Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/58EAFC0E238111EDB7101283F1222468.roa
File:                     58EAFC0E238111EDB7101283F1222468.roa (raw, json)
Hash identifier:          jC0lNMvg1A9nkBmF+KGBb9m0SCbpHTNLW8X98Fmi6c0=
Subject key identifier:   EC:84:B6:DE:ED:3B:34:38:83:1F:68:8B:DA:F9:85:AB:54:92:34:32
Certificate issuer:       /CN=F36505B2AF/serialNumber=99BD81F1E32C507B1EA8D52D20741751577B6C8A
Certificate serial:       06
Authority key identifier: 99:BD:81:F1:E3:2C:50:7B:1E:A8:D5:2D:20:74:17:51:57:7B:6C:8A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mb2B8eMsUHseqNUtIHQXUVd7bIo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/58EAFC0E238111EDB7101283F1222468.roa
Signing time:             Wed 24 Aug 2022 07:49:57 +0000
ROA not before:           Wed 24 Aug 2022 07:49:53 +0000
ROA not after:            Sun 24 Aug 2025 07:49:53 +0000
asID:                     33763
IP address blocks:        41.85.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF/serialNumber=99BD81F1E32C507B1EA8D52D20741751577B6C8A
        Validity
            Not Before: Aug 24 07:49:53 2022 GMT
            Not After : Aug 24 07:49:53 2025 GMT
        Subject: CN=6305d825-f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:82:67:ea:bf:c2:c3:7d:9a:fe:6e:c7:86:
                    13:14:38:de:be:31:e5:31:ff:d0:5d:51:24:8a:15:
                    2f:41:2b:71:7e:2d:76:41:f1:b7:c2:ae:44:d6:83:
                    7d:83:49:19:d1:e2:45:b2:90:fb:4b:55:9f:db:a8:
                    7a:f3:d5:bf:58:4f:13:2c:6e:9a:98:ed:e7:1d:4d:
                    38:57:5d:d3:d5:e2:41:75:8c:ef:66:ae:b4:60:2b:
                    0d:a2:d6:d4:f8:eb:a7:73:10:95:cb:c0:1e:4f:16:
                    d3:c7:b6:ca:7b:1e:53:b0:93:f9:28:40:02:25:03:
                    1b:49:77:5d:31:75:24:a1:37:f4:87:57:f4:3e:8d:
                    e0:de:67:0e:19:cf:13:c4:53:3c:21:f9:a8:07:12:
                    81:80:06:8f:7f:87:0a:f6:22:75:ed:43:e3:1d:09:
                    c1:ea:bd:d5:b3:eb:36:db:25:7a:98:a6:b6:08:ff:
                    ea:3d:de:07:0a:27:62:10:28:c1:2c:b6:f3:a0:18:
                    33:8a:cc:d1:e7:57:3d:99:c9:ca:5f:6b:cc:20:5b:
                    35:63:c4:18:a3:72:65:23:d8:e7:6f:2e:a9:2c:6a:
                    fe:f0:bf:be:f0:b1:7a:d6:53:6c:2d:ff:ce:1a:9d:
                    1e:be:d9:72:5a:10:a0:2f:90:a1:a8:d8:6e:82:fc:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:B6:DE:ED:3B:34:38:83:1F:68:8B:DA:F9:85:AB:54:92:34:32
            X509v3 Authority Key Identifier:
                keyid:99:BD:81:F1:E3:2C:50:7B:1E:A8:D5:2D:20:74:17:51:57:7B:6C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/mb2B8eMsUHseqNUtIHQXUVd7bIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mb2B8eMsUHseqNUtIHQXUVd7bIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/58EAFC0E238111EDB7101283F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.85.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:dd:b1:71:12:ba:95:59:c5:da:f9:29:8f:0a:14:52:2a:5a:
         dc:e1:a9:01:81:66:6c:10:77:a3:d7:4d:6b:b9:1f:83:2a:7b:
         4d:88:3c:38:9a:0c:84:e5:65:c2:55:b2:82:59:12:c5:10:d0:
         b4:90:d6:35:b5:23:81:6e:49:5c:95:82:d9:33:e8:8b:1a:e3:
         55:fa:ad:fb:d3:af:8d:85:5e:a5:0d:db:a3:12:6f:05:70:c6:
         f7:c3:24:a2:e0:73:69:37:39:a9:d4:8a:df:4a:90:80:30:b4:
         2d:8a:29:6d:5d:da:a7:21:08:f6:32:27:08:ff:8c:31:69:1a:
         cf:78:1b:35:f1:c3:13:e0:0d:0e:79:63:3b:dd:f2:1f:ed:4e:
         05:a4:2d:2d:f1:bc:a2:b0:bd:45:69:07:f7:56:f3:10:e7:49:
         44:28:72:9f:ac:2f:fe:7e:27:69:ae:49:7a:5c:52:96:0d:e3:
         7e:3c:14:de:a9:6b:46:a3:68:25:40:cf:ce:51:b0:b4:5c:09:
         19:2d:4b:95:ca:8b:ff:26:6f:ea:d0:e2:6d:f3:8c:ce:ea:62:
         a8:e4:69:3b:9f:70:f0:36:75:7e:42:a0:85:9a:17:43:c5:fa:
         56:c4:cc:1b:18:98:7e:69:52:f8:d9:b0:ec:df:3d:00:02:08:
         7b:d3:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org