Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90F41760D33911EF921B44B3762E951A.roa
File:                     90F41760D33911EF921B44B3762E951A.roa (raw, json)
Hash identifier:          sTCyc/1wbaf9ptCRenGoKsW4s29tpu4lQm08KklRL6A=
Subject key identifier:   C4:F8:61:98:E3:35:DF:E2:27:63:24:1A:02:DE:45:17:00:9A:2D:F2
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       056A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90F41760D33911EF921B44B3762E951A.roa
Signing time:             Wed 15 Jan 2025 12:09:27 +0000
ROA not before:           Wed 15 Jan 2025 12:09:23 +0000
ROA not after:            Thu 15 Jan 2026 12:09:23 +0000
asID:                     53356
IP address blocks:        102.135.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Jan 15 12:09:23 2025 GMT
            Not After : Jan 15 12:09:23 2026 GMT
        Subject: CN=6787a577-3df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:1d:d4:e5:67:97:68:81:51:b4:e3:56:05:
                    d4:6e:cf:aa:fd:83:5b:3b:a8:b1:96:5f:a9:ec:6e:
                    30:a4:ff:3d:78:17:c0:ab:b3:2c:11:2e:b9:71:5b:
                    5d:f7:e3:e6:53:7e:85:8f:ed:13:93:4e:f7:46:83:
                    41:98:0a:ed:ab:8e:b6:de:fe:6b:9c:14:21:54:c5:
                    1b:fb:d7:95:d4:cd:a2:b8:4e:a6:e8:33:0a:db:bf:
                    10:fe:80:fa:43:db:45:a8:81:42:5c:94:4f:a7:8a:
                    78:56:bb:0b:e6:20:34:e6:fc:2d:a7:bb:b8:b4:30:
                    56:0f:78:e6:66:b4:ea:0e:a2:6d:74:e8:15:f6:d8:
                    17:ff:55:84:9e:23:86:10:b3:95:99:f4:0e:22:ae:
                    6f:55:35:b7:ff:0d:e6:e9:1f:0e:26:d8:98:50:d0:
                    61:8d:19:36:18:81:53:7b:3e:83:e1:89:03:f7:9a:
                    fa:21:bf:b7:0e:14:b6:12:31:67:4a:43:50:de:e4:
                    16:35:33:e8:10:ab:55:3d:1a:fa:53:a2:45:98:35:
                    02:6f:4d:42:70:50:d5:66:c0:ab:42:70:12:e6:4b:
                    f9:bb:e6:6d:26:f4:a4:0a:0a:f3:66:2a:f0:88:19:
                    cd:3a:70:09:77:59:7b:cd:6e:b8:d0:e8:78:65:13:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F8:61:98:E3:35:DF:E2:27:63:24:1A:02:DE:45:17:00:9A:2D:F2
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90F41760D33911EF921B44B3762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:2d:ac:40:80:2d:00:c1:69:0e:c2:47:1d:13:4c:a0:10:
         ef:bf:11:36:41:e6:83:7e:18:44:59:7a:77:4d:e5:23:1d:56:
         09:e0:b1:28:68:b3:53:8b:76:ae:5b:a4:26:8c:00:02:ca:e4:
         58:04:e1:21:ae:b2:89:28:6e:55:36:c9:c0:f6:99:d3:a0:1b:
         2e:22:59:d1:b6:6d:8e:78:0e:a6:b2:8d:6c:7c:56:db:cc:e9:
         9b:64:97:14:cc:d9:e3:6f:54:d8:c4:04:da:71:78:0a:d0:95:
         1b:84:f1:ef:95:f0:47:c9:06:13:f0:80:21:bb:bf:80:51:61:
         dc:fe:d1:90:92:27:bb:f9:36:52:0a:d5:c2:9b:61:f8:94:76:
         92:55:6e:6b:44:06:a1:42:df:8a:b6:80:f1:b7:df:17:e9:06:
         6d:d7:4a:ca:34:5e:be:bd:3d:d6:a0:b9:a2:74:cf:56:32:18:
         33:b0:53:87:b9:f6:2e:c8:e6:99:65:f7:a2:66:b3:8d:5a:df:
         6c:87:2b:df:a5:dd:10:dc:b7:2f:72:62:d0:4c:1c:35:05:17:
         2b:05:e7:13:9d:64:7d:1b:e0:59:e6:51:5b:41:d5:3a:f5:e1:
         ab:62:d9:a1:39:c8:42:2b:7a:e2:b3:df:46:a3:0e:c9:ab:58:
         18:0b:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:42 2025 by rpki-client