Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/5A1B7164376511EE999326394AD9E6FC.roa
File:                     5A1B7164376511EE999326394AD9E6FC.roa (raw, json)
Hash identifier:          DD/5VIVEaGuBqQ3fBTS99QAueTDKH7QFmTvTW0gZoTY=
Subject key identifier:   DB:92:ED:D7:F3:C8:45:7F:B3:4E:C4:89:E1:0D:92:3F:0B:A7:A4:1E
Certificate issuer:       /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial:       44
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/5A1B7164376511EE999326394AD9E6FC.roa
Signing time:             Thu 10 Aug 2023 10:04:54 +0000
ROA not before:           Thu 10 Aug 2023 10:04:50 +0000
ROA not after:            Fri 14 Jun 2024 10:04:50 +0000
asID:                     37496
IP address blocks:        196.216.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8BF7AF
        Validity
            Not Before: Aug 10 10:04:50 2023 GMT
            Not After : Jun 14 10:04:50 2024 GMT
        Subject: CN=64d4b646-7815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:27:e3:4b:4b:67:e3:fb:84:45:41:16:7c:
                    80:1a:b1:77:77:79:d8:cb:68:2f:2d:79:a2:27:2e:
                    1e:9b:58:c3:6b:c2:3e:08:3f:80:a3:0f:7b:46:f5:
                    a5:0f:52:6b:1c:66:8a:4a:63:c7:04:0c:a1:78:41:
                    28:a8:c1:f9:1d:8e:ec:9f:3d:2d:7f:f3:bf:2a:ad:
                    46:1d:de:58:78:38:0c:3b:fa:55:f1:55:0d:17:15:
                    76:5a:18:b2:34:5e:8c:56:22:6c:99:9e:67:0f:d5:
                    2a:b4:59:aa:aa:e4:44:c4:6a:56:62:53:a3:92:90:
                    b1:ac:5d:d9:3b:c2:ea:df:64:78:4d:23:38:c6:8b:
                    09:12:9c:c9:66:5a:86:bf:8c:5e:45:e5:f2:08:51:
                    6f:c4:5f:d4:ce:d4:a6:d0:e6:56:5a:46:3f:9b:99:
                    19:27:c2:53:cb:34:93:30:f8:30:a5:08:bb:08:dd:
                    f9:98:24:96:51:fe:5f:52:fa:c5:44:c6:73:18:7f:
                    42:47:5f:62:ba:da:98:e4:44:ec:7a:82:5a:73:f2:
                    ad:8d:72:74:e9:0e:1b:29:dd:c5:46:38:13:52:73:
                    c2:04:f6:56:c4:88:50:40:3a:a7:68:bc:67:c2:a2:
                    a7:50:a2:17:6d:0a:f3:af:35:67:67:23:5b:0b:c0:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:92:ED:D7:F3:C8:45:7F:B3:4E:C4:89:E1:0D:92:3F:0B:A7:A4:1E
            X509v3 Authority Key Identifier:
                keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/5A1B7164376511EE999326394AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:56:8a:79:8e:ff:a5:a3:15:36:90:f4:29:b7:09:34:d8:ca:
         d4:2b:09:a7:e5:7a:53:ba:46:97:f0:06:f7:b8:10:fd:30:7f:
         40:2f:cf:24:a0:98:67:57:a9:73:ac:83:12:a1:b3:43:36:5f:
         e1:47:6a:b6:52:77:04:5a:76:22:0a:ef:c2:88:2a:e6:27:03:
         23:5e:e1:b4:1e:b6:87:82:c7:5d:7e:d0:7b:40:0a:66:1e:1d:
         1f:42:4e:6d:4d:ae:db:3b:63:fb:08:42:e9:11:06:f7:64:43:
         aa:cc:fc:2f:e8:40:d4:db:ed:4e:5a:e3:f4:88:ef:03:f9:47:
         b2:dd:bd:20:79:e1:b7:0e:16:02:3a:c0:02:14:e9:95:46:77:
         48:4c:0c:a4:db:79:03:b2:97:4d:5f:b1:63:41:b4:05:12:4a:
         a2:17:57:57:d5:93:3f:30:a6:60:ba:6c:f2:fc:02:53:eb:a4:
         4e:54:bc:d6:3c:25:46:2b:34:d5:f7:54:62:b6:3b:32:03:fa:
         15:a9:76:95:ec:b2:67:5a:18:13:27:79:ba:92:5c:0b:08:13:
         d6:da:51:de:b0:ea:4f:a0:e6:c3:13:c7:fe:fd:b1:d0:bb:28:
         19:22:0a:09:51:fd:f7:58:2f:88:65:d2:63:87:b4:8a:06:75:
         5e:a1:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:19 2025 by rpki-client