Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2D23944061511F08ADC216F762E951A.roa
File:                     A2D23944061511F08ADC216F762E951A.roa (raw, json)
Hash identifier:          ttnEyUkKeTPkat/10gRXjMVRqIJhOnezYigQTrb/Aj4=
Subject key identifier:   44:7B:3C:2B:67:3B:D3:91:EB:20:94:27:A4:53:97:58:CF:4C:94:81
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0780
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2D23944061511F08ADC216F762E951A.roa
Signing time:             Fri 21 Mar 2025 05:30:44 +0000
ROA not before:           Fri 21 Mar 2025 05:30:41 +0000
ROA not after:            Sat 21 Mar 2026 05:30:41 +0000
asID:                     329007
IP address blocks:        102.135.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 21 05:30:41 2025 GMT
            Not After : Mar 21 05:30:41 2026 GMT
        Subject: CN=67dcf984-c7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:ed:42:a4:6e:38:c6:99:43:ce:94:b8:c6:
                    1f:0d:91:f9:14:32:90:ef:c7:e5:24:ce:68:0f:51:
                    67:92:53:81:d0:d4:ba:e0:a4:ca:5e:de:7d:64:cb:
                    b3:6b:1f:d0:df:1d:6f:bb:6d:df:bb:c0:e5:2c:0d:
                    56:53:44:6b:f9:2c:c2:f7:c5:a5:69:fa:7e:d5:8e:
                    87:bc:cd:fc:f9:81:cd:22:a6:d7:85:39:51:e0:32:
                    a9:3c:b7:f0:af:f6:31:56:dd:01:0b:3f:4d:e1:ab:
                    fc:24:37:cd:ef:a4:74:71:5e:13:93:28:26:7a:fd:
                    a8:2a:8c:29:e1:95:2a:eb:6e:7b:42:16:b8:e2:df:
                    1f:a6:73:34:16:2e:13:c1:77:a2:7b:45:f0:e4:73:
                    b7:64:c9:58:e8:97:bb:8e:17:b9:55:ba:2e:39:81:
                    11:1e:be:9b:e9:bd:50:8c:ec:a9:96:91:2d:30:7f:
                    71:1c:28:ba:c4:3c:20:0a:6f:e3:4e:05:b8:99:3e:
                    fa:3b:a9:f1:d6:44:89:2c:85:a1:41:30:e6:e4:0a:
                    8c:a7:3f:73:6c:db:8b:c4:e0:09:ea:27:0a:d2:57:
                    f8:4c:a6:ef:a1:6e:b3:e7:f5:af:72:8b:f2:07:c3:
                    9d:1c:34:e1:35:a5:bd:5b:62:ea:b8:b5:5e:3d:b8:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:3C:2B:67:3B:D3:91:EB:20:94:27:A4:53:97:58:CF:4C:94:81
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A2D23944061511F08ADC216F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d0:47:df:43:20:5b:b8:8b:57:b1:47:a4:c2:a5:f0:d1:3b:
         af:3c:db:c6:1c:81:4b:0d:75:5c:82:ec:05:74:ca:17:89:61:
         42:b9:97:58:05:0d:2e:bb:18:f8:a1:e8:2e:4a:cc:d0:86:10:
         7c:f0:ca:e1:ef:1d:7c:06:d6:26:92:a1:72:37:0c:9f:ab:2a:
         e7:5c:f0:7f:25:5f:5b:0f:92:b1:76:2d:40:62:f7:f7:90:ab:
         bc:4b:45:bb:70:6c:e0:10:e2:34:a0:c1:05:13:4f:97:b6:f6:
         e9:55:41:82:95:01:56:ab:4a:6b:5d:86:02:d2:5b:13:fe:6c:
         72:48:77:a5:c3:75:c8:3d:64:2c:bd:27:43:87:c8:9b:85:aa:
         07:43:68:26:e6:a7:fc:96:5a:9a:4e:e3:d0:58:b1:2d:c7:f6:
         03:58:97:07:25:58:d7:2e:9e:81:cd:3d:f4:28:1f:50:a8:4f:
         75:75:b1:b9:75:f8:c3:99:73:76:7c:88:9f:a9:a8:57:52:71:
         47:32:43:5b:80:7d:06:cb:13:d4:85:31:1e:37:55:fc:91:06:
         78:48:4f:9d:43:28:39:83:4a:be:92:52:17:ee:9a:fe:b7:5c:
         22:75:14:a5:e4:32:e7:64:c6:ae:20:8e:9e:16:0b:de:8e:26:
         b5:cf:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:51:14 2025 by rpki-client