Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAD789EEC36011EFB18E0385762E951A.roa
File:                     EAD789EEC36011EFB18E0385762E951A.roa (raw, json)
Hash identifier:          AeDjZSvVTNR9cUB8nVJQajp7d6vENypzttSHlyrKeuw=
Subject key identifier:   11:93:2E:C2:66:88:2C:60:DD:C3:46:46:42:A8:01:C0:3E:09:88:CF
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       045A
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAD789EEC36011EFB18E0385762E951A.roa
Signing time:             Thu 26 Dec 2024 08:10:50 +0000
ROA not before:           Thu 26 Dec 2024 08:10:46 +0000
ROA not after:            Fri 26 Dec 2025 08:10:46 +0000
asID:                     329007
IP address blocks:        196.251.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 26 08:10:46 2024 GMT
            Not After : Dec 26 08:10:46 2025 GMT
        Subject: CN=676d0f89-2dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:f8:c5:94:48:53:50:f5:08:38:61:d2:e2:
                    34:7e:3d:c0:c6:b1:02:6e:a1:f7:e5:f3:6a:4c:d2:
                    ad:68:e1:4b:2c:47:74:33:bc:ec:02:ee:69:2a:96:
                    e9:b4:3a:4d:72:99:c4:63:94:8b:d4:c7:3c:55:f4:
                    ba:60:8a:5e:14:1e:07:6b:20:49:aa:6c:45:89:d9:
                    82:ab:54:e5:51:53:4d:7e:cf:29:31:17:3a:6d:a3:
                    52:5c:b3:6d:b0:14:17:2f:79:0a:ac:0c:45:cb:6d:
                    99:d3:1e:a3:99:04:4f:8a:22:17:df:e9:70:ca:62:
                    fe:07:e1:48:74:d0:a6:26:c2:48:bc:d1:8d:c4:d9:
                    8a:20:0c:1a:dc:04:7c:54:61:54:de:fc:13:fd:1c:
                    e9:d2:0b:28:7b:60:b2:71:2d:ec:c7:9e:cf:9c:ed:
                    60:01:d9:f1:8d:5c:3b:99:6f:0d:54:b1:f6:dd:20:
                    49:c7:b3:c9:ec:b4:0f:e5:81:f1:c1:d0:55:9b:e9:
                    b8:7e:ea:c1:7c:1e:03:9e:b4:a8:36:a6:48:cd:69:
                    8c:34:7a:0d:07:45:23:52:da:1c:95:26:c4:8a:cc:
                    d4:cd:2e:52:e8:a9:3b:3e:bd:0e:da:f1:c7:3a:e3:
                    e8:01:e1:df:cf:8c:d6:b8:b8:e9:53:e7:4a:fd:ba:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:2E:C2:66:88:2C:60:DD:C3:46:46:42:A8:01:C0:3E:09:88:CF
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/EAD789EEC36011EFB18E0385762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:7e:31:9b:29:77:d5:a1:9e:1c:0c:04:26:96:e3:93:98:
         6b:d9:d1:8b:21:cf:0d:12:e9:d0:75:41:69:8c:23:d6:38:dc:
         5e:ef:89:4e:23:70:c9:2e:c4:c3:89:e2:c7:7d:cf:fb:8c:e7:
         31:dc:37:bc:5d:39:be:cf:94:81:35:ee:c0:76:12:0f:a9:6f:
         42:7b:20:a6:08:f7:f8:8b:6e:68:ed:b1:49:10:fc:5b:e5:ec:
         39:0c:ea:bc:31:ef:56:50:1c:b2:c7:a2:92:52:87:72:ce:a8:
         82:ec:64:68:26:33:04:ff:5c:ee:b7:0a:ed:dc:5f:88:78:31:
         61:34:94:04:db:bf:49:51:ae:d9:19:77:4a:6f:f1:27:f7:4d:
         87:65:7c:17:ca:da:aa:b4:48:08:c3:88:97:56:42:60:da:01:
         69:69:27:de:f1:28:20:d4:45:ab:03:c2:e8:b0:c1:f5:0f:97:
         47:d2:8d:f5:db:02:55:e8:50:fb:64:11:f0:bd:46:da:d0:24:
         e3:51:4d:1c:fd:80:92:6e:96:22:2c:c3:c3:66:4f:91:19:d5:
         1f:20:20:df:16:9b:b8:8b:cf:20:60:f6:ff:e3:eb:38:25:bf:
         2c:17:17:7e:4e:a3:a9:95:c5:70:e0:c6:dc:80:9c:90:98:ca:
         e0:58:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:43:57 2025 by rpki-client