Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e203233343238.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e203233343238.roa (raw, json)
Hash identifier:          CFh7ahox6SnHaXY+pUlPIj6Ib7pKUTHYNhCCT8yRK44=
Subject key identifier:   7B:B4:72:A5:A1:74:65:AF:CD:6B:5F:DE:BD:F4:73:76:B8:CD:42:D9
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       224A48D7C4AA0CDB6A995B1ECC96501CAD10544F
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e203233343238.roa
Signing time:             Fri 09 Dec 2022 15:39:47 +0000
ROA not before:           Fri 09 Dec 2022 15:34:47 +0000
ROA not after:            Fri 08 Dec 2023 15:39:47 +0000
asID:                     23428
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4a:48:d7:c4:aa:0c:db:6a:99:5b:1e:cc:96:50:1c:ad:10:54:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:47 2022 GMT
            Not After : Dec  8 15:39:47 2023 GMT
        Subject: CN=7BB472A5A17465AFCD6B5FDEBDF47376B8CD42D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:f6:d4:8a:29:2b:4f:ca:a0:e0:23:0d:96:
                    22:e4:ed:db:06:4e:a1:5d:71:24:9f:80:0e:bd:77:
                    35:79:64:cf:1a:1e:0c:74:91:7c:38:ab:04:9f:bd:
                    2f:f9:e1:67:a4:08:0f:3a:98:d5:c9:92:00:41:a9:
                    83:7e:43:f6:f9:37:5a:6c:c7:0e:8d:9e:40:34:fc:
                    a8:fb:41:6d:23:11:23:49:a9:b3:b4:f2:28:fc:fc:
                    fc:a1:28:98:90:5c:aa:15:64:e0:10:53:e7:e3:e7:
                    7c:45:52:0c:67:b9:19:66:40:63:fb:99:11:c8:dd:
                    b3:5d:03:32:2f:84:1a:a7:11:c0:7a:69:5e:8c:13:
                    d4:ef:ba:b0:60:1e:aa:b6:f1:e1:fc:23:23:14:8a:
                    a0:b3:c9:a3:39:56:41:f5:4f:38:75:e3:0d:fb:26:
                    2b:7c:08:58:03:d7:42:6d:c8:34:f9:6d:09:a3:54:
                    d1:e9:7c:77:ac:60:a3:6d:aa:1e:44:99:cf:fe:a7:
                    c4:01:2d:33:60:cc:61:99:89:2c:bb:c7:bf:34:89:
                    a9:54:c9:83:ac:17:35:b8:34:cd:72:d3:b2:dd:fb:
                    dc:c0:c5:6a:b3:97:c7:d9:81:e4:6b:ec:e9:61:d1:
                    4d:bd:53:67:3b:f1:91:af:e0:e7:70:b0:6e:c1:af:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B4:72:A5:A1:74:65:AF:CD:6B:5F:DE:BD:F4:73:76:B8:CD:42:D9
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e203233343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:c5:b5:5a:e3:1d:cc:48:3d:23:42:53:06:64:8b:23:b1:b1:
         b5:2c:06:33:9b:79:01:e4:62:fc:ba:72:07:62:0f:a6:bf:9d:
         37:60:6d:4f:db:68:58:7b:bf:6b:b0:c9:8d:31:d1:6b:d5:1e:
         b3:31:01:06:96:e4:ee:c9:07:d7:fd:32:19:84:36:c1:79:49:
         de:6c:f1:b1:e3:6a:22:ad:8f:b7:b6:86:02:44:a6:94:55:2a:
         17:d3:98:bc:14:31:f1:40:27:36:56:f6:96:90:f2:ff:91:34:
         12:9d:be:39:78:3a:4a:89:56:74:03:d3:3c:6a:b0:e4:98:f4:
         02:29:2c:5b:ba:1e:f4:52:98:e3:2a:50:37:70:57:af:4a:ab:
         d4:6e:76:95:54:68:a0:c6:f0:17:23:16:4b:fc:e2:ae:96:6b:
         a2:19:b2:fd:18:7d:78:58:7b:a5:92:16:84:4f:41:59:33:4f:
         5d:5a:74:3a:ec:4c:38:b3:a1:e6:8b:aa:a1:f0:6c:43:c1:ae:
         06:eb:ea:e8:04:af:5a:31:47:89:a3:9b:48:cc:79:ba:0f:7c:
         70:ec:75:72:a3:2b:08:1b:2a:c6:17:f8:24:ad:01:14:9f:8c:
         37:a1:5f:ea:e1:e7:41:a8:1c:a2:20:d2:5c:82:39:1f:40:10:
         44:09:61:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org