Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323030333630.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323030333630.roa (raw, json)
Hash identifier:          Z7HDtMx9d8uG/YfLZBt5F2Wi0krMRBVmQ9qvuBZza8o=
Subject key identifier:   DD:10:CF:4A:BF:DB:A9:17:9A:19:B0:37:61:E2:B0:B7:B8:96:75:68
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       4187FD2AC358ABBA9C03445720D48F765B810EFC
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323030333630.roa
Signing time:             Wed 22 Feb 2023 01:32:40 +0000
ROA not before:           Wed 22 Feb 2023 01:27:40 +0000
ROA not after:            Wed 21 Feb 2024 01:32:40 +0000
asID:                     200360
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:87:fd:2a:c3:58:ab:ba:9c:03:44:57:20:d4:8f:76:5b:81:0e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 22 01:27:40 2023 GMT
            Not After : Feb 21 01:32:40 2024 GMT
        Subject: CN=DD10CF4ABFDBA9179A19B03761E2B0B7B8967568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:f7:05:fd:a4:3b:c5:a0:e7:7c:8c:f3:75:
                    db:93:3b:ba:9e:22:07:a6:2b:04:3e:d1:a6:e3:21:
                    cc:dc:d0:15:aa:74:61:3c:e0:ac:2c:0c:7d:2a:a7:
                    d3:b5:c5:5e:7b:91:4b:e5:28:03:05:04:c1:9e:00:
                    b5:f5:92:52:8b:70:93:e6:c8:22:5a:a8:85:7c:69:
                    31:4c:19:b7:27:1d:93:e2:cd:1b:c8:08:bf:4a:52:
                    32:54:4c:fd:54:c6:f2:9e:1d:2f:46:50:75:0a:7a:
                    07:5e:7c:70:7b:e6:9c:46:52:57:97:fe:65:fc:eb:
                    aa:97:18:f4:3e:67:a8:5c:03:66:3c:6d:9f:49:61:
                    5d:4d:3d:26:3f:7e:df:de:ce:e1:54:d4:73:c8:35:
                    f0:c9:45:61:fe:b7:13:7d:ba:0b:60:02:b5:36:56:
                    17:00:88:00:05:6f:84:9a:ad:cf:a0:cd:64:9b:29:
                    36:f8:1f:85:0c:4d:33:f0:13:c6:fd:1d:cf:08:19:
                    c2:2b:c9:48:2c:9b:f1:97:bb:3e:51:71:f4:94:7e:
                    a4:08:45:f7:e1:4e:61:66:bd:09:33:09:57:b0:b9:
                    cc:f4:eb:29:59:da:98:99:32:47:88:a9:f5:5d:f8:
                    87:f2:8f:22:72:ec:0e:60:34:ff:4b:57:d4:42:6f:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:10:CF:4A:BF:DB:A9:17:9A:19:B0:37:61:E2:B0:B7:B8:96:75:68
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323030333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:36:04:3f:e2:90:2b:97:8e:9a:7b:18:31:b2:35:6f:0d:
         ba:7c:a8:d0:ee:42:f1:41:af:90:18:94:6c:93:6d:b2:25:79:
         71:02:62:8b:23:d1:41:f7:54:2b:86:18:af:77:dc:04:66:38:
         6e:d5:e8:c9:f8:75:14:6b:c1:90:7d:d6:59:b1:e4:94:3f:45:
         0f:25:30:a8:0b:83:5c:e9:df:f8:10:c5:a0:dd:86:b1:e7:dc:
         84:4e:30:ea:58:96:dc:19:07:d0:cd:9d:56:7c:53:e7:d7:c1:
         1c:0c:30:e0:ca:a0:58:63:5f:9c:7f:7e:78:d0:42:e0:51:6a:
         80:a9:05:ee:24:89:e8:79:57:fa:1b:86:4b:66:8f:ad:b2:45:
         41:2e:98:f8:8e:5a:94:0e:18:e4:a1:36:fa:4b:30:1a:4b:79:
         b2:e8:62:15:83:8c:c6:8b:30:2f:2e:f3:7c:6f:27:22:f3:9e:
         63:66:4e:c3:a2:6f:b6:90:ef:3d:df:66:68:a6:46:4a:13:37:
         29:23:3c:43:ff:04:18:7b:6d:9e:14:62:8c:13:de:01:4b:83:
         0c:ff:d6:25:82:49:7a:f9:e0:c8:97:1f:9a:a4:74:fb:fc:b4:
         1a:35:6e:a1:05:97:5c:ef:14:65:3f:a7:e9:be:1e:f9:bd:d7:
         e8:5c:89:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org