Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFDA9A12434F11EFA97B5B84762E951A.roa
File:                     EFDA9A12434F11EFA97B5B84762E951A.roa (raw, json)
Hash identifier:          5vX0e9znEY04c0BGC0s59A7GUT6Q2bF2F97ZbtEopWU=
Subject key identifier:   38:A6:DF:E4:15:F1:36:82:D8:B9:7C:E4:CA:B2:94:0F:B1:F6:8E:97
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       115F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFDA9A12434F11EFA97B5B84762E951A.roa
Signing time:             Tue 16 Jul 2024 08:46:48 +0000
ROA not before:           Tue 16 Jul 2024 08:46:44 +0000
ROA not after:            Thu 16 Jul 2026 08:46:44 +0000
asID:                     211061
IP address blocks:        102.165.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4447 (0x115f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF
        Validity
            Not Before: Jul 16 08:46:44 2024 GMT
            Not After : Jul 16 08:46:44 2026 GMT
        Subject: CN=66963378-33b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:b5:09:45:9d:37:3e:ef:92:62:5c:2c:f5:
                    e2:b8:9b:84:ec:44:57:db:0f:ad:6c:da:25:05:62:
                    57:f2:7b:c1:73:55:95:7c:13:32:d3:19:ad:a9:4f:
                    6b:92:ba:39:cc:3d:09:ab:8a:7f:1a:10:e5:3b:48:
                    bb:eb:fb:a8:ec:20:6f:1a:67:a8:06:3f:2c:27:44:
                    cf:77:87:26:b4:65:5a:49:1f:05:68:8a:5b:0f:f4:
                    17:5c:62:4c:1a:21:6e:a5:f3:ac:02:02:6a:01:0a:
                    65:5a:62:e5:9e:4a:a0:17:ce:e3:35:f8:75:e9:92:
                    37:8f:4d:c0:fb:85:71:cb:6c:b5:2f:aa:44:76:87:
                    6d:6e:c3:cf:3c:89:15:3e:d4:ac:a0:bf:89:48:19:
                    6e:ed:27:47:3a:55:33:54:13:0c:2b:f8:66:a9:9d:
                    e0:da:da:0c:33:ee:b9:4a:f6:b7:e5:33:18:2e:12:
                    59:35:59:db:17:a0:e2:69:b6:91:3b:85:93:3e:f3:
                    57:95:89:f1:9c:dd:9c:92:33:67:1d:c9:52:89:45:
                    73:ef:c4:32:8b:4d:7c:69:f0:3d:f6:73:31:6a:eb:
                    8e:d7:3e:e6:31:a3:90:c9:34:8e:ec:4c:b0:d9:fa:
                    93:fa:c9:0a:4d:c4:23:57:a7:57:0a:72:0a:23:cb:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:DF:E4:15:F1:36:82:D8:B9:7C:E4:CA:B2:94:0F:B1:F6:8E:97
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFDA9A12434F11EFA97B5B84762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:55:33:13:f0:3b:2f:ca:93:70:cb:ce:b9:30:d8:30:8d:1f:
         8e:5f:d3:c0:29:c5:bc:2c:e5:00:c6:b2:de:26:fe:ec:b0:e8:
         84:b5:d2:aa:bb:9d:1f:aa:db:c9:e7:26:f1:9f:c3:8c:13:41:
         37:0e:51:5d:f4:47:ae:ed:cb:66:d9:8f:ee:80:de:6c:da:85:
         67:15:85:20:9f:27:63:61:e5:dc:dc:54:6f:d0:02:6f:60:3a:
         40:4e:c9:b7:5a:54:a9:3e:21:eb:d9:bc:0b:0c:2f:91:7c:78:
         a7:8d:7d:f9:20:95:46:fe:81:cf:99:44:44:10:03:34:18:77:
         74:0a:a4:29:01:45:85:ba:10:85:27:3d:27:c1:4e:d3:e1:c3:
         b9:9b:3c:25:9a:9d:d5:1f:0f:5e:05:f3:0e:87:21:9a:3a:6b:
         69:d6:14:c3:6e:90:e4:68:c7:bd:e3:50:5e:f4:0f:5f:e2:90:
         7c:17:20:f6:44:e1:3c:cc:85:24:43:ec:d0:24:c5:73:4a:8a:
         f9:fe:f6:c9:4c:3d:ad:e9:f9:2b:f7:6f:5a:c9:a6:66:7a:99:
         e8:b2:b0:63:5d:c6:47:58:1b:b0:47:ca:52:bf:63:8f:b8:4c:
         95:43:09:ec:8f:5a:6d:a3:69:01:17:00:c2:3f:6c:19:98:f5:
         ed:f7:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:58:11 2025 by rpki-client