Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20393234.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20393234.roa (raw, json)
Hash identifier:          Oh0VLQZ+lSP4wEAAlRSm74Qw3NnFD/U5313X2pAPTa0=
Subject key identifier:   4E:7C:6C:F3:64:A0:4D:7F:66:3D:53:E1:13:0D:14:84:05:3D:92:74
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       4A36967811C90228B0067EEB090EE757E3C64763
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20393234.roa
Signing time:             Fri 09 Dec 2022 15:39:50 +0000
ROA not before:           Fri 09 Dec 2022 15:34:50 +0000
ROA not after:            Fri 08 Dec 2023 15:39:50 +0000
asID:                     924
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:36:96:78:11:c9:02:28:b0:06:7e:eb:09:0e:e7:57:e3:c6:47:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:50 2022 GMT
            Not After : Dec  8 15:39:50 2023 GMT
        Subject: CN=4E7C6CF364A04D7F663D53E1130D1484053D9274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:68:01:80:17:8e:91:43:c0:17:f0:41:1d:
                    0c:d8:6e:8c:8f:e8:25:e6:33:54:5b:fa:e6:31:b0:
                    c1:6b:ca:dc:7a:2e:0e:1b:f9:8c:45:f3:31:c9:35:
                    ea:68:b6:d5:9a:a3:11:34:c7:5b:8d:88:b6:c2:59:
                    d2:f4:c4:36:e7:ed:e3:0e:c7:34:81:c1:21:77:8a:
                    83:f7:e3:24:b9:ba:22:1f:39:6e:55:84:a7:97:c6:
                    37:58:ee:b1:5c:6e:7a:e7:19:23:8d:51:05:1f:79:
                    c8:92:c9:90:ca:41:6f:89:83:32:c9:65:dd:2f:d2:
                    5b:d6:17:2c:37:11:0f:48:d3:93:a3:bc:71:90:3b:
                    2d:0f:29:e5:3d:d3:33:04:89:52:19:21:e8:d6:7a:
                    77:58:ad:bb:2a:92:db:87:b2:7a:4a:d5:05:b4:d6:
                    8a:97:33:4c:ff:48:6e:dc:0f:89:ef:6a:1c:88:fb:
                    2d:7f:3a:d0:a7:9e:a1:a5:ad:ff:0f:6a:a4:80:2f:
                    f5:7a:2a:d4:0d:d4:2c:74:1c:16:4b:bf:13:f9:6e:
                    b7:d9:f6:a0:bf:dd:e4:ac:3c:9c:20:87:5a:45:eb:
                    4e:33:b1:c7:77:ca:f5:56:fd:9f:8e:b9:32:01:83:
                    7d:65:f4:53:73:4a:61:38:9f:54:33:ff:93:2b:e1:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7C:6C:F3:64:A0:4D:7F:66:3D:53:E1:13:0D:14:84:05:3D:92:74
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:23:57:8a:6a:db:95:ab:33:3f:8b:07:30:f3:25:de:c2:29:
         5e:0c:6b:eb:91:3b:cb:ae:29:d2:82:ab:f3:7e:8d:e8:08:00:
         2a:6b:d1:6a:f7:e0:c7:d2:ad:84:6b:b9:3b:2a:77:8f:ae:08:
         1a:a9:14:10:42:27:82:26:f1:b6:87:b7:1a:e1:74:3c:f1:df:
         2d:b4:87:ad:0a:ec:52:ec:a3:0a:fd:91:59:2e:b4:86:e9:60:
         a8:f3:32:ac:1e:76:43:64:a7:ca:8b:dc:2a:f3:d9:d4:c2:99:
         e2:b0:63:13:a8:1f:eb:87:b9:48:7c:55:12:fb:78:e1:8c:6e:
         66:a6:b9:0c:11:5f:18:ee:36:b8:6a:8d:55:05:d2:ef:d1:03:
         40:b6:a3:eb:9d:88:99:c3:d3:5d:89:b9:46:02:6d:7a:30:2b:
         13:bb:71:4e:06:62:f6:e6:74:f1:f7:2c:b9:aa:be:92:a5:15:
         72:06:ef:3d:9d:00:80:2b:93:3c:7d:31:80:64:02:6a:63:14:
         a0:12:c4:ee:b3:7e:d1:0b:1a:3f:5d:78:f8:a0:4a:a0:a7:28:
         00:5f:18:ed:85:1d:69:cd:37:9e:00:62:34:73:09:3d:be:ec:
         d7:2a:1d:72:5b:b9:8c:10:21:1a:d7:37:d0:32:75:04:c3:06:
         c1:2c:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org