Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7065AFB4B63C11EF88754CA3762E951A.roa
File:                     7065AFB4B63C11EF88754CA3762E951A.roa (raw, json)
Hash identifier:          AsBnfClN9ACiT3S+U2N9wv6CS0eyyBm9+hwkfqGipvI=
Subject key identifier:   DC:37:4E:72:F3:D1:90:A2:87:5C:02:A4:5F:D9:59:88:3F:F3:51:70
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0755
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7065AFB4B63C11EF88754CA3762E951A.roa
Signing time:             Mon 09 Dec 2024 14:46:57 +0000
ROA not before:           Mon 09 Dec 2024 14:46:54 +0000
ROA not after:            Sat 30 Jul 2033 14:46:54 +0000
asID:                     37119
IP address blocks:        2c0f:f888:a990::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF
        Validity
            Not Before: Dec  9 14:46:54 2024 GMT
            Not After : Jul 30 14:46:54 2033 GMT
        Subject: CN=675702e1-6e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:30:58:25:6a:13:4e:d1:0c:fa:17:04:c5:
                    28:de:14:7f:55:6a:7d:e3:e5:dd:e6:26:f8:e2:c5:
                    49:da:f5:5a:91:4a:91:e0:3c:0f:96:c3:86:46:0d:
                    e7:e7:9c:43:f6:82:0b:60:26:55:e9:7c:31:d5:df:
                    6e:7a:78:9d:ae:a5:ac:d5:e9:06:d4:40:35:05:6a:
                    94:e3:3a:8b:33:ec:cd:cd:16:71:b1:9e:28:9c:bd:
                    87:76:60:ab:5f:5d:a6:42:92:20:e0:51:e9:9a:48:
                    78:6e:77:ad:98:26:8f:95:06:62:50:46:79:cd:c4:
                    70:27:0a:92:29:84:ec:cc:fe:f0:f9:c1:91:fa:fa:
                    65:ba:5f:b3:45:18:6e:a7:76:5e:33:c0:51:09:ea:
                    5b:67:e0:5c:0b:c8:e0:77:7a:11:3e:4e:42:8d:34:
                    f0:b1:af:71:4f:96:89:96:52:68:84:57:dd:f4:7e:
                    c1:01:fd:4b:c3:39:d9:d4:f3:ee:7d:2f:67:d6:08:
                    7d:81:ab:6d:67:15:2a:66:c5:23:85:82:0f:86:1d:
                    c2:4b:a0:0b:40:37:e2:d0:aa:b6:86:fa:09:a0:b5:
                    10:2d:5f:82:3d:fb:1b:48:13:96:22:68:82:76:29:
                    ef:0f:85:1a:cd:e7:d7:9e:39:c2:8f:44:b0:a3:03:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:4E:72:F3:D1:90:A2:87:5C:02:A4:5F:D9:59:88:3F:F3:51:70
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/7065AFB4B63C11EF88754CA3762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f888:a990::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:eb:7d:61:1f:02:80:2c:19:1c:bc:0e:f9:d1:be:48:36:97:
         e1:2a:68:38:40:93:50:a0:2d:75:c5:0b:1b:f2:57:75:15:4e:
         90:93:dc:41:1f:bf:3d:25:f0:e2:81:68:1e:9d:c6:f6:e9:a1:
         20:53:6e:12:95:61:0c:08:04:bb:e4:ac:d5:4e:b3:96:8c:0c:
         24:6d:6c:f1:de:98:b3:ea:9b:aa:55:d9:83:9c:81:e1:78:57:
         1a:a6:80:ee:91:88:46:20:7e:0b:94:3c:16:31:71:18:0e:9f:
         8f:36:b5:c1:34:5b:c6:be:d5:79:1d:b0:1a:48:33:17:86:2b:
         b8:a9:d1:93:ff:49:74:4c:e9:6c:b7:31:63:e5:49:af:56:39:
         8e:e4:3b:9a:08:cf:31:70:6e:9d:30:8d:17:5c:91:d6:41:c2:
         f6:be:3c:91:76:fa:98:e9:23:cf:5f:df:a1:4f:02:46:b3:43:
         a7:7a:63:40:97:50:35:7f:ca:1b:45:9f:4d:01:fc:a7:a9:65:
         df:65:3c:fa:ee:22:03:8a:68:e3:74:57:8e:85:d7:f0:18:77:
         d9:fd:76:02:b6:ed:91:f3:82:83:16:49:4f:e2:66:09:da:46:
         f9:95:39:fb:d1:45:d5:d2:6f:d2:a8:a4:72:29:46:4b:76:b6:
         34:20:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:49 2025 by rpki-client