Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033303639.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          Rmn1SnvCjLeh5h7VZad9mB8K+wLLFwru21fcTDhs9Ws=
Subject key identifier:   68:EC:93:38:51:82:19:C4:64:FF:D9:BE:AB:E2:70:74:73:6F:EE:9B
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       5AFFE57486A1626FC16B6B4BB12A5052ACE765B7
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033303639.roa
Signing time:             Fri 09 Dec 2022 15:39:35 +0000
ROA not before:           Fri 09 Dec 2022 15:34:35 +0000
ROA not after:            Fri 08 Dec 2023 15:39:35 +0000
asID:                     203069
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ff:e5:74:86:a1:62:6f:c1:6b:6b:4b:b1:2a:50:52:ac:e7:65:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:35 2022 GMT
            Not After : Dec  8 15:39:35 2023 GMT
        Subject: CN=68EC9338518219C464FFD9BEABE27074736FEE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:2a:e1:d2:98:5a:8d:b3:c1:91:71:4f:dd:
                    0f:a4:d7:17:18:e4:a2:d7:be:6c:49:80:e3:ff:1a:
                    44:01:f1:c8:12:a1:92:c1:7f:8e:76:db:ad:ec:e0:
                    e8:6b:61:75:98:0a:f6:dd:8d:09:fc:dc:bf:44:6a:
                    71:01:58:46:c1:f8:8c:9b:15:cd:32:e1:13:f4:47:
                    95:2f:26:81:c0:ad:52:c1:9d:93:94:10:35:c7:1a:
                    ea:aa:7c:de:fb:76:e3:88:35:16:71:64:f6:b4:34:
                    e0:26:9c:e4:e8:f0:2b:eb:4e:97:aa:44:ef:8e:61:
                    1f:33:3e:78:5f:f7:4c:58:56:77:79:23:0e:52:f9:
                    b1:39:ee:e6:d4:78:0d:6e:d5:82:9c:78:65:2c:8a:
                    03:6c:ac:b7:20:67:35:65:08:8f:34:7b:4c:07:92:
                    64:97:fb:9d:a6:f8:aa:f8:87:11:da:da:ff:22:26:
                    c1:70:82:53:33:3d:bd:1d:9f:f4:28:42:36:95:46:
                    1e:d2:d6:c2:fb:af:bb:75:85:60:99:85:62:14:62:
                    6e:55:7c:26:60:07:b3:32:f7:17:e2:6a:8c:cb:01:
                    7e:25:53:99:69:e0:67:00:97:ef:53:d0:9f:15:a0:
                    fa:95:30:79:b5:59:c5:11:29:ec:1a:15:00:d2:6d:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EC:93:38:51:82:19:C4:64:FF:D9:BE:AB:E2:70:74:73:6F:EE:9B
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:48:8f:62:22:3b:a8:50:c2:38:c4:d7:6e:79:e0:1f:ff:
         3b:6b:2a:43:dc:d9:c0:d0:8e:e9:3f:73:ef:a3:57:19:ff:2c:
         a1:01:43:45:c9:f5:be:0e:70:0a:31:58:d8:3f:31:d4:0d:8f:
         85:5a:70:1a:41:e2:40:35:55:a9:7a:71:53:57:d7:dd:83:ad:
         eb:da:9d:2e:1d:b7:78:a7:a7:98:d6:97:ce:77:67:ee:f9:b0:
         fd:e5:5b:4b:f3:cf:03:d8:c1:61:4f:c7:a1:dd:51:f2:40:60:
         9a:23:4a:03:e9:d9:5f:55:aa:e6:50:4e:12:3e:1d:dd:aa:79:
         bb:26:9a:2d:a2:40:ca:db:4f:0a:02:84:5e:50:a1:94:ff:87:
         d7:29:eb:79:17:eb:75:7b:51:8a:a8:77:3a:60:b7:c1:87:e8:
         c1:02:e5:38:0d:a6:71:0b:c2:79:80:9c:05:53:d5:46:d5:7b:
         62:8a:96:bb:bb:cc:ce:d6:0c:3c:e9:50:d3:a4:8c:be:c9:31:
         4a:7a:50:4d:c1:5e:be:e1:0c:e4:fa:8f:54:74:ff:02:51:1d:
         8f:7c:9c:95:c0:b5:34:74:dd:57:5e:17:33:4c:c9:ed:bb:d2:
         a4:d8:0a:8f:7a:31:0b:42:01:af:57:02:84:73:0a:12:84:46:
         86:a7:ed:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org