Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ADF5516C792811ECB8058AC95A40D577.roa
File:                     ADF5516C792811ECB8058AC95A40D577.roa (raw, json)
Hash identifier:          aweXsIkdmsCvP/zzzjwMagDXuAMAETW1KN0xB5gjuSw=
Subject key identifier:   8F:BB:C9:C5:D8:F1:58:B4:59:E7:4F:B0:90:9B:0D:C7:50:C3:5C:F6
Certificate issuer:       /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial:       0191
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ADF5516C792811ECB8058AC95A40D577.roa
Signing time:             Wed 19 Jan 2022 13:06:57 +0000
ROA not before:           Wed 19 Jan 2022 13:06:53 +0000
ROA not after:            Thu 19 Jan 2023 13:06:53 +0000
asID:                     58202
IP address blocks:        154.73.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAF
        Validity
            Not Before: Jan 19 13:06:53 2022 GMT
            Not After : Jan 19 13:06:53 2023 GMT
        Subject: CN=61e80cf1-cd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:6a:56:e9:e9:a7:2b:d6:0d:5b:b4:a1:19:
                    9e:6f:84:26:fa:51:c2:66:82:91:b6:f9:12:bc:a2:
                    72:cd:16:0c:ce:d6:2b:9a:91:78:d6:6d:c3:fd:aa:
                    8f:20:7a:09:fe:9a:50:05:35:be:d6:2e:cb:14:0a:
                    a2:82:6c:29:8c:98:9b:df:b9:54:04:3a:49:8c:e6:
                    a2:e7:4c:3c:ca:fc:0e:6f:b4:13:33:eb:9a:8c:9c:
                    ab:e4:8b:05:8c:6e:c7:f8:47:80:4f:83:da:a8:4f:
                    71:14:86:57:49:87:ee:dc:7b:80:81:73:17:b4:b8:
                    f1:d4:33:8a:b4:1a:c1:49:c2:12:6d:fe:fb:10:a1:
                    0d:49:13:6b:2f:44:87:b8:a5:6b:84:33:50:90:22:
                    6f:04:53:42:36:48:46:7a:ab:a5:e3:78:92:69:e9:
                    e0:42:c3:e6:58:b9:e7:d3:9c:8b:15:fe:a1:d1:fc:
                    2e:28:f3:24:6f:26:40:aa:ed:4e:f5:1e:b2:73:c9:
                    bc:d3:df:69:06:9d:f1:ca:b3:77:e0:5f:cc:ca:e1:
                    8b:bf:9a:2e:e5:40:dd:48:ef:25:94:d0:bb:8a:44:
                    43:01:36:db:a6:21:e9:07:17:df:87:6c:f7:10:25:
                    86:9e:f2:01:48:52:db:82:2b:e1:e0:47:70:d3:e0:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BB:C9:C5:D8:F1:58:B4:59:E7:4F:B0:90:9B:0D:C7:50:C3:5C:F6
            X509v3 Authority Key Identifier:
                keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/ADF5516C792811ECB8058AC95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.73.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:50:12:3a:3a:2c:7e:34:60:0d:4d:6d:b8:24:78:58:7c:7e:
         44:6b:87:56:93:06:e4:59:54:be:c1:86:bc:c5:19:9e:76:d2:
         ab:e6:13:fe:ac:6a:cc:cc:5e:cb:56:1c:98:49:48:da:94:e1:
         15:5d:0f:ca:6d:bd:f8:49:01:f3:e3:12:07:f9:7b:a7:7e:eb:
         f3:39:64:75:64:12:0b:39:85:c3:a6:07:0b:e8:ef:da:df:a6:
         79:93:16:5a:b7:17:1a:11:72:31:ca:ce:27:82:77:cf:77:c1:
         3d:d2:fc:54:a7:f4:0c:81:af:b4:bd:db:9a:11:c8:5a:4c:db:
         e9:2b:da:43:41:81:43:76:99:90:22:da:81:b4:24:be:5d:b0:
         ec:00:53:df:b4:60:75:e8:af:70:60:42:77:2a:da:8a:0d:b9:
         9c:aa:b8:97:f3:fb:fc:be:d0:1a:d0:e9:0d:de:2d:44:ba:75:
         13:55:ac:9b:02:56:95:81:ed:b1:1f:4c:be:0c:ec:3b:59:87:
         8f:ab:7c:61:8e:72:09:3e:a3:82:73:38:af:5d:2f:67:53:88:
         16:7b:c4:1b:85:6d:cf:5c:24:88:0e:7e:c3:8c:98:b1:5b:b3:
         9a:6b:88:34:37:1b:75:8e:ac:92:d2:d7:c8:6a:23:53:b9:08:
         55:ab:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:56 2025 by rpki-client