Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/B7B213A65F0D11EBB8372F13F8AEA228.roa
File:                     B7B213A65F0D11EBB8372F13F8AEA228.roa (raw, json)
Hash identifier:          puwCWa3gsqTC7rOKDcvW6nPKVc6UX97pHCigCS62l3Y=
Subject key identifier:   08:5D:16:13:6B:FF:B3:6F:6D:FD:1A:AB:64:CE:32:43:C3:49:A8:B4
Certificate issuer:       /CN=F368EBFFAF/serialNumber=557C5054ECFE8B7F8D90441B781CF33F450BDA3E
Certificate serial:       02
Authority key identifier: 55:7C:50:54:EC:FE:8B:7F:8D:90:44:1B:78:1C:F3:3F:45:0B:DA:3E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VXxQVOz-i3-NkEQbeBzzP0UL2j4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/B7B213A65F0D11EBB8372F13F8AEA228.roa
Signing time:             Mon 25 Jan 2021 13:03:29 +0000
ROA not before:           Mon 25 Jan 2021 13:03:24 +0000
ROA not after:            Tue 01 Jan 2030 13:03:24 +0000
asID:                     328791
IP address blocks:        102.221.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368EBFFAF/serialNumber=557C5054ECFE8B7F8D90441B781CF33F450BDA3E
        Validity
            Not Before: Jan 25 13:03:24 2021 GMT
            Not After : Jan  1 13:03:24 2030 GMT
        Subject: CN=600ec1a1-7fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:78:21:f5:1c:d8:cd:70:da:30:1a:50:bb:
                    9e:6f:34:17:fb:a4:f4:c7:11:47:2d:cd:be:4b:c7:
                    90:38:23:24:0c:c8:d0:da:09:cc:01:e0:8c:d4:d0:
                    76:73:49:38:a7:4b:da:dc:63:22:bc:af:7e:35:50:
                    7c:8f:bc:13:c2:79:d1:00:b6:20:fa:05:05:1b:16:
                    55:09:73:f9:17:81:a2:cb:22:8d:7c:d3:61:69:9b:
                    50:0a:f8:33:b1:e4:c0:de:fb:84:60:e3:68:c1:3d:
                    92:9a:cb:4c:29:65:4c:2d:c7:d6:71:16:54:25:4e:
                    ce:42:05:db:80:3f:35:d5:90:87:99:f8:5f:a2:61:
                    72:01:a9:37:a0:79:cb:20:0d:38:d7:e5:3c:98:9d:
                    d4:c7:69:26:97:06:86:5a:48:bf:ff:95:3d:b5:89:
                    23:f1:d2:0a:0c:87:6d:4d:dd:dd:24:32:7f:7b:c5:
                    fc:8d:25:72:a3:85:7c:27:09:c8:c4:df:ae:d7:1f:
                    91:dd:b6:0a:ce:17:50:f2:e9:e4:25:81:69:93:7e:
                    8f:64:00:c8:4b:7d:60:9c:3c:be:85:90:2f:84:92:
                    0e:41:bd:8f:82:87:57:36:06:72:62:13:55:74:d7:
                    91:88:11:f3:c9:4d:06:b2:55:98:1e:31:4c:e8:f6:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5D:16:13:6B:FF:B3:6F:6D:FD:1A:AB:64:CE:32:43:C3:49:A8:B4
            X509v3 Authority Key Identifier:
                keyid:55:7C:50:54:EC:FE:8B:7F:8D:90:44:1B:78:1C:F3:3F:45:0B:DA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/VXxQVOz-i3-NkEQbeBzzP0UL2j4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VXxQVOz-i3-NkEQbeBzzP0UL2j4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/B7B213A65F0D11EBB8372F13F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:5d:f4:e7:a6:95:82:83:af:83:bc:e7:b8:58:1f:d0:6f:
         5c:96:10:5a:83:99:b1:f1:4b:bb:ee:aa:28:50:f8:1f:25:54:
         1f:cc:5c:e0:73:94:24:d2:8d:8d:72:e8:2b:a2:26:89:99:af:
         ce:e7:15:a7:cd:74:87:06:af:0e:5c:0e:2c:a9:e7:31:23:0a:
         8e:e1:e1:95:a6:72:03:07:3b:5a:76:26:6f:5b:8b:ec:22:45:
         ab:67:fb:45:81:70:cb:3d:b6:cf:93:c8:70:41:41:85:99:68:
         06:be:e7:ed:46:57:18:ab:a6:93:8e:53:64:ef:99:36:f7:ce:
         46:c8:a1:e0:0c:29:38:f0:7c:fc:92:99:7f:89:41:da:1b:1a:
         39:45:88:15:af:8f:dc:00:33:0f:16:76:50:59:c1:1c:be:58:
         80:b2:16:fc:e6:82:66:7b:c3:eb:df:6d:e5:91:49:8f:bd:38:
         2a:5b:0b:a4:da:6a:f7:e0:85:07:3a:ad:84:cb:52:f1:27:10:
         a4:43:78:47:7c:d5:a2:f3:8e:be:0e:72:21:8f:7c:0a:c5:ca:
         20:12:6a:3d:ff:20:90:07:90:7d:e6:1e:00:90:34:dc:6b:c9:
         a0:d9:69:f5:93:96:d7:11:be:94:cd:a5:5c:b5:eb:02:96:64:
         0f:60:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:27 2024 by rpki-client on console-fra.rpki-client.org