Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20393236.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20393236.roa (raw, json)
Hash identifier:          EiaY1LrO+J+VTBPawvqyvBKPhoErBczQ5MR/vZp64Nk=
Subject key identifier:   2D:3E:91:71:CF:D1:D3:2B:DA:09:86:9C:DF:8E:EB:A4:18:A7:40:4E
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       37AE9A1C34C811DB4EC92D3EBFF5593D6187ACB7
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20393236.roa
Signing time:             Fri 09 Dec 2022 15:39:29 +0000
ROA not before:           Fri 09 Dec 2022 15:34:29 +0000
ROA not after:            Fri 08 Dec 2023 15:39:29 +0000
asID:                     926
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ae:9a:1c:34:c8:11:db:4e:c9:2d:3e:bf:f5:59:3d:61:87:ac:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:29 2022 GMT
            Not After : Dec  8 15:39:29 2023 GMT
        Subject: CN=2D3E9171CFD1D32BDA09869CDF8EEBA418A7404E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:a9:f2:e2:d0:a1:08:88:50:4a:e5:ca:da:
                    33:3b:49:1f:8e:50:4c:f8:0b:18:aa:fa:f9:98:02:
                    c4:34:a7:35:41:d4:f7:32:df:0a:d7:a3:5e:a2:01:
                    82:ac:84:9e:6d:67:1b:83:19:bf:ce:7a:4a:45:c6:
                    60:6c:b8:f2:1c:c6:bb:c3:91:19:24:06:b1:56:cb:
                    49:96:8b:27:31:74:39:12:b4:cf:d1:fd:74:ff:bc:
                    1b:76:11:8b:55:dc:e9:3f:04:6b:1e:8f:ff:43:a4:
                    f0:40:e5:99:c5:49:6e:f7:fc:6d:e5:53:f2:4f:5d:
                    a7:4b:d2:61:8c:4d:17:4f:3c:41:ed:ee:53:11:ec:
                    f0:34:f9:1c:71:62:0d:a3:18:e6:29:d9:63:60:61:
                    71:82:16:65:2f:22:98:ab:1e:5b:93:ec:9f:bc:37:
                    94:22:b5:2d:9c:b3:e7:6c:91:e0:8a:95:08:c1:e5:
                    0e:d1:f1:a0:d8:6a:83:a3:b9:6e:13:1a:cf:b7:e6:
                    aa:d8:92:98:7b:da:a5:12:96:20:95:9a:9a:68:2f:
                    5a:3a:42:a4:bc:9b:07:76:1e:19:c0:e2:60:e8:66:
                    92:df:5b:98:40:1e:5c:be:80:3e:59:e1:9f:65:cf:
                    26:d3:da:32:44:c4:a1:a2:ce:97:ca:36:fe:35:c0:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3E:91:71:CF:D1:D3:2B:DA:09:86:9C:DF:8E:EB:A4:18:A7:40:4E
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ee:2b:bb:46:9e:c7:69:af:09:d9:1a:98:99:fd:bd:c1:b3:
         dc:4f:e1:ad:a4:90:cc:02:67:9f:31:86:20:9b:61:54:24:bd:
         19:5b:b5:48:77:6c:a8:78:17:66:30:84:01:f5:e8:ca:81:1c:
         fd:15:77:66:22:2c:df:5e:41:c2:93:20:35:80:95:29:b3:3b:
         40:26:5c:2d:03:d4:84:e1:b9:48:ae:a0:94:81:d6:69:c8:12:
         4a:31:51:6b:02:d8:15:ce:c6:a1:f5:40:67:8c:8c:6f:93:5e:
         58:4e:f1:bd:44:67:da:a4:3c:46:6a:aa:07:98:3c:c2:8f:b2:
         38:45:5c:de:bd:cb:49:10:f4:b7:97:37:8c:20:34:e2:50:29:
         05:e8:fc:64:b3:8a:8d:a9:3a:75:70:4f:17:72:ae:57:47:71:
         04:d2:70:c1:0f:87:4d:cc:a0:08:91:0d:51:bc:e9:21:d7:cb:
         b5:1f:ed:79:65:dd:d7:dc:af:fa:8b:c5:73:b1:18:2c:e4:af:
         4d:58:ea:22:cf:50:01:64:7b:fd:93:80:90:49:77:ec:47:e8:
         f3:c0:f7:46:88:14:7f:6d:d3:24:06:e6:69:94:1c:2b:d9:7d:
         fa:ba:e8:52:95:e7:28:05:32:f9:a4:ce:f0:fc:1a:69:5c:f4:
         21:22:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org