Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92BC47D8C8EF11EF911F5F58762E951A.roa
File:                     92BC47D8C8EF11EF911F5F58762E951A.roa (raw, json)
Hash identifier:          kMHdbO9CAc0GXumw9Zs+PwxazlK2BnvsUFt7NX0XUlM=
Subject key identifier:   30:2C:28:41:37:89:1C:DE:78:A1:71:AB:D7:87:E7:5A:A0:1E:8D:A8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       013267
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92BC47D8C8EF11EF911F5F58762E951A.roa
Signing time:             Thu 02 Jan 2025 09:54:36 +0000
ROA not before:           Thu 02 Jan 2025 09:54:32 +0000
ROA not after:            Thu 06 Feb 2025 09:54:32 +0000
asID:                     61112
IP address blocks:        154.83.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78439 (0x13267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  2 09:54:32 2025 GMT
            Not After : Feb  6 09:54:32 2025 GMT
        Subject: CN=6776625c-7dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:fb:ee:63:0b:1f:3b:43:c5:70:13:e8:a2:
                    c6:2f:96:21:f4:37:80:3b:4e:f6:a6:0a:25:88:27:
                    cf:6a:e1:47:01:6c:fa:ba:19:8e:31:73:31:28:af:
                    8c:f1:69:06:70:6f:fb:d3:0f:b4:d5:f0:86:12:cb:
                    99:f5:74:cc:41:23:b3:a6:61:c9:e0:71:cb:ae:8f:
                    b4:96:6f:eb:f6:19:a1:45:9f:ed:32:f1:e6:82:73:
                    97:c3:6b:51:e7:d9:7f:48:b8:1d:17:75:2c:dd:e6:
                    98:6f:32:fd:9f:e0:e1:e5:ad:e4:ad:f7:f1:41:17:
                    31:8c:6f:4a:7a:1e:48:0a:bb:d0:4c:2e:70:12:43:
                    5f:4a:5b:77:cc:a9:4a:7c:08:d5:cb:14:78:29:29:
                    43:d1:b2:70:fc:f5:13:26:41:25:3c:4b:09:cc:bb:
                    c0:48:d1:c9:ab:a9:2a:db:ee:8e:22:bc:f0:be:94:
                    a4:ff:44:ca:95:c1:e3:12:8b:a2:90:b2:01:4c:f1:
                    f7:c3:c2:3c:08:ad:17:25:cb:10:59:1d:5f:64:e0:
                    1e:9d:28:54:3b:e8:80:8e:ee:30:d6:0f:4e:b0:1a:
                    91:48:e8:ec:47:21:7b:9c:e9:75:10:4a:7b:77:7e:
                    db:5f:6d:3a:95:51:40:b0:07:2f:65:ec:32:4e:32:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2C:28:41:37:89:1C:DE:78:A1:71:AB:D7:87:E7:5A:A0:1E:8D:A8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92BC47D8C8EF11EF911F5F58762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:ad:a5:ce:86:02:e6:d5:bc:d7:3f:81:8f:54:6b:18:11:9a:
         dd:4d:64:68:8a:fb:2e:39:97:25:45:e8:b0:a0:69:ed:b0:09:
         02:79:f7:38:4d:69:77:9a:bf:57:78:d5:29:54:8c:96:24:20:
         99:6b:f5:77:fa:8d:28:c1:70:d7:c9:35:ff:f1:36:8e:28:38:
         a4:00:cc:10:23:1a:8d:91:df:c5:a2:e3:22:80:ad:04:d7:c1:
         b6:dd:2f:28:1b:9b:20:d3:54:8c:3b:44:1b:5f:9e:ce:c7:af:
         3a:e1:43:54:af:fe:fe:9a:78:2e:c2:79:77:a9:07:83:25:f4:
         ed:bf:d1:d8:6c:4a:59:98:68:d6:e5:07:e5:a1:96:fc:cb:91:
         3c:d2:a3:54:69:e1:17:3f:f7:bb:8c:47:ca:c4:73:9b:94:f6:
         43:13:aa:11:4f:2c:38:22:45:fe:d5:82:3b:cf:24:b8:3d:90:
         06:97:9d:86:68:9d:2e:26:67:7b:cb:0a:09:37:6b:f0:fa:87:
         8c:72:7f:eb:e0:d5:e5:6e:d8:f9:70:48:ae:4d:9b:fe:be:33:
         f9:ae:57:7a:2d:ed:77:6a:fb:5e:5c:55:58:d2:e0:f1:79:39:
         fc:68:c7:d5:96:5f:2b:27:14:3d:40:06:b8:ff:d2:63:f1:2c:
         36:c0:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:37:38 2025 by rpki-client