Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A839647EC1BF11EFA041409B762E951A.roa
File:                     A839647EC1BF11EFA041409B762E951A.roa (raw, json)
Hash identifier:          WOB01YlTcdIjZYCmBLL9ir/PBrWE+ySRJYAUHZFvMvs=
Subject key identifier:   BF:4F:F5:9E:6D:1D:06:03:8A:CC:26:24:E1:A6:8C:C3:0F:57:A9:1D
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0433
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A839647EC1BF11EFA041409B762E951A.roa
Signing time:             Tue 24 Dec 2024 06:23:58 +0000
ROA not before:           Tue 24 Dec 2024 06:23:54 +0000
ROA not after:            Wed 24 Dec 2025 06:23:54 +0000
asID:                     43260
IP address blocks:        196.251.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 24 06:23:54 2024 GMT
            Not After : Dec 24 06:23:54 2025 GMT
        Subject: CN=676a537e-057f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e9:48:db:c8:63:10:46:4e:8f:42:55:f6:d2:
                    b0:f0:e5:cd:f4:6d:f4:8c:c4:e7:d9:4a:82:fb:6b:
                    48:fd:70:91:a9:1c:71:af:bd:94:44:b5:34:d9:7f:
                    fd:b7:57:c4:06:af:93:56:d1:7c:4b:26:90:94:68:
                    80:e4:82:a0:71:f2:5b:65:08:ae:a5:3e:9d:11:71:
                    db:cb:70:99:08:f4:78:9f:e4:b4:0a:bd:f3:fa:2f:
                    86:1d:d8:df:3b:7c:02:47:4a:d8:15:c9:c7:d8:0e:
                    fa:e0:ad:f4:ce:d5:93:91:7b:11:cd:b3:7e:ef:29:
                    98:e8:75:dc:9f:f4:a2:1d:31:f7:94:16:80:ab:88:
                    da:a5:5a:28:7b:28:b3:f5:31:e4:6f:35:16:16:a9:
                    a7:65:75:89:50:09:47:0a:55:86:f0:34:3e:18:23:
                    d5:09:c6:1a:9f:4e:1f:6b:1b:e3:a1:4e:24:fb:40:
                    01:84:3a:a0:68:66:66:75:45:62:1e:f2:6a:4d:e0:
                    0f:14:0c:50:18:71:48:2d:93:85:94:f6:b3:ea:aa:
                    f6:d3:6a:e1:f5:55:dd:0e:67:04:c1:0e:9f:43:12:
                    5c:22:9e:a5:de:0e:1c:f7:09:98:7a:6c:26:85:35:
                    b6:c4:06:e3:42:1c:33:fe:d1:69:3f:59:d8:7d:70:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:F5:9E:6D:1D:06:03:8A:CC:26:24:E1:A6:8C:C3:0F:57:A9:1D
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/A839647EC1BF11EFA041409B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:0c:22:68:24:05:fd:80:44:88:0e:f9:b8:c5:da:94:79:ef:
         89:79:e8:bd:3c:29:1a:3d:fa:5d:e3:c8:13:66:d6:e1:a0:88:
         77:25:26:3b:99:16:ab:da:b2:72:e2:4b:b6:9c:c9:e8:b1:0a:
         1c:35:5f:f0:07:88:e4:f9:42:82:89:e5:49:e3:57:bd:b4:d3:
         29:09:a0:df:c9:a5:58:24:f6:a4:44:e1:ba:da:d7:1a:5f:c4:
         e2:0f:34:6b:31:21:26:28:70:c2:73:25:00:17:9b:f7:95:41:
         46:37:7e:e4:04:9a:95:c8:07:21:06:3c:fc:b3:95:65:91:09:
         91:e4:c8:18:b8:dc:20:ea:b2:41:f4:92:37:c4:ec:44:fc:00:
         d1:1f:f9:c4:c7:05:18:84:58:a2:cf:69:cd:49:d7:3e:ad:9b:
         93:f7:5a:85:2d:ac:af:92:cc:ac:f9:85:33:5a:73:a7:df:1b:
         b1:b0:85:09:6b:be:9d:30:2d:48:2e:8f:bb:c9:8a:93:54:71:
         36:02:4e:9f:60:4c:a4:bb:2e:38:2b:d5:e5:38:ae:95:1c:43:
         7f:b0:41:49:d8:cc:a1:1b:49:0b:21:44:4c:2e:c7:2d:14:ee:
         85:aa:58:a2:22:2f:b5:b5:93:32:3b:5f:1d:56:35:43:41:d2:
         2d:7a:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:42 2025 by rpki-client