Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D1DDCDA6C36D11EFB0D32558762E951A.roa
File:                     D1DDCDA6C36D11EFB0D32558762E951A.roa (raw, json)
Hash identifier:          V6UFKjyeTn9P9kJQNpGL1CbuAbqugzN7a2/qa9ds0io=
Subject key identifier:   A9:B5:60:D2:BA:5F:C4:E1:49:BB:4E:A4:B3:9F:DB:4F:79:AA:E3:1D
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0474
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D1DDCDA6C36D11EFB0D32558762E951A.roa
Signing time:             Thu 26 Dec 2024 09:43:11 +0000
ROA not before:           Thu 26 Dec 2024 09:43:07 +0000
ROA not after:            Fri 26 Dec 2025 09:43:07 +0000
asID:                     329007
IP address blocks:        196.251.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 26 09:43:07 2024 GMT
            Not After : Dec 26 09:43:07 2025 GMT
        Subject: CN=676d252f-1026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9c:b0:3e:1d:9d:85:ce:79:93:ee:da:d2:d0:
                    8c:08:75:50:b4:d7:56:aa:e3:c9:dd:03:f3:6d:60:
                    9f:59:c2:23:78:27:f9:5c:8a:b6:7f:b5:43:65:47:
                    8f:47:f4:85:21:ea:70:54:dc:1b:9d:90:11:69:67:
                    96:ce:fc:b4:89:89:cd:a4:83:51:40:63:bc:a0:6a:
                    25:0e:c7:69:a2:4a:c2:b8:f6:90:82:fe:e5:dc:4b:
                    fc:21:4f:ae:72:65:c0:a3:95:5e:96:e8:5c:f7:5e:
                    df:8c:00:68:99:1c:28:56:da:d7:21:d4:e6:a7:e4:
                    73:f1:31:04:10:11:1b:de:4c:52:fe:3c:6f:34:11:
                    f8:80:46:40:bc:de:b6:f2:53:76:4c:eb:4f:36:6a:
                    2e:e2:67:78:a9:af:d7:f2:83:a5:c6:e1:1c:36:66:
                    c1:3e:f3:58:44:2d:78:63:08:7e:4b:23:bf:66:4b:
                    5c:ba:da:0a:6e:f4:88:96:09:20:d6:83:77:a4:50:
                    8f:c2:26:e0:c4:57:e3:dd:7f:11:30:49:cf:7e:7f:
                    ce:94:f6:86:37:ba:ee:9e:e6:ba:fa:2c:b8:69:18:
                    47:3d:79:3a:bb:f5:38:51:3d:59:fc:c3:70:a6:e4:
                    81:c3:93:03:37:07:c6:b3:f3:93:66:82:3a:3f:63:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B5:60:D2:BA:5F:C4:E1:49:BB:4E:A4:B3:9F:DB:4F:79:AA:E3:1D
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D1DDCDA6C36D11EFB0D32558762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:73:6a:21:a6:5b:a0:a5:a0:d6:0a:98:af:7b:70:04:c7:ac:
         d2:5f:c8:68:81:3e:a8:7a:26:35:66:0a:92:ec:91:bd:ab:a3:
         d9:15:ff:78:88:01:02:35:3c:d2:83:9c:64:6a:b3:0d:2e:39:
         29:52:59:16:63:0a:e1:e6:27:ef:49:cf:f1:6c:8e:30:96:e2:
         02:c2:0c:34:d4:b5:62:5e:d1:c7:4b:67:29:8e:e6:56:9c:10:
         d0:d6:e1:78:d4:62:f7:5b:b9:bf:18:53:39:71:ad:d2:a9:f9:
         03:b5:64:4e:fa:d9:90:4c:78:10:71:62:58:58:bc:b4:bc:cf:
         4b:c1:46:c1:23:4a:48:5c:7c:23:db:d6:56:13:dd:ff:48:79:
         56:a6:86:d9:18:ae:96:6b:1b:1b:3c:f9:3c:f0:ce:c5:6c:ba:
         09:92:77:04:08:a1:dd:6c:4c:0a:8f:9c:a9:8e:3e:9d:9f:e6:
         fa:29:28:4d:53:a5:bd:e0:36:0b:a7:19:0e:ce:1f:2c:d9:9e:
         3c:c0:82:aa:13:6a:bd:86:2a:93:7b:1c:ec:be:5b:b4:51:95:
         90:00:58:cc:f1:b8:94:e8:e3:a6:dc:83:9a:01:77:75:39:dc:
         9f:53:c4:e4:a5:cb:b3:67:e3:89:17:7c:a6:9d:b5:d0:5c:cc:
         87:c9:f1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:13 2025 by rpki-client