Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20343030353432.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20343030353432.roa (raw, json)
Hash identifier:          X+i6H8FiGrri9rZAe2NgWsYess8OYXpYXQhVBaLEgHU=
Subject key identifier:   80:89:49:B2:AC:7F:7A:01:1B:E7:BA:20:C1:2D:34:C3:22:59:57:3B
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       328FF8FD75F34E7CCB6BFAC0372F6933B398B550
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20343030353432.roa
Signing time:             Fri 09 Dec 2022 15:39:46 +0000
ROA not before:           Fri 09 Dec 2022 15:34:46 +0000
ROA not after:            Fri 08 Dec 2023 15:39:46 +0000
asID:                     400542
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8f:f8:fd:75:f3:4e:7c:cb:6b:fa:c0:37:2f:69:33:b3:98:b5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:46 2022 GMT
            Not After : Dec  8 15:39:46 2023 GMT
        Subject: CN=808949B2AC7F7A011BE7BA20C12D34C32259573B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:9b:1b:56:fd:8f:42:73:45:ea:f3:09:5c:
                    48:5d:2d:6c:47:fb:23:4a:eb:3f:13:1f:ce:d3:4b:
                    09:e9:83:63:b0:4a:f3:14:51:19:d4:cd:ec:92:eb:
                    b9:91:bf:14:e7:c6:6e:b2:c6:8a:f8:0c:d5:39:40:
                    3d:73:74:05:48:3a:27:2f:7f:d8:58:25:61:d0:67:
                    13:47:c7:be:6b:eb:7c:4a:88:6b:b0:ec:29:7c:2d:
                    eb:a6:d1:43:55:6c:99:a3:0f:12:73:e0:94:9a:e5:
                    77:ca:f5:91:ad:aa:c6:1f:62:32:0f:f2:b6:ae:ca:
                    1e:49:54:08:23:fc:7f:e7:8b:09:71:fc:9d:55:3a:
                    b4:23:31:6c:7e:8e:e2:73:90:e5:6e:27:77:40:81:
                    da:07:68:2b:74:a5:1b:d2:bc:e6:5b:90:f9:72:f6:
                    db:ea:da:af:13:f5:79:36:ae:c7:d5:6d:62:88:6b:
                    48:d3:4e:cb:3c:86:d9:b9:5c:59:27:3a:e4:bf:a3:
                    ae:92:b2:8a:00:b0:1a:63:46:95:4f:6a:bc:95:04:
                    6a:d8:b6:ec:9e:99:4f:2c:b1:b0:48:e8:a2:5a:05:
                    5d:5c:01:27:21:2a:16:55:16:e7:f4:1d:5d:1b:84:
                    79:89:07:31:19:ed:c9:a8:6d:9b:34:93:59:fe:9e:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:89:49:B2:AC:7F:7A:01:1B:E7:BA:20:C1:2D:34:C3:22:59:57:3B
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20343030353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:e1:04:68:3b:c7:d2:38:da:8d:2d:ce:dd:49:62:da:61:
         ee:62:73:fd:b1:41:97:d1:37:04:9d:ef:97:3c:1d:9c:1b:f7:
         ab:04:99:9a:d5:1c:45:21:88:b2:01:ac:61:2a:0c:60:12:98:
         46:03:56:ab:e0:83:9a:bd:22:e8:8a:3a:7e:3d:47:77:08:ca:
         9f:41:d0:24:1c:c1:d1:3c:97:90:47:b4:25:61:cc:33:76:c1:
         d9:fa:ee:09:fb:7e:b8:db:8d:75:8d:04:2b:18:b9:64:a0:ee:
         5b:f2:4b:fe:6d:e8:78:59:24:d5:cf:c4:6a:3f:53:9e:92:c8:
         8b:93:15:32:a8:9e:fe:05:3f:1c:d6:02:9a:c6:5c:a3:4b:80:
         ae:60:78:81:4c:2c:03:c3:8a:4c:98:ba:b2:08:7f:d8:16:55:
         e7:38:ec:c6:8b:4f:74:f7:0b:6c:3c:79:f7:46:76:c4:f5:0c:
         f4:bb:8b:6f:45:67:ff:19:4b:6d:a2:cc:aa:e4:b8:9e:d2:95:
         f3:7f:67:d0:25:57:6c:8f:4c:89:b6:9d:00:00:b1:ff:c4:ad:
         3e:69:aa:27:9c:93:5a:ca:8d:cf:54:0b:5b:d9:c2:80:e8:5a:
         4f:9d:8f:5f:62:b8:c5:fc:32:45:c7:0d:b1:34:dd:96:11:ae:
         34:6f:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org