Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034393031.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323034393031.roa (raw, json)
Hash identifier:          FyVdVVwA9V9kAK62JR62bbNiF6JokTP6W849s2U5Nvw=
Subject key identifier:   D6:59:30:D2:38:A1:3E:63:E5:33:49:35:60:36:E3:88:24:71:16:54
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       4A92A5277D0F449F761BA5732623E8C4E6A51D82
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034393031.roa
Signing time:             Fri 09 Dec 2022 15:39:34 +0000
ROA not before:           Fri 09 Dec 2022 15:34:34 +0000
ROA not after:            Fri 08 Dec 2023 15:39:34 +0000
asID:                     204901
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:92:a5:27:7d:0f:44:9f:76:1b:a5:73:26:23:e8:c4:e6:a5:1d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:34 2022 GMT
            Not After : Dec  8 15:39:34 2023 GMT
        Subject: CN=D65930D238A13E63E53349356036E38824711654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:cb:28:91:0b:1a:7b:13:ed:0e:dc:37:28:
                    25:93:e5:f9:3a:81:39:e9:70:b2:5f:0a:a3:62:49:
                    17:5c:b6:a8:8f:dd:a5:11:9f:3f:c3:d1:35:1b:61:
                    c5:4c:25:ea:17:3f:00:e3:af:1c:c0:b5:36:f3:73:
                    f1:a2:15:33:b6:7c:0c:50:c1:48:22:72:fe:2f:a5:
                    49:5b:1d:c3:d0:47:6d:2c:24:c1:5c:a5:a3:61:8a:
                    f5:a3:d7:8e:37:c9:78:90:80:ac:00:8f:74:a9:8f:
                    bd:9b:9f:83:53:40:9f:e9:10:86:89:69:88:06:7f:
                    5b:58:66:48:9e:7d:4f:1a:a1:3c:62:c9:8f:c0:ff:
                    85:1b:7e:58:a3:68:d7:ef:93:2a:2d:78:df:0a:3a:
                    14:01:95:15:97:22:ab:ec:8b:3d:48:39:2f:6a:f5:
                    7e:07:7e:d8:15:c0:32:11:b3:cb:9a:3f:28:4a:2e:
                    78:a0:66:30:11:30:b7:98:31:65:ff:b4:41:c1:30:
                    c5:a9:71:a6:7c:52:07:f1:1e:a9:66:32:2d:53:64:
                    89:0a:bd:f9:dd:84:ff:3b:47:2c:e5:4a:93:c0:0e:
                    f1:a2:38:cd:61:a4:de:1d:2b:1f:07:d9:56:fa:db:
                    ac:6f:84:7b:f1:8d:4e:8e:01:9b:2f:4d:b8:91:2d:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:59:30:D2:38:A1:3E:63:E5:33:49:35:60:36:E3:88:24:71:16:54
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:f1:8e:13:eb:ab:09:46:32:27:e6:77:1c:1f:50:01:68:
         0a:0c:a2:ab:b1:83:d1:c6:06:d6:3c:c0:64:b3:d1:81:42:48:
         d7:b9:fa:c8:1c:1e:74:95:6e:b8:a0:10:51:85:84:0a:40:52:
         bd:c0:90:f0:a4:63:9b:ae:38:f2:a5:ae:17:42:d8:6c:43:03:
         27:50:24:d6:30:ee:59:5b:16:a8:98:9c:e5:45:97:9a:fa:36:
         83:9e:07:c0:df:5b:e5:6f:98:54:cb:75:88:27:f5:cb:71:0f:
         ac:dc:0f:78:a9:1e:0b:99:92:e1:79:88:f5:3a:fd:72:6b:17:
         ec:06:0d:b9:5c:23:54:67:f7:24:79:33:b5:a4:56:4d:f3:d9:
         96:b4:b1:5e:de:cd:2f:d9:e2:0f:86:87:18:22:34:79:ba:5f:
         a8:93:43:d3:4b:ee:27:62:3e:25:63:ee:2d:ab:58:7d:25:59:
         b7:64:ac:08:1a:ae:01:a9:76:01:6e:9d:06:40:72:b6:e9:34:
         5b:e8:b7:1e:1c:32:bd:c3:7b:3e:bc:ee:63:62:9a:74:5c:b6:
         30:92:5e:aa:80:a5:11:62:62:b0:33:45:aa:99:87:8f:5e:69:
         90:80:2b:ac:db:f0:ac:37:86:74:22:59:91:ad:f9:ef:46:3e:
         7f:3c:3c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org