Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0DF12B8E87411EFA097697F762E951A.roa
File:                     C0DF12B8E87411EFA097697F762E951A.roa (raw, json)
Hash identifier:          pPq0E6lI6D7rsJvPLNsBMoxvbUwV3IQgvEzK2WKDVGM=
Subject key identifier:   3B:D8:76:25:70:B2:EA:D4:C5:71:D5:79:C7:2B:8D:9E:BC:E3:45:62
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       05DB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0DF12B8E87411EFA097697F762E951A.roa
Signing time:             Tue 11 Feb 2025 12:36:02 +0000
ROA not before:           Tue 11 Feb 2025 12:35:52 +0000
ROA not after:            Wed 11 Feb 2026 12:35:52 +0000
asID:                     401116
IP address blocks:        196.251.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Feb 11 12:35:52 2025 GMT
            Not After : Feb 11 12:35:52 2026 GMT
        Subject: CN=67ab4432-7b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:15:b7:3a:bc:37:9b:41:fe:18:df:24:6f:
                    89:b2:17:89:e3:ae:2d:07:3a:1d:3e:46:d2:c4:34:
                    54:6b:9b:b7:77:e5:e3:ed:3f:0b:ac:9d:5d:23:c6:
                    ac:da:7b:87:85:45:c3:c1:12:6c:8c:f6:28:86:b9:
                    92:b0:24:81:36:67:42:a3:c6:2c:b3:00:cc:1e:63:
                    2b:a3:81:4f:c5:b2:01:ea:ac:48:2d:8d:62:69:8f:
                    a9:9f:ec:d2:1c:be:80:6f:e5:f1:ee:b6:95:98:8e:
                    b1:95:dd:8a:11:54:16:e6:7e:46:0d:d8:a1:1a:78:
                    e3:4d:51:90:89:1f:26:3a:0b:b7:5f:44:12:e9:95:
                    25:25:a0:64:fd:54:0c:50:25:97:d6:22:64:25:04:
                    26:5a:5b:83:be:26:05:d9:96:0d:4a:ac:2b:e4:87:
                    6f:6d:af:bc:4d:23:44:48:b5:24:57:89:c3:53:43:
                    ff:94:e2:32:ec:4b:b9:5d:cb:2a:d9:09:b9:7d:f6:
                    19:42:e7:b7:fd:21:17:36:5e:a7:d4:1c:9e:b7:ab:
                    68:22:06:17:65:36:94:cc:b0:40:19:f1:0c:80:7a:
                    ac:2d:6d:bf:af:45:1d:f5:0c:cd:6f:a9:1d:6f:1d:
                    7d:08:fb:35:32:d3:58:a1:56:a6:ae:b2:cd:6b:3a:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:76:25:70:B2:EA:D4:C5:71:D5:79:C7:2B:8D:9E:BC:E3:45:62
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C0DF12B8E87411EFA097697F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:c7:77:fa:cb:a5:67:f3:b6:db:59:3d:71:3a:e9:c1:4d:
         1c:9e:e1:5e:c8:77:a5:7e:49:f8:a3:08:ca:fe:20:b3:c5:3f:
         b4:b1:19:7e:ef:a9:d4:c4:14:6d:a9:fa:0f:71:6e:c3:a1:cc:
         2e:ad:fd:c7:bd:78:1b:9e:d9:a6:15:ed:29:5e:9d:4f:87:ae:
         59:20:79:41:1e:fe:91:20:b3:4c:8e:85:87:7d:18:c9:42:5f:
         20:c2:fd:c0:e8:17:4f:bf:81:7e:56:06:d4:99:27:f4:c1:30:
         1d:38:4e:9e:f1:7f:a5:51:ff:03:81:88:36:4a:9a:83:f5:74:
         74:fe:b8:59:ee:09:24:a4:91:85:8d:1e:78:56:08:ad:79:e2:
         fa:7d:8d:45:8a:c7:25:5c:d5:96:0f:4e:ce:6c:18:31:72:96:
         9f:c1:1e:87:42:08:8f:e4:f0:db:3e:ab:72:be:f3:e8:d7:f5:
         52:0f:25:8a:9a:b4:f6:55:f1:08:4a:44:b1:a5:18:af:2e:7f:
         36:42:09:ff:92:0a:95:9a:9c:c4:ee:70:f9:e4:c4:e7:e3:04:
         68:92:68:65:9d:2d:4e:66:4d:8f:7a:15:c1:9a:83:f9:62:48:
         db:a9:3f:3d:65:de:63:74:8f:75:7a:15:2c:17:a3:a5:ab:f1:
         a0:3a:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:37:23 2025 by rpki-client