Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323037353536.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323037353536.roa (raw, json)
Hash identifier:          AQDJJ5NpDISQEgDPGNu5ANpUhw+Vo2RYN8vJl0tYThg=
Subject key identifier:   94:A5:8D:8F:FC:5A:D9:32:7C:2F:A9:FF:1D:24:29:96:75:AC:FE:42
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       22D818744391A6530196255F5704D68681C76BA4
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323037353536.roa
Signing time:             Fri 09 Dec 2022 15:39:36 +0000
ROA not before:           Fri 09 Dec 2022 15:34:36 +0000
ROA not after:            Fri 08 Dec 2023 15:39:36 +0000
asID:                     207556
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d8:18:74:43:91:a6:53:01:96:25:5f:57:04:d6:86:81:c7:6b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:36 2022 GMT
            Not After : Dec  8 15:39:36 2023 GMT
        Subject: CN=94A58D8FFC5AD9327C2FA9FF1D24299675ACFE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:55:ce:3e:df:8f:01:5e:ca:7d:3e:5b:e5:
                    07:ee:b2:77:d4:bb:3d:6b:34:ec:e8:f0:4d:a7:d1:
                    a5:25:f3:d8:ad:20:c7:f6:37:be:f8:90:77:ba:22:
                    a1:cf:20:8b:89:72:cc:7d:9d:5f:79:70:3d:e0:e1:
                    b0:7b:f8:9e:bb:08:85:b2:4a:50:82:78:da:c0:37:
                    d2:26:f9:25:8c:35:57:4f:c1:e1:5f:69:c9:c1:76:
                    6b:92:e4:15:20:5f:70:c6:6f:6b:12:6c:be:91:d1:
                    3b:77:5d:c9:dd:d9:33:b5:46:57:5c:f8:36:73:12:
                    0b:06:d1:8f:f2:89:41:15:54:cc:e0:bf:e8:da:64:
                    fc:7e:52:1d:06:7f:48:d4:3e:4d:0d:50:00:c4:b4:
                    ae:48:6e:bb:60:e0:b3:6a:cf:4e:e6:2c:9c:2f:6e:
                    af:2d:84:90:97:44:c1:d9:fe:8b:91:4e:27:aa:0b:
                    a8:e2:d1:c8:d3:95:fa:77:0c:5f:27:7a:ec:69:bb:
                    5f:4e:b1:28:56:46:61:7f:ec:7c:17:92:e9:d0:cd:
                    01:02:45:83:83:45:36:12:44:c8:85:ae:5e:cc:80:
                    ba:19:d5:cb:b9:45:de:b8:5b:c6:e0:3e:03:d1:13:
                    71:63:fc:44:93:ed:3f:20:d9:9e:52:ce:5d:c3:09:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A5:8D:8F:FC:5A:D9:32:7C:2F:A9:FF:1D:24:29:96:75:AC:FE:42
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323037353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:86:4c:a2:3d:e1:fa:37:a1:3c:30:f4:21:1c:39:f3:10:7f:
         a8:ef:b4:d6:bf:36:40:5c:44:b7:9b:52:6e:45:27:4b:8d:39:
         9b:07:6c:c1:c6:a4:bd:75:83:a9:1c:bb:e2:ef:61:7a:92:fb:
         c1:23:04:cd:58:98:52:c0:ae:e2:23:c6:7d:95:4d:74:ab:52:
         73:16:ba:86:2b:58:c5:3a:3f:69:69:3f:83:f8:02:c3:54:b2:
         37:75:37:71:b4:07:42:b9:91:bf:c5:08:0a:3c:b0:10:cf:f8:
         97:4a:91:f8:2b:1c:3d:9b:1c:8c:1d:b1:21:07:32:a9:d9:d0:
         01:81:a7:c5:5c:5a:bd:ff:b9:60:4b:74:2a:52:b3:fb:6d:8a:
         57:34:e2:c7:7c:55:3a:d7:24:67:bb:a2:a1:76:4d:e5:5a:09:
         82:c2:41:4f:7a:1b:c3:a3:8d:6d:ed:1a:31:8f:da:e8:4a:76:
         81:c6:e0:9b:bf:a1:2d:02:1b:e7:03:62:05:f5:02:89:6f:81:
         56:b1:9e:e0:76:37:f2:83:2b:f7:59:15:c3:0e:af:26:3b:74:
         af:93:ee:a1:c3:3e:d7:3f:a5:a1:3f:0f:01:38:cd:27:a9:2d:
         c0:61:e0:95:20:45:5c:7e:b5:3a:7f:3a:ed:a5:3b:6f:a5:1e:
         02:10:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org