Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86CB7ECCD18B11EF8448C188762E951A.roa
File:                     86CB7ECCD18B11EF8448C188762E951A.roa (raw, json)
Hash identifier:          SD2OvlIGU5K1ATlkBCTdbd7K3HyeTC6RhrGeeEUrDf8=
Subject key identifier:   48:E5:7F:1C:56:76:DE:16:06:93:7A:DE:09:39:5A:F2:64:10:22:F8
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       050E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86CB7ECCD18B11EF8448C188762E951A.roa
Signing time:             Mon 13 Jan 2025 08:51:06 +0000
ROA not before:           Mon 13 Jan 2025 08:51:03 +0000
ROA not after:            Tue 13 Jan 2026 08:51:03 +0000
asID:                     43260
IP address blocks:        196.251.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Jan 13 08:51:03 2025 GMT
            Not After : Jan 13 08:51:03 2026 GMT
        Subject: CN=6784d3fa-2546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:0e:db:dc:45:a9:84:60:4a:c9:fe:b5:08:
                    98:dd:cb:2c:f0:07:25:a8:80:e9:7e:ee:46:9b:d2:
                    1d:73:c4:43:4e:fe:51:41:6e:83:6a:92:fa:3e:d6:
                    8c:8f:ec:af:01:94:7a:26:b5:af:7b:31:60:61:52:
                    81:46:9f:c3:f2:dd:4c:a7:39:be:f3:9b:8b:16:96:
                    ea:a9:83:90:d8:44:d3:0b:9a:5b:70:12:ce:71:bf:
                    98:97:56:96:cf:97:2f:4e:85:13:49:6e:7d:07:f8:
                    3b:94:6a:73:95:37:79:bc:63:8d:95:1e:f5:45:3c:
                    13:10:b4:5c:94:e4:0a:cf:cb:19:9c:d0:a0:25:aa:
                    bb:de:22:15:70:ac:65:b0:d4:6c:e3:e0:e1:5f:75:
                    5d:cf:9f:12:eb:7d:e6:c5:51:3f:77:0f:8a:38:d6:
                    b2:ac:1a:6d:af:8d:63:3e:f4:13:42:c6:d6:ae:1f:
                    2c:c9:33:27:1a:5e:61:22:c2:5e:fa:88:60:b5:bf:
                    d9:f1:77:06:f3:8e:79:df:71:5c:e1:4f:f7:cf:c7:
                    d6:eb:12:2a:0a:9a:ee:9b:4b:34:09:0d:0c:96:3a:
                    99:dd:6a:7d:6b:ee:15:c7:3a:6b:73:71:9e:ea:5d:
                    a9:fe:dc:7a:25:5e:7f:93:23:06:4e:2c:4a:df:6b:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E5:7F:1C:56:76:DE:16:06:93:7A:DE:09:39:5A:F2:64:10:22:F8
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/86CB7ECCD18B11EF8448C188762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:27:a5:de:f9:bc:1d:ac:bf:87:d1:ac:03:59:b6:cf:84:85:
         24:db:22:3e:0d:05:f1:52:e5:1d:3f:9a:35:a1:36:ce:95:2e:
         1f:19:43:b2:59:73:e1:48:dc:50:8a:b9:b3:1c:da:73:8e:b2:
         b3:03:65:09:30:54:42:cd:a8:00:7c:9b:c5:79:52:87:3d:bd:
         79:a4:a9:c8:13:fe:04:b6:c7:64:11:ad:dd:a2:33:e1:ba:47:
         b7:18:0a:33:b3:c5:63:43:eb:f4:08:53:af:5f:c7:17:48:bc:
         e5:c1:3c:47:a4:c5:0f:0d:9b:15:6f:99:58:25:e3:f9:a9:47:
         49:a2:da:5b:bb:88:ab:92:af:e5:fd:bb:ea:6c:1f:1c:60:e2:
         af:01:ef:47:96:24:7b:ec:85:a2:52:45:2c:bd:cc:e6:46:80:
         9b:32:00:84:da:23:97:e4:3a:73:85:4f:9f:c3:d2:bf:43:cb:
         20:a0:70:e1:63:a8:d2:ed:3f:58:fb:5b:1e:98:ee:24:33:fe:
         cb:0a:9d:ce:b8:6f:33:cf:59:25:b0:ea:c4:59:3d:ef:ab:d1:
         e2:28:e7:48:d7:a5:f3:f9:e3:16:1c:f8:bf:15:6d:57:17:3a:
         df:82:74:84:2e:80:c5:8c:69:33:c0:6e:60:ce:46:1a:a8:3a:
         7f:24:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:05:19 2025 by rpki-client