Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/65E01336110111EE9D03B1154AD9E6FC.roa
File:                     65E01336110111EE9D03B1154AD9E6FC.roa (raw, json)
Hash identifier:          GbMSgvsp7GqdDgb1Dj+emqvlITToDrC4DRb2yzeGKeY=
Subject key identifier:   B6:E8:86:5E:40:A5:2E:CA:CC:99:A6:6E:E9:A6:90:27:24:92:19:1C
Certificate issuer:       /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial:       0F
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/65E01336110111EE9D03B1154AD9E6FC.roa
Signing time:             Thu 22 Jun 2023 13:33:40 +0000
ROA not before:           Thu 22 Jun 2023 13:33:36 +0000
ROA not after:            Fri 14 Jun 2024 13:33:36 +0000
asID:                     37496
IP address blocks:        2001:43f8:680::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8BF7AF
        Validity
            Not Before: Jun 22 13:33:36 2023 GMT
            Not After : Jun 14 13:33:36 2024 GMT
        Subject: CN=64944db4-9991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:d7:b3:bb:2c:b7:4f:f8:e3:c4:71:c5:69:
                    c3:fa:9b:b5:c0:f2:6b:a0:dd:16:02:49:4f:f9:d3:
                    b7:22:04:fa:e9:e4:03:0a:b7:1e:5d:96:7e:0e:2a:
                    43:08:74:be:ec:86:c7:0b:5d:68:70:41:e8:1d:44:
                    00:43:1b:4c:68:5b:37:81:43:51:11:81:85:68:21:
                    2d:47:d6:0d:cf:09:e3:7b:63:93:ed:e0:99:8c:c5:
                    d1:c4:4d:ff:91:b5:f6:5b:fe:f9:2d:81:db:9d:d5:
                    5f:77:ca:ac:8f:d6:a0:1a:c8:fe:32:1c:24:6c:14:
                    9e:e1:03:cf:a1:70:1f:f3:cf:45:80:93:36:7e:f1:
                    43:f8:72:de:1f:4c:27:ff:a8:e7:17:68:0b:3a:f2:
                    42:0d:82:5b:7b:c4:63:71:da:05:0d:05:2a:8c:c6:
                    81:10:e2:4d:38:90:39:1b:36:0b:7e:36:31:ee:a6:
                    2e:86:bb:c9:83:81:26:24:99:b1:16:d7:e0:f3:83:
                    d0:bb:da:71:67:74:ab:d5:cc:70:04:0a:5d:7f:d1:
                    05:95:c2:38:90:2e:0a:58:69:b4:ab:c8:02:09:fd:
                    04:f5:07:5d:9d:a6:a0:da:d8:77:d1:6a:4b:07:92:
                    bb:bd:07:9e:de:ed:e6:0f:16:52:33:bb:10:b0:b3:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E8:86:5E:40:A5:2E:CA:CC:99:A6:6E:E9:A6:90:27:24:92:19:1C
            X509v3 Authority Key Identifier:
                keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/65E01336110111EE9D03B1154AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:680::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:07:e6:39:36:86:a1:a9:9b:15:f9:74:d8:a1:16:8a:29:
         98:65:d5:4d:cb:74:94:18:06:e0:72:96:95:43:aa:58:74:43:
         f6:f1:64:22:9f:50:c2:68:b0:13:ad:51:00:ef:79:a4:9d:b6:
         b1:8f:d9:18:45:ed:f9:09:ff:7c:c6:5d:41:1e:7a:bd:3c:48:
         c3:51:6d:70:5d:b1:28:9e:34:9f:98:d1:0c:16:88:6d:7c:38:
         e3:15:a2:83:e7:89:bb:19:c1:67:b9:be:a9:d4:a9:97:ef:c7:
         9f:e7:90:55:09:f7:02:f4:58:ab:2d:c0:d4:22:dd:de:39:67:
         07:b0:9d:b1:3f:b0:01:e4:b3:15:a0:01:6d:74:0f:53:d6:a6:
         df:c3:a2:0a:3d:c0:85:11:e6:a4:ef:ea:00:ee:e6:43:fb:f8:
         96:9c:75:ee:8f:ba:3d:d4:2f:32:10:c9:b9:76:b6:c6:3e:e9:
         da:dd:9f:9f:4e:87:b5:3d:76:8d:3f:b0:34:a1:ec:31:1c:93:
         8b:56:5e:86:74:f6:2a:a8:61:d4:0f:c5:32:2a:50:fe:dc:35:
         d4:ad:bf:b4:22:7e:90:f3:a8:16:a9:e7:2b:ac:1f:d3:53:13:
         b0:04:75:b9:f4:89:8a:e2:f3:86:9b:80:73:95:bc:ff:3d:d8:
         74:1a:91:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:19 2025 by rpki-client