Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034383537.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          lq6x3AQVkDKXE7H5kSIGYsb2Qo0zZhNDHvajljmqc0s=
Subject key identifier:   58:A2:67:77:F0:A1:E9:3A:05:0F:05:02:0F:FE:BE:F2:0B:18:2C:8D
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       33A5BADF3755818A0F22F3AA520FC10578252492
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034383537.roa
Signing time:             Fri 09 Dec 2022 15:39:45 +0000
ROA not before:           Fri 09 Dec 2022 15:34:45 +0000
ROA not after:            Fri 08 Dec 2023 15:39:45 +0000
asID:                     204857
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a5:ba:df:37:55:81:8a:0f:22:f3:aa:52:0f:c1:05:78:25:24:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:45 2022 GMT
            Not After : Dec  8 15:39:45 2023 GMT
        Subject: CN=58A26777F0A1E93A050F05020FFEBEF20B182C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:0e:36:52:b4:37:9a:6c:ae:e0:80:37:96:
                    d2:6f:05:50:a6:52:2e:2a:e4:63:1f:08:0f:fb:d2:
                    9d:30:20:f1:2f:52:2c:40:8f:2b:c4:0b:ea:02:e7:
                    e7:53:1e:93:3e:a6:4f:fe:8b:ad:b9:01:52:c2:0e:
                    dd:17:90:1e:4e:eb:f0:c6:f8:02:1a:d9:1d:8f:6c:
                    f2:49:00:89:d8:9e:86:83:8f:a7:fb:4c:9a:4a:cc:
                    6a:48:ac:bd:bf:09:a8:54:81:5c:2e:c3:e6:47:74:
                    15:36:bf:c5:b0:99:7a:ca:87:ca:46:ec:6b:51:ed:
                    ca:40:4a:4f:21:6b:79:fc:ac:46:6d:2c:a8:d6:1c:
                    c9:f1:76:f4:4d:13:c9:21:45:6c:a4:05:e6:5f:f4:
                    54:97:5c:5e:d1:db:2f:1b:50:86:ba:e1:e8:f3:1f:
                    1f:57:b8:ef:a1:77:f3:25:97:da:80:aa:71:52:3a:
                    bb:bf:2a:60:99:77:eb:80:ca:57:92:af:47:97:c3:
                    a7:36:9b:a5:16:38:d1:14:1b:cd:42:2f:b4:70:91:
                    da:26:78:d8:64:17:b8:b3:f9:7b:21:4a:c8:09:94:
                    28:82:af:a9:a8:2d:55:b5:4f:b4:e9:5b:f5:07:42:
                    bc:78:b7:1e:05:b8:16:a9:d8:96:be:99:72:c8:db:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:67:77:F0:A1:E9:3A:05:0F:05:02:0F:FE:BE:F2:0B:18:2C:8D
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:e3:02:48:21:41:52:2c:4e:aa:c4:36:c8:98:58:ea:b0:b9:
         30:c5:f7:f6:af:e4:ec:2a:de:e6:ff:50:16:87:a5:a0:58:90:
         52:2d:7a:9a:54:41:67:02:55:0c:f4:74:cc:3e:9a:34:e0:46:
         c2:86:06:65:6a:f0:18:59:d5:b5:2d:11:bd:79:2d:4a:39:bb:
         0e:98:b8:29:ee:45:6a:d3:f5:0b:ec:32:1a:03:36:44:ec:0f:
         fa:84:d1:bf:27:d0:5a:5e:e4:1b:91:f1:df:86:11:eb:86:1c:
         99:10:bf:c4:25:bc:d3:11:a4:fc:ea:e4:e3:05:70:95:a7:db:
         10:3b:3e:3d:af:41:7a:b6:ed:db:5e:0d:d8:07:0f:58:41:fe:
         db:a5:67:78:4e:1d:e3:18:ac:77:d5:c6:19:e8:a8:fb:7e:ac:
         90:ae:a0:e4:4a:7b:f4:95:11:f2:bd:07:00:f4:cb:0d:81:e0:
         24:9e:11:70:5f:d2:db:b9:df:d0:9c:aa:5f:3e:45:02:ad:58:
         a9:88:9c:2f:ab:6f:d6:ea:a3:2f:69:62:dc:00:fe:c1:5d:3d:
         0a:98:75:f4:d8:ff:80:f2:8f:ac:80:45:84:ef:e5:19:b0:bf:
         48:a1:b3:c9:67:e3:e9:4d:ae:03:ff:6f:48:3b:5c:82:c2:a2:
         58:13:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org