Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/0EEFE242CF8411EB8820904CF8AEA228.roa
File:                     0EEFE242CF8411EB8820904CF8AEA228.roa (raw, json)
Hash identifier:          JE5+b8/yP3GkdQ8sgqJ2fq8mQXwxn/iySLkbSg8blIw=
Subject key identifier:   00:D0:B3:79:EF:41:27:24:50:32:6D:A6:2D:D8:D4:D6:ED:DA:56:5C
Certificate issuer:       /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial:       0C
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/0EEFE242CF8411EB8820904CF8AEA228.roa
Signing time:             Thu 17 Jun 2021 15:52:46 +0000
ROA not before:           Thu 17 Jun 2021 15:52:40 +0000
ROA not after:            Sun 31 Dec 2023 15:52:40 +0000
asID:                     399741
IP address blocks:        196.51.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D518DAF
        Validity
            Not Before: Jun 17 15:52:40 2021 GMT
            Not After : Dec 31 15:52:40 2023 GMT
        Subject: CN=60cb6fce-ddd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:f0:73:ef:4a:d7:1a:4a:8f:1b:a3:d6:77:
                    3d:1e:be:31:95:b7:9e:7e:f1:12:84:a0:74:d5:cf:
                    6f:a9:59:53:9f:fe:ac:6b:c5:21:03:7f:c6:62:4f:
                    79:45:92:7c:a4:48:fc:b3:55:52:36:30:76:f8:d8:
                    61:9b:3b:18:eb:49:32:4f:d6:1d:49:ef:ef:9a:b8:
                    aa:80:25:7e:2e:db:5e:f7:4b:e7:e8:30:73:7a:4a:
                    52:02:5d:2f:d7:31:69:7c:b6:b6:9c:d2:c1:d4:43:
                    52:02:47:f7:d4:e2:e4:d9:fa:3e:98:94:3f:c0:36:
                    2b:3d:d5:3f:03:8d:3e:df:9d:23:64:79:02:fa:fb:
                    39:52:df:f6:da:c3:68:83:e4:f6:e3:ac:9d:a5:55:
                    16:73:61:c5:dd:43:9d:a1:0e:a8:38:36:7e:19:17:
                    a2:fe:9d:8f:27:81:55:6c:d4:88:25:09:5c:eb:4f:
                    c2:b6:74:6c:04:c0:e2:7b:b4:83:ce:eb:c1:c4:24:
                    b5:1d:98:a8:f9:a0:4f:e9:5a:2c:0a:e6:b6:a0:13:
                    db:e2:4a:2c:ed:98:9f:bb:50:96:ed:1a:e7:11:22:
                    d0:d3:71:50:af:ed:df:7f:2f:d5:a1:3f:7e:4d:21:
                    8c:00:a4:f7:45:29:64:57:03:9e:34:fc:26:d3:ce:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D0:B3:79:EF:41:27:24:50:32:6D:A6:2D:D8:D4:D6:ED:DA:56:5C
            X509v3 Authority Key Identifier:
                keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/0EEFE242CF8411EB8820904CF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:a2:af:3b:1f:21:11:bc:69:fd:46:1f:53:05:93:ed:ca:
         86:05:d7:88:a8:21:15:98:0a:98:51:99:61:d3:2c:cc:1f:89:
         4f:60:a0:b7:7c:05:2f:6a:cc:af:41:7e:56:2b:73:ef:92:1f:
         74:5e:b6:80:96:58:2b:6d:c9:67:07:34:59:b8:a4:ba:12:02:
         c5:b5:e3:00:cb:34:2e:e1:fa:e9:ab:1d:37:fd:3d:a0:cb:da:
         df:c8:59:b5:89:92:58:81:6c:cb:5b:b9:de:7c:93:be:d0:e3:
         29:cd:27:99:a8:57:91:67:37:ec:56:72:ce:0a:3f:8a:cf:a9:
         6a:50:18:4d:b3:58:b7:88:fa:92:2d:dd:94:75:23:11:bd:29:
         97:fd:ed:4b:41:d2:96:3c:2e:8b:4a:fc:1a:eb:af:31:f7:55:
         83:0d:c3:3c:3a:d4:65:bf:a1:27:31:d9:55:c2:f4:8c:6e:f7:
         06:3e:42:ff:81:ec:78:48:ef:52:51:35:65:70:00:6a:56:c2:
         f2:ec:00:2a:65:55:d8:10:7b:f8:57:6f:bf:3e:bd:19:c8:0f:
         87:a5:3f:9d:35:7a:60:3b:ef:39:29:e2:b4:ae:04:b9:16:b5:
         44:25:40:51:b3:c2:6e:13:4d:51:fb:ac:77:80:5d:de:7b:25:
         ad:78:0c:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
NTE4REFGMTEwLwYDVQQFEyhGQzk0NUIwNjZBRTg3OUE2MUJERjZGQ0IxODg1OUM1
N0EyRTcxNkQwMB4XDTIxMDYxNzE1NTI0MFoXDTIzMTIzMTE1NTI0MFowGDEWMBQG
A1UEAxMNNjBjYjZmY2UtZGRkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALa48HPvStcaSo8bo9Z3PR6+MZW3nn7xEoSgdNXPb6lZU5/+rGvFIQN/xmJP
eUWSfKRI/LNVUjYwdvjYYZs7GOtJMk/WHUnv75q4qoAlfi7bXvdL5+gwc3pKUgJd
L9cxaXy2tpzSwdRDUgJH99Ti5Nn6PpiUP8A2Kz3VPwONPt+dI2R5Avr7OVLf9trD
aIPk9uOsnaVVFnNhxd1DnaEOqDg2fhkXov6djyeBVWzUiCUJXOtPwrZ0bATA4nu0
g87rwcQktR2YqPmgT+laLArmtqAT2+JKLO2Yn7tQlu0a5xEi0NNxUK/t338v1aE/
fk0hjACk90UpZFcDnjT8JtPOsX0CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQA0LN5
70EnJFAybaYt2NTW7dpWXDAfBgNVHSMEGDAWgBT8lFsGauh5phvfb8sYhZxXoucW
0DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDUxOEQvODNGREFGNjhDRjdDMTFFQjgyRTA4MzQyRjhBRUEyMjgvX0pSYkJt
cm9lYVliMzJfTEdJV2NWNkxuRnRBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvX0pSYkJtcm9lYVliMzJfTEdJV2NWNkxuRnRBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDUxOEQvODNGREFGNjhDRjdDMTFFQjgyRTA4MzQyRjhB
RUEyMjgvMEVFRkUyNDJDRjg0MTFFQjg4MjA5MDRDRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMQzMA0GCSqGSIb3DQEBCwUA
A4IBAQB7w6KvOx8hEbxp/UYfUwWT7cqGBdeIqCEVmAqYUZlh0yzMH4lPYKC3fAUv
asyvQX5WK3Pvkh90XraAllgrbclnBzRZuKS6EgLFteMAyzQu4frpqx03/T2gy9rf
yFm1iZJYgWzLW7nefJO+0OMpzSeZqFeRZzfsVnLOCj+Kz6lqUBhNs1i3iPqSLd2U
dSMRvSmX/e1LQdKWPC6LSvwa668x91WDDcM8OtRlv6EnMdlVwvSMbvcGPkL/gex4
SO9SUTVlcABqVsLy7AAqZVXYEHv4V2+/Pr0ZyA+HpT+dNXpgO+85KeK0rgS5FrVE
JUBRs8JuE01R+6x3gF3eeyWteAyx
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:22 2025 by rpki-client