Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E31A2072B61D11EFAD602168762E951A.roa
File:                     E31A2072B61D11EFAD602168762E951A.roa (raw, json)
Hash identifier:          Zq0VNS8GGGsSZiUiumjezMI4RGVVJ8JXjf9fhuBV+ZU=
Subject key identifier:   B5:58:2B:51:10:E9:0B:86:5B:4E:FE:FB:AA:8D:FE:13:89:5B:59:2C
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0733
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E31A2072B61D11EFAD602168762E951A.roa
Signing time:             Mon 09 Dec 2024 11:08:15 +0000
ROA not before:           Mon 09 Dec 2024 11:08:11 +0000
ROA not after:            Sat 30 Jul 2033 11:08:11 +0000
asID:                     37119
IP address blocks:        2c0f:f888:a180::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF
        Validity
            Not Before: Dec  9 11:08:11 2024 GMT
            Not After : Jul 30 11:08:11 2033 GMT
        Subject: CN=6756cf9f-fd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:dd:3f:0b:1a:80:6b:71:30:2e:bf:e5:17:
                    91:7b:8e:ed:b8:2d:54:7f:f0:63:c0:14:4e:67:48:
                    92:e3:6a:13:c2:90:90:20:e0:75:d5:8d:b3:17:e4:
                    42:ea:fb:08:12:b3:04:4c:0c:6e:d3:52:dc:09:94:
                    62:13:d0:dc:df:75:14:2b:9f:08:8f:6c:ba:79:5b:
                    ad:67:4b:72:b1:2d:0b:bd:cd:ad:03:e9:61:11:9c:
                    db:fa:9c:23:0a:8a:3a:a3:7b:10:e2:46:d3:b8:6c:
                    3f:af:f9:43:e6:05:b9:77:62:d5:d8:03:ce:bc:fd:
                    db:89:e5:fc:5b:49:d8:48:50:ff:44:93:ff:cd:2b:
                    99:27:a4:08:a4:75:3a:f6:25:a1:ac:47:d5:bd:fb:
                    f2:ee:42:0a:6d:04:bf:17:3d:2a:1a:35:dc:d9:1a:
                    06:a7:2d:d1:ba:09:02:e1:33:2c:9b:dd:44:a6:6b:
                    32:38:f8:db:95:5f:85:ba:ed:35:58:43:96:bb:cd:
                    98:78:6c:1b:72:fe:fb:22:7c:74:58:ab:de:71:1f:
                    76:1c:ca:5e:9f:b4:4c:24:dc:a9:d9:ac:6d:b8:62:
                    54:60:51:40:35:72:fe:03:37:31:e1:29:a1:ca:0e:
                    dc:1f:f1:2d:87:60:5e:e1:5a:cb:72:b4:36:f7:cd:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:58:2B:51:10:E9:0B:86:5B:4E:FE:FB:AA:8D:FE:13:89:5B:59:2C
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E31A2072B61D11EFAD602168762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f888:a180::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:b0:25:51:e2:66:09:88:d9:48:4c:65:59:1a:db:85:ae:
         4f:5b:34:95:da:44:a2:32:be:0d:33:da:0e:80:94:a4:9c:26:
         2c:3c:68:77:06:26:c7:9b:1e:b7:1a:00:15:f0:24:98:92:5d:
         2e:d2:b4:65:70:a3:85:ac:97:45:5b:c2:7a:d4:cd:db:07:13:
         43:ff:5c:2e:fb:1c:6d:81:c4:e0:10:1c:07:b7:70:a5:03:e7:
         9f:df:72:8b:51:c4:56:18:d0:cc:9d:33:07:83:8d:f9:15:05:
         fa:1c:f2:26:2e:31:11:41:df:3e:e2:ec:0c:18:4d:f5:1b:84:
         75:d6:62:d9:72:73:4b:c0:58:df:23:84:10:17:56:c9:43:7c:
         8f:4c:bc:a0:d5:a3:f8:d4:c7:14:02:a9:58:fa:a3:5a:b1:bf:
         d2:dc:08:ef:ec:58:92:10:70:65:eb:0c:1d:8c:c0:0a:e2:b3:
         f7:95:49:aa:dd:e0:0b:0a:76:1b:e5:b7:ba:1a:3e:83:60:c5:
         13:53:99:8f:6b:86:4f:f1:45:59:e5:e4:85:78:d4:61:1e:79:
         b7:8c:b5:10:5d:d3:c2:98:3c:70:07:a3:d7:e6:9a:89:40:0b:
         7f:9a:da:2e:8b:ca:b7:31:9c:35:2b:60:16:64:64:b3:88:00:
         e4:ae:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:42 2025 by rpki-client