Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/77D9BDCED4D811EBAD051F3DF8AEA228.roa
File:                     77D9BDCED4D811EBAD051F3DF8AEA228.roa (raw, json)
Hash identifier:          yUuPocVkMY09lQgg4elqOJbxuto4SWI0OrW7iMkufmo=
Subject key identifier:   1F:C7:0E:F1:8D:92:45:CD:BC:E0:B7:3E:89:84:E5:CE:52:BF:ED:DE
Certificate issuer:       /CN=F36F64ABAF/serialNumber=7DF6AEFA75918AD5B40E99565E0966AB43DBE188
Certificate serial:       23
Authority key identifier: 7D:F6:AE:FA:75:91:8A:D5:B4:0E:99:56:5E:09:66:AB:43:DB:E1:88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffau-nWRitW0DplWXglmq0Pb4Yg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/77D9BDCED4D811EBAD051F3DF8AEA228.roa
Signing time:             Thu 24 Jun 2021 10:39:35 +0000
ROA not before:           Thu 24 Jun 2021 10:39:31 +0000
ROA not after:            Wed 30 Apr 2031 10:39:31 +0000
asID:                     327750
IP address blocks:        2c0f:e8e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F64ABAF
        Validity
            Not Before: Jun 24 10:39:31 2021 GMT
            Not After : Apr 30 10:39:31 2031 GMT
        Subject: CN=60d460e7-9a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:5a:cc:15:31:69:7a:eb:52:af:f9:fc:be:
                    40:f6:c8:8c:13:36:2a:4f:f0:11:cc:27:9a:a2:0b:
                    2d:46:12:22:9b:d4:75:15:1d:21:3a:0c:ce:47:83:
                    5d:4e:bc:eb:14:71:5f:84:e8:3f:b2:b4:e5:d3:ab:
                    3b:02:8d:57:22:08:eb:e4:fe:76:13:23:6e:c0:0b:
                    e0:0a:7e:b4:ca:8c:73:59:f9:53:7c:7b:8b:23:2b:
                    16:32:ac:e2:ff:6b:a9:b0:8c:d2:e5:31:c1:68:bc:
                    e1:9c:88:89:b9:38:f4:ff:95:5c:23:b7:3d:70:57:
                    6f:0c:58:91:02:ea:e8:8f:5a:13:63:61:8d:c2:1b:
                    50:9f:79:02:f6:66:eb:42:1f:ca:82:5e:73:fc:01:
                    89:4c:4b:dc:51:93:03:17:cc:24:34:a6:09:33:e9:
                    b8:74:7d:68:72:6d:41:78:b3:1b:5f:cc:5f:ef:43:
                    7d:71:df:a1:7d:bc:ff:94:73:78:71:24:2a:36:9f:
                    d4:f5:5e:a5:a5:e6:e5:2d:d9:eb:e1:f6:e5:ec:03:
                    99:0a:98:7d:3a:f0:93:75:56:3d:e2:8c:6d:bc:ea:
                    e4:43:ff:76:4c:ab:b2:4d:ba:33:0e:ce:00:bf:f0:
                    9f:cb:e1:6c:70:08:83:4d:fe:ea:28:44:2d:5f:8f:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C7:0E:F1:8D:92:45:CD:BC:E0:B7:3E:89:84:E5:CE:52:BF:ED:DE
            X509v3 Authority Key Identifier:
                keyid:7D:F6:AE:FA:75:91:8A:D5:B4:0E:99:56:5E:09:66:AB:43:DB:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/ffau-nWRitW0DplWXglmq0Pb4Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffau-nWRitW0DplWXglmq0Pb4Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F64AB/DCCA8196C21811EBB1E35E72F8AEA228/77D9BDCED4D811EBAD051F3DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:e8e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:d9:be:27:fa:59:5e:c7:a4:fa:81:6b:d8:c3:a2:e4:80:
         83:72:5c:0c:d7:a9:cb:94:03:b9:ef:83:31:1e:9c:7e:70:72:
         4b:39:ce:9e:cf:ae:53:81:9d:41:8f:6e:00:96:65:96:4e:15:
         15:94:28:ca:e8:c3:63:ea:65:44:3e:da:49:22:42:87:66:4e:
         19:82:de:5b:f6:e7:4f:31:50:32:34:19:4d:b7:0d:20:be:23:
         68:dc:4f:1c:ff:bf:1f:e1:79:fa:78:23:17:f5:d4:61:7b:b9:
         47:07:e7:08:c6:2a:69:42:7c:29:a3:6e:77:4b:c2:82:c4:74:
         1c:96:64:55:40:12:9d:de:83:60:0a:8d:03:d8:e2:81:7d:f5:
         e5:b2:42:20:48:10:3b:db:9a:3d:9f:75:c9:72:1d:1c:b8:48:
         20:db:b6:63:02:71:73:eb:4c:e1:e3:0b:52:a1:55:b1:a4:46:
         f8:f0:1a:96:28:cd:7a:84:06:5a:42:62:e8:de:30:ab:b8:20:
         a2:fa:d5:1d:93:ae:2c:4d:4f:3c:a9:57:43:b4:e2:c3:f2:be:
         ff:a1:4e:52:15:34:6b:a2:75:70:de:a8:a9:26:18:6c:30:e2:
         b4:80:79:f8:ba:96:9a:9b:31:e7:c1:ff:e0:d4:2c:ba:99:2b:
         e6:c9:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:07 2025 by rpki-client