Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/02C3A866011511F0B85D595C762E951A.roa
File:                     02C3A866011511F0B85D595C762E951A.roa (raw, json)
Hash identifier:          jjWJv8b3JwAacmiRwWHsf5c1g04d/JXZDr1YDZRSVgg=
Subject key identifier:   A9:C0:F5:8E:B0:6F:BA:CF:03:CC:00:64:8C:5C:02:E8:84:A3:4C:EB
Certificate issuer:       /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial:       02
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/02C3A866011511F0B85D595C762E951A.roa
Signing time:             Fri 14 Mar 2025 20:43:40 +0000
ROA not before:           Fri 14 Mar 2025 20:43:36 +0000
ROA not after:            Tue 14 Mar 2028 20:43:36 +0000
asID:                     22351
IP address blocks:        41.194.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668B03AF
        Validity
            Not Before: Mar 14 20:43:36 2025 GMT
            Not After : Mar 14 20:43:36 2028 GMT
        Subject: CN=67d494fc-69b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:57:79:bd:73:e1:1c:8a:84:08:c4:67:36:
                    a1:89:63:0d:7a:25:ac:01:aa:7e:34:6e:38:92:1f:
                    d1:39:71:f1:f2:ea:45:bf:5e:20:53:f6:33:3d:1f:
                    96:bc:2e:29:09:1e:1d:b6:3a:68:70:5c:c6:a0:f7:
                    b9:a8:e9:b1:0b:0c:e3:d8:5e:a7:b1:53:31:cd:46:
                    fa:8f:f3:be:80:a1:39:50:cb:50:d0:ea:64:02:55:
                    ed:8e:9c:0c:a4:0d:c4:10:7d:0f:54:a8:90:2b:d8:
                    9d:02:62:93:2e:56:b8:a1:fc:a4:a1:69:f3:65:ad:
                    01:75:ed:18:83:8a:d3:10:2e:c0:51:1c:43:50:2e:
                    ca:b3:3e:06:7e:ab:1c:be:cf:00:68:e0:e1:7e:50:
                    52:2b:22:96:39:0c:60:9d:38:30:05:a6:1b:d6:f5:
                    23:7b:86:8d:c3:f6:72:9c:c0:97:63:17:84:70:87:
                    25:d9:d6:6e:38:49:2f:33:2b:2d:70:1c:1e:73:46:
                    87:28:ce:55:6a:d7:cb:6c:d4:21:c0:23:76:f3:05:
                    c8:91:5a:05:98:40:7c:bb:9c:ad:2c:1e:06:2e:9f:
                    42:77:d4:03:c4:a5:12:79:ba:c2:db:ea:58:c2:b7:
                    b1:82:d4:d2:49:7a:7e:42:d3:44:8e:37:ad:d7:8e:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:F5:8E:B0:6F:BA:CF:03:CC:00:64:8C:5C:02:E8:84:A3:4C:EB
            X509v3 Authority Key Identifier:
                keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/02C3A866011511F0B85D595C762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:e9:48:ed:7d:e8:6b:ea:59:c3:1c:43:4a:8f:b4:43:5d:
         0d:5f:be:cf:91:7d:c0:85:c6:52:6e:92:bb:b9:a2:e1:e0:82:
         3a:09:20:5b:12:04:ca:69:50:a4:96:e9:80:0a:88:a8:70:4d:
         06:ff:50:55:a1:09:2a:6a:b9:a8:c4:a2:b7:75:ce:60:b1:da:
         0c:41:9d:7f:c8:43:de:3d:5a:25:31:81:ad:91:de:0c:6f:68:
         de:d4:08:35:bd:c0:4c:eb:9d:9a:5b:57:79:79:8e:fc:9f:f5:
         bf:e5:ff:7b:c9:4e:ab:29:ed:c0:3c:e5:fe:da:db:d0:4e:da:
         2c:83:20:90:90:84:c6:1c:31:9e:ca:bb:f8:cb:70:37:c0:20:
         6e:0f:01:28:98:15:3e:9a:87:3d:9f:1f:6a:0a:7c:d0:c3:84:
         c0:ed:14:3d:e7:39:56:9f:f5:8d:c0:5f:6c:1f:a9:ed:69:55:
         f2:cf:04:ae:dc:aa:94:fb:de:0b:c9:44:f0:0a:01:67:ed:c3:
         4b:04:1d:5e:67:79:b1:6c:48:c5:4e:28:6c:1a:1b:f0:c9:33:
         b5:32:a9:16:0d:aa:03:a5:a9:b8:55:01:e5:ea:8e:93:0e:c2:
         82:82:9f:b4:7c:d8:0c:49:c5:f5:ee:f8:97:ab:78:48:d6:81:
         09:47:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:30:09 2025 by rpki-client