Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/7EF51C66B09411EF816A837D762E951A.roa
File:                     7EF51C66B09411EF816A837D762E951A.roa (raw, json)
Hash identifier:          dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=
Subject key identifier:   44:3C:F6:15:7C:14:58:A9:C0:F1:A7:A3:08:2D:B7:CB:54:EE:80:06
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       0352
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/7EF51C66B09411EF816A837D762E951A.roa
Signing time:             Mon 02 Dec 2024 10:02:10 +0000
ROA not before:           Mon 02 Dec 2024 10:02:07 +0000
ROA not after:            Sat 02 Dec 2034 10:02:07 +0000
asID:                     329097
IP address blocks:        102.207.97.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF
        Validity
            Not Before: Dec  2 10:02:07 2024 GMT
            Not After : Dec  2 10:02:07 2034 GMT
        Subject: CN=674d85a2-204d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:a8:a5:1f:e3:fe:78:55:7b:af:d2:f7:20:
                    3a:f2:19:4d:f4:7a:c4:5d:33:99:cd:80:d4:fd:61:
                    fa:f2:7a:42:89:00:6f:3b:d1:c4:72:72:9a:07:38:
                    f2:f9:d0:03:dd:b4:70:e8:7b:08:b0:05:08:95:eb:
                    6d:01:eb:17:57:ed:f9:8b:79:46:3e:4e:4e:e7:4c:
                    65:c3:2b:fd:15:ca:3a:21:81:44:8d:39:c1:75:7c:
                    a9:08:dd:81:ed:fc:46:bf:9d:0d:eb:29:6f:93:5e:
                    2d:93:d2:84:ab:69:5a:6c:a8:65:74:57:e8:99:17:
                    37:47:ff:71:3b:8f:11:ef:bd:c9:76:87:0b:a3:ac:
                    0a:25:30:a2:3c:02:71:2d:99:d5:85:05:c1:75:27:
                    cb:86:81:68:b9:16:fd:18:50:12:10:c4:71:06:2e:
                    6d:81:3d:42:be:3d:6e:88:66:1e:38:ac:bb:bc:93:
                    91:59:2d:ad:a9:6d:72:c3:69:52:36:d5:66:b0:44:
                    98:64:fe:29:86:25:ca:7e:42:b6:40:c7:23:7c:bd:
                    71:66:2c:4a:ef:86:34:82:16:c8:4c:01:ad:4a:b0:
                    4d:f1:a0:f3:a2:0c:be:f0:28:50:9a:39:a7:27:28:
                    81:32:ce:3b:56:41:6a:0d:ed:cd:73:a4:79:61:74:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:F6:15:7C:14:58:A9:C0:F1:A7:A3:08:2D:B7:CB:54:EE:80:06
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/7EF51C66B09411EF816A837D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:03:e5:c0:d2:8b:ea:7e:19:d1:96:5f:45:b0:26:86:fb:e4:
         79:f1:b5:56:c1:df:7c:5d:69:74:73:19:84:3e:86:26:be:d8:
         d4:35:46:81:3e:db:00:56:50:b8:6b:b4:89:41:69:b0:87:c7:
         f9:4f:58:06:f2:40:f3:78:8b:a6:ab:2b:ed:f9:fc:02:61:6c:
         91:3d:b5:f3:06:f2:42:70:92:0e:21:60:6d:ac:95:68:a5:36:
         ff:c5:70:25:80:7f:51:b5:41:7a:47:64:00:fd:8c:4d:ce:b6:
         82:e0:91:94:11:53:51:2c:29:7a:b0:ca:45:9d:c1:5d:9b:a7:
         88:2d:8d:aa:3f:03:93:b4:0c:96:45:2a:32:dd:2d:f6:71:eb:
         83:e0:e9:90:12:24:ab:7c:ac:ee:b6:9e:ca:83:fe:e5:a4:5f:
         0b:7d:3c:c8:76:ba:73:35:24:e2:5f:3c:77:5a:b5:e1:d6:01:
         94:0e:57:0c:b8:18:bd:e6:b4:7b:b4:62:69:3d:b0:e2:5c:e5:
         d1:07:c8:10:a7:ec:5c:d0:01:db:9e:15:07:d2:d3:3e:d9:67:
         ab:ed:52:83:fe:89:d6:26:86:96:fb:fd:00:23:24:9d:7e:29:
         0f:54:b8:63:bc:f7:ac:71:8f:8a:06:dc:18:27:b9:e8:db:5d:
         a3:51:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:27:03 2025 by rpki-client