Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D7DA786016711F09282297D762E951A.roa
File:                     6D7DA786016711F09282297D762E951A.roa (raw, json)
Hash identifier:          oHE/ki2q7r2ZuFp/YaPh+cLBlIds/yuvNGpAv6krtzw=
Subject key identifier:   87:5C:19:F1:91:01:C8:87:0B:E7:87:65:79:AA:EB:22:09:96:32:D2
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       140C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D7DA786016711F09282297D762E951A.roa
Signing time:             Sat 15 Mar 2025 06:33:38 +0000
ROA not before:           Sat 15 Mar 2025 06:33:34 +0000
ROA not after:            Mon 15 Mar 2027 06:33:34 +0000
asID:                     834
IP address blocks:        102.129.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5132 (0x140c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF
        Validity
            Not Before: Mar 15 06:33:34 2025 GMT
            Not After : Mar 15 06:33:34 2027 GMT
        Subject: CN=67d51f42-df90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:ad:10:ee:1e:39:82:00:dd:72:c5:4f:e9:
                    94:73:68:89:3a:f8:7d:b3:7f:ba:11:91:74:8f:5a:
                    c0:c5:34:e9:16:11:b7:9c:76:e2:94:8f:0b:62:7a:
                    66:0e:64:2d:f1:e2:4f:b3:cd:77:52:1a:df:8e:2d:
                    6e:63:84:81:6c:4c:0b:dc:de:bb:d4:ba:23:87:3b:
                    86:6d:ab:04:ab:65:f6:62:1d:05:ce:28:3b:eb:b1:
                    c3:bc:4c:7d:0d:63:57:5e:e3:3d:10:a1:5c:11:0d:
                    09:34:5f:ff:9e:e1:98:14:5d:4d:08:ab:f2:85:0b:
                    1c:9b:a0:2a:4f:57:c1:3b:af:75:7d:7f:b3:c5:29:
                    98:89:9a:53:bd:5b:9f:f7:61:5c:84:62:01:32:f6:
                    ec:66:72:6a:93:96:82:01:8f:18:dd:95:05:3f:87:
                    8f:cf:27:c1:55:7d:38:0a:90:93:6b:b6:66:18:ed:
                    11:e5:bd:7c:d6:08:48:80:a5:fa:a7:78:75:88:31:
                    69:f4:16:a8:01:c6:0c:9e:39:70:2b:03:65:dc:08:
                    28:75:01:a4:f9:71:c7:b9:f3:df:09:c2:7a:2b:36:
                    26:e3:0a:dd:33:66:fd:ed:db:9e:b5:9f:ff:2f:4e:
                    d0:65:bf:4c:11:05:ec:5c:cd:c9:d9:d0:9f:63:39:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5C:19:F1:91:01:C8:87:0B:E7:87:65:79:AA:EB:22:09:96:32:D2
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D7DA786016711F09282297D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:a0:f0:15:ed:71:d2:3c:b3:a1:86:91:61:e5:27:d6:db:e2:
         29:d8:4a:2c:b7:54:47:45:7f:24:21:72:de:ec:23:51:fc:76:
         a7:da:51:4b:77:d3:d5:7a:d6:dd:5a:de:e9:16:18:58:e3:8d:
         94:1e:98:0e:d1:7d:e5:7e:f7:4a:e3:04:36:9b:98:e3:93:f7:
         6a:b1:f1:c1:90:d3:88:76:18:27:8a:4a:e3:63:b3:56:78:b7:
         d0:72:e9:78:c7:c3:b0:eb:0c:a9:94:aa:98:1a:f7:e4:17:e6:
         1f:0a:a7:95:76:26:2d:e7:71:80:81:2d:6f:78:5f:de:e5:29:
         9f:74:74:fa:b5:64:3a:f0:8c:3b:69:c9:2c:db:d2:82:79:0a:
         71:48:6e:d7:eb:d8:22:9e:cd:dd:41:38:0a:99:28:43:dc:a6:
         d8:31:58:1d:50:e9:5f:4d:00:20:8c:5a:c4:dd:c1:ee:b5:aa:
         eb:89:8b:aa:03:c8:42:5a:3f:b8:17:e3:f1:3b:f3:2f:2d:85:
         bc:b4:a4:6f:ab:58:70:86:6a:4f:34:6c:ab:ed:92:4c:78:94:
         45:fb:04:77:56:fd:d2:8a:bc:ec:15:7a:2e:4b:ec:47:f7:f2:
         0a:e0:cf:10:e9:81:77:dc:9c:b4:a9:d8:33:08:5d:7f:72:b7:
         68:a4:80:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:20 2025 by rpki-client