Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C64262D6E87011EF9021E668762E951A.roa
File:                     C64262D6E87011EF9021E668762E951A.roa (raw, json)
Hash identifier:          fQZbLx5M1V3E7BFC8RQUs2CW9LYpYsPgd07uN1Ld5uY=
Subject key identifier:   0E:EB:03:C3:7A:9C:04:CC:DE:66:54:AC:3F:06:A0:52:9E:8C:83:04
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       05D8
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C64262D6E87011EF9021E668762E951A.roa
Signing time:             Tue 11 Feb 2025 12:07:33 +0000
ROA not before:           Tue 11 Feb 2025 12:07:29 +0000
ROA not after:            Wed 11 Feb 2026 12:07:29 +0000
asID:                     401116
IP address blocks:        196.251.66.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Feb 11 12:07:29 2025 GMT
            Not After : Feb 11 12:07:29 2026 GMT
        Subject: CN=67ab3d85-0f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:36:27:61:d7:43:1e:69:72:93:bf:f8:a1:
                    dc:c8:97:46:8b:b2:24:ca:bd:91:39:ed:78:23:a2:
                    de:3a:ae:a6:64:65:b5:f5:84:79:dd:d0:54:60:a2:
                    0f:f4:d3:db:38:dc:d9:8b:0e:bd:a7:61:6f:92:23:
                    c7:a0:86:0c:08:b4:64:2a:52:45:8e:c9:65:8c:8a:
                    db:7f:e1:98:c3:3f:88:bd:fa:f3:c5:52:ce:1a:82:
                    bb:26:d5:99:42:48:86:f8:12:7a:63:7e:4f:28:65:
                    e8:b9:e4:3a:f2:3f:8a:b9:63:13:be:d8:df:17:73:
                    5e:9b:fc:c5:2e:0f:dc:e3:30:dd:3e:97:19:d8:85:
                    95:74:86:9a:b4:59:b3:30:fd:53:32:f1:82:6a:2d:
                    58:b4:f0:4d:db:63:c1:4e:79:62:43:45:76:be:73:
                    89:3b:6c:d5:a3:6b:41:5c:0e:8e:c3:ef:e6:48:fb:
                    30:92:e9:ba:df:62:4d:26:1d:87:eb:ff:03:8b:f5:
                    af:2c:92:ac:d6:79:b6:d5:ab:1e:6e:f3:30:5f:86:
                    f2:33:22:d5:f9:4f:0d:6a:a9:ca:3c:fa:bc:fd:3c:
                    e8:05:ef:e3:6e:4d:70:8e:f2:71:f1:63:18:f9:12:
                    51:c2:83:4e:1a:af:f6:52:56:a3:d8:95:25:55:68:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EB:03:C3:7A:9C:04:CC:DE:66:54:AC:3F:06:A0:52:9E:8C:83:04
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/C64262D6E87011EF9021E668762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:dd:89:73:51:02:b7:28:d5:0c:25:03:3e:35:46:f6:c0:
         5c:c9:f0:7e:9a:a3:e8:69:9b:80:9e:0c:51:8f:c3:3f:54:bd:
         1e:03:6c:15:2d:c5:b4:e1:aa:b4:94:f2:86:c7:3f:1e:82:43:
         6c:70:d6:57:2f:30:f2:83:fc:22:37:aa:f9:8a:bd:a4:35:70:
         53:4a:49:58:da:6a:46:32:69:de:1d:d5:52:83:6b:28:d9:0d:
         2b:a7:97:ed:e1:14:96:6c:61:f8:32:10:b6:9a:48:5d:fa:95:
         df:ed:6c:03:0b:b2:70:3c:0f:6b:68:d1:2d:59:da:2e:8b:f8:
         14:fa:19:f4:6c:18:63:3e:9a:cc:f4:65:62:05:93:b7:20:b3:
         34:2c:60:42:eb:ec:03:23:db:5e:4a:0e:63:6a:eb:f6:dc:38:
         6c:d2:97:f1:88:e1:a3:c2:61:1f:6d:4d:63:cb:b7:d2:32:9a:
         b4:d5:29:89:d4:96:cd:b6:31:54:22:15:c7:e5:ae:ab:0c:29:
         8e:72:be:70:50:2b:cb:9b:ab:33:e2:ad:68:40:b2:fd:a9:a5:
         b8:ae:47:c1:ec:55:a4:9d:a5:0c:51:43:91:2d:15:5e:2e:15:
         e9:38:13:9e:20:2b:e0:5b:eb:d4:95:8c:3f:b8:78:75:7e:d4:
         05:fd:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:16 2025 by rpki-client