Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C030547007BA11F0A0C4EF78762E951A.roa
File:                     C030547007BA11F0A0C4EF78762E951A.roa (raw, json)
Hash identifier:          /2/d5P/eqpbtpaRjIu+F4Vd5CinWWJdRNL5F0oZBERk=
Subject key identifier:   5C:6F:78:B6:23:8B:62:9B:4E:EC:BF:81:A6:BA:51:CF:D1:CE:CC:DF
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       07A1
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C030547007BA11F0A0C4EF78762E951A.roa
Signing time:             Sun 23 Mar 2025 07:45:12 +0000
ROA not before:           Sun 23 Mar 2025 07:45:08 +0000
ROA not after:            Sun 22 Mar 2026 07:45:08 +0000
asID:                     996
IP address blocks:        102.135.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953 (0x7a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 23 07:45:08 2025 GMT
            Not After : Mar 22 07:45:08 2026 GMT
        Subject: CN=67dfbc08-2388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:79:3e:b1:9a:d0:a5:c8:1d:1a:7a:72:ed:
                    e9:9b:9d:25:d8:f9:dd:89:07:e1:ac:13:04:29:12:
                    16:57:4b:81:f3:f7:03:53:cf:08:17:47:9e:ea:d0:
                    dc:43:5e:30:e4:18:43:44:88:88:d1:21:e2:a4:73:
                    a4:17:1a:9c:3b:f9:56:0c:ce:96:db:c7:43:80:26:
                    0c:3d:34:1e:86:90:3c:60:8f:d1:3a:c3:5c:fe:44:
                    91:ba:bc:82:67:31:66:dd:d8:db:12:01:5a:eb:c3:
                    b9:29:78:4f:c3:fe:14:06:f8:bd:78:62:62:8a:08:
                    0e:8a:67:7f:74:a7:4f:f0:bd:b3:8a:ce:e3:e5:bb:
                    e9:7d:44:4e:3c:06:b5:44:a1:8c:76:d9:ed:59:32:
                    28:82:8c:66:7f:8c:27:ac:2a:f8:96:2f:a8:74:33:
                    2d:11:e6:a0:0f:d9:59:22:50:a6:7b:fe:46:7b:49:
                    d8:1c:58:5d:f2:3e:1c:60:96:70:ef:56:41:88:ca:
                    93:76:a4:d6:6c:b3:95:f2:fc:d5:e0:32:34:84:3d:
                    1d:96:e3:cb:30:1a:93:20:fe:42:28:a0:26:f1:4c:
                    ab:fa:21:96:c8:3f:73:c6:80:0f:fe:91:25:b6:de:
                    f3:32:0b:83:c3:ec:a7:1b:b5:e0:57:f3:08:31:d4:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6F:78:B6:23:8B:62:9B:4E:EC:BF:81:A6:BA:51:CF:D1:CE:CC:DF
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C030547007BA11F0A0C4EF78762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:ae:a6:ea:a8:f0:8b:6b:93:b1:31:e1:e7:0d:bf:c5:cc:
         23:32:17:f0:c1:c9:ad:3c:8b:d6:3b:f7:c7:f9:d3:ad:a8:04:
         ee:6e:c6:64:95:7e:8b:04:09:ed:de:d8:38:4c:ef:6f:ce:e5:
         c8:fb:da:02:b0:3d:d2:cf:c0:80:ee:b2:eb:b6:cb:34:5c:94:
         6f:65:9a:77:a2:1b:c2:c4:a6:a2:f9:22:98:6c:6b:25:5a:31:
         82:90:2c:34:a5:8b:dc:5e:dd:74:d2:8c:f5:d4:90:e9:f2:cf:
         7d:26:cc:a2:be:2b:d8:93:8c:43:ec:0a:2a:fb:3e:21:94:56:
         5e:eb:8d:ac:23:03:ff:33:9a:8a:30:cd:ba:d6:3d:2d:24:42:
         28:4e:52:27:03:e6:14:90:0e:e9:b7:c0:e5:99:9e:a4:4f:0c:
         b4:4c:e1:a0:c2:7d:41:39:16:99:78:47:8d:52:59:5d:01:75:
         26:98:7f:86:53:99:ed:c3:99:1a:14:0c:04:ce:74:8a:24:db:
         a9:91:68:50:d6:10:53:9b:b6:da:88:ab:fc:59:83:2c:82:ca:
         dd:86:e5:d7:4e:40:e4:cc:7e:1b:02:c9:d4:b2:ff:32:48:47:
         4b:be:65:1a:36:d2:f7:22:11:86:63:62:cd:69:82:0b:4f:12:
         54:bd:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:34 2025 by rpki-client