:73:DF:71:E9:2C:55:B5:4A:AF:98:5E:4D:E2:CF:61:3E:D0:6F:98
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       054E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/80917500D33611EFA181559E762E951A.roa
Signing time:             Wed 15 Jan 2025 11:47:32 +0000
ROA not before:           Wed 15 Jan 2025 11:47:16 +0000
ROA not after:            Thu 15 Jan 2026 11:47:16 +0000
asID:                     53356
IP address blocks:        102.135.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Jan 15 11:47:16 2025 GMT
            Not After : Jan 15 11:47:16 2026 GMT
        Subject: CN=6787a054-0848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:76:34:40:5e:9e:bb:b8:bd:2f:49:0f:2e:
                    13:c7:fa:0e:ad:ac:7e:49:c5:59:be:2b:d9:89:a1:
                    a6:8e:df:d6:90:1b:44:b4:2f:87:0f:dd:cd:fb:c9:
                    bf:4b:68:c3:ca:30:eb:f9:98:02:3a:40:c9:15:15:
                    c0:09:9e:c8:05:be:71:11:9a:ce:76:5c:76:77:ec:
                    31:a0:98:0e:3a:43:88:41:4c:7d:61:37:ba:8d:9b:
                    f6:27:ed:13:9d:27:e9:7a:47:49:12:e3:e3:2b:40:
                    e4:e0:90:49:ec:3f:3f:7d:d8:a1:9d:33:9f:b0:0c:
                    67:25:45:4d:76:53:67:d0:4a:db:32:16:c4:3e:4c:
                    db:8d:50:cf:6e:d0:40:f4:ab:5d:14:3e:c8:7d:a2:
                    0d:7c:38:c8:aa:23:09:05:1d:b4:af:3e:22:7e:15:
                    aa:1a:34:97:5d:ee:a8:9b:5f:8f:c9:cc:9b:f7:20:
                    88:4a:09:ce:f6:4d:03:dc:88:2a:46:dd:30:4d:74:
                    cd:b7:c9:56:dd:e1:44:13:5b:df:15:3f:c2:c4:57:
                    99:74:95:5e:af:21:ef:62:59:8b:2e:17:a6:f9:0a:
                    bd:70:34:84:91:5a:e0:7a:39:3a:55:1d:3c:a5:4e:
                    7c:c1:df:9c:5f:93:1b:d4:76:dc:90:0f:06:91:ed:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:DF:71:E9:2C:55:B5:4A:AF:98:5E:4D:E2:CF:61:3E:D0:6F:98
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/80917500D33611EFA181559E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:3a:98:0d:f3:57:86:f3:d3:e9:1e:5c:7c:e9:55:be:bd:d4:
         8a:43:6b:a3:f6:49:1b:3f:0c:ae:12:b7:e3:08:bc:3b:24:b5:
         b0:75:ae:8e:e9:42:09:9e:4e:df:5c:fe:c6:dd:47:6f:ef:d7:
         b1:5a:4f:e0:a9:4d:28:92:42:0a:bb:75:da:c7:8f:f8:dd:c7:
         18:6e:f6:9a:b2:e9:8d:71:32:d2:3e:59:2e:aa:1c:bb:a4:95:
         33:7d:c9:bf:aa:fb:44:e6:8d:3f:ac:da:14:b3:07:c9:6b:c9:
         0e:b7:61:a7:6c:ed:f2:35:bb:cf:6d:f6:de:65:6b:9a:9f:a9:
         8f:7a:54:a8:f4:0d:71:e6:fd:61:65:a3:39:fa:96:e7:a4:07:
         50:a8:7d:3d:7b:83:c9:19:76:6b:97:43:f0:a5:82:94:d8:84:
         a2:ef:23:a0:e6:26:ec:9f:ec:51:73:18:8a:9d:43:7d:70:80:
         df:28:00:d1:e2:a4:fd:91:ca:92:59:a7:1e:17:9e:40:ec:ff:
         fe:fa:b9:3a:0b:a1:fb:67:d0:12:2a:c7:fe:f0:77:1c:4e:b3:
         00:4f:82:18:5e:88:2f:7f:49:00:dd:8f:9f:e3:7d:1e:7f:77:
         ef:34:f6:4f:90:96:51:21:af:8e:2d:ea:49:7c:9d:e7:c0:4f:
         91:3e:ab:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTAxMTUxMTQ3MTZaFw0yNjAxMTUxMTQ3MTZaMBgxFjAU
BgNVBAMTDTY3ODdhMDU0LTA4NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/tXY0QF6eu7i9L0kPLhPH+g6trH5JxVm+K9mJoaaO39aQG0S0L4cP3c37
yb9LaMPKMOv5mAI6QMkVFcAJnsgFvnERms52XHZ37DGgmA46Q4hBTH1hN7qNm/Yn
7ROdJ+l6R0kS4+MrQOTgkEnsPz992KGdM5+wDGclRU12U2fQStsyFsQ+TNuNUM9u
0ED0q10UPsh9og18OMiqIwkFHbSvPiJ+FaoaNJdd7qibX4/JzJv3IIhKCc72TQPc
iCpG3TBNdM23yVbd4UQTW98VP8LEV5l0lV6vIe9iWYsuF6b5Cr1wNISRWuB6OTpV
HTylTnzB35xfkxvUdtyQDwaR7csLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjXPf
ceksVbVKr5heTeLPYT7Qb5gwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzgwOTE3NTAwRDMzNjExRUZBMTgxNTU5RTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhywwDQYJKoZIhvcNAQEL
BQADggEBAJQ6mA3zV4bz0+keXHzpVb691IpDa6P2SRs/DK4St+MIvDsktbB1ro7p
QgmeTt9c/sbdR2/v17FaT+CpTSiSQgq7ddrHj/jdxxhu9pqy6Y1xMtI+WS6qHLuk
lTN9yb+q+0TmjT+s2hSzB8lryQ63Yads7fI1u89t9t5la5qfqY96VKj0DXHm/WFl
ozn6luekB1CofT17g8kZdmuXQ/ClgpTYhKLvI6DmJuyf7FFzGIqdQ31wgN8oANHi
pP2RypJZpx4XnkDs//76uToLoftn0BIqx/7wdxxOswBPghheiC9/SQDdj5/jfR5/
d+809k+QllEhr44t6kl8nefAT5E+q0Y=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:24 2025 by rpki-client