Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FBAC2F92C37711EFBB7B6795762E951A.roa
File:                     FBAC2F92C37711EFBB7B6795762E951A.roa (raw, json)
Hash identifier:          1pCQ2/MNIaJQvh21y1x0zrfZ1OwucFwsN4h+0zalojQ=
Subject key identifier:   D6:51:AD:35:60:22:0A:0F:43:DC:A5:46:D5:C7:28:88:EF:2D:E8:C1
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       047E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FBAC2F92C37711EFBB7B6795762E951A.roa
Signing time:             Thu 26 Dec 2024 10:55:56 +0000
ROA not before:           Thu 26 Dec 2024 10:55:53 +0000
ROA not after:            Wed 24 Dec 2025 10:55:53 +0000
asID:                     329007
IP address blocks:        196.251.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 26 10:55:53 2024 GMT
            Not After : Dec 24 10:55:53 2025 GMT
        Subject: CN=676d363c-6376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:cb:4a:fd:91:01:e9:f4:17:ee:38:eb:e2:
                    46:5e:88:2a:66:17:ec:4e:f3:c3:d7:aa:ca:99:19:
                    f5:4e:15:77:d0:fb:e4:1e:36:36:9c:5b:69:3c:a5:
                    2d:09:7d:21:12:52:b4:1b:b1:88:28:78:58:82:15:
                    1a:03:4d:c3:64:d6:7c:f5:a8:6d:95:a2:d4:b5:d6:
                    8e:ff:2b:8c:e6:42:ab:af:0c:30:ff:16:56:fc:97:
                    ee:2a:6a:68:c0:84:cb:d3:ba:be:cb:4e:2b:12:f1:
                    08:b8:86:aa:1d:86:17:c1:14:5b:f8:df:04:8a:09:
                    5b:12:57:94:12:52:90:8a:89:f8:88:30:29:d6:24:
                    7c:67:79:dc:4e:82:8c:7e:8a:70:1c:39:ab:d6:d6:
                    a7:43:e3:b0:7b:73:0b:4d:70:e9:b8:47:4d:2f:a8:
                    2c:af:ac:54:b5:d8:79:16:3b:72:af:6a:24:c5:63:
                    c1:b8:34:bd:1e:77:42:5c:d6:9d:76:a0:02:aa:67:
                    54:d6:9b:6e:a5:08:ed:82:6d:38:6f:1f:56:96:40:
                    81:12:92:8b:9f:6a:aa:55:84:69:51:0c:d9:e3:74:
                    cb:ad:b6:25:ac:fd:cf:2d:c3:0a:38:11:20:34:a4:
                    9d:e9:1a:f7:37:b2:92:a0:33:a9:84:3b:ec:b6:4f:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:51:AD:35:60:22:0A:0F:43:DC:A5:46:D5:C7:28:88:EF:2D:E8:C1
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/FBAC2F92C37711EFBB7B6795762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:53:21:4e:4a:f2:3f:78:20:b4:7c:b5:9f:59:a3:91:fe:4f:
         77:0f:a3:55:52:6d:c9:88:d5:b2:55:c4:d3:ce:71:48:c3:91:
         bf:5d:08:d6:08:c1:97:78:b5:bc:c4:0f:10:f1:ac:00:46:94:
         63:af:01:ba:ad:7d:16:5f:db:3d:93:82:6c:f1:f7:e2:27:40:
         df:70:05:8d:35:1a:37:7b:b3:77:f4:04:a9:ae:36:28:0a:32:
         b7:da:b2:d3:4b:48:0e:5b:18:98:f9:75:9a:22:23:83:d9:e1:
         74:76:a6:4c:99:84:6a:64:23:be:88:5a:31:e1:57:92:14:6e:
         1f:9d:41:5e:08:f1:6a:33:9f:50:c3:3a:2f:14:96:9e:d7:1f:
         54:51:05:24:36:c1:6f:6b:2d:37:ba:4f:01:34:19:9b:ae:9b:
         a5:06:a9:a3:0e:14:6a:42:73:47:ed:32:57:3c:99:70:29:68:
         da:9b:f0:c3:39:16:09:7f:85:89:59:97:fa:0b:07:51:be:22:
         4b:e3:28:be:bd:1b:eb:5a:b4:b3:06:3b:6a:83:ee:0d:50:03:
         13:ae:58:b9:30:89:b7:b3:8c:f6:f8:db:0e:b5:c5:cd:66:f1:
         72:ee:6b:ef:d9:0b:d4:49:21:b4:3b:0c:52:4d:69:93:e0:3e:
         13:0d:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:51 2025 by rpki-client