Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204005.roa
File:                     AS204005.roa (raw, json)
Hash identifier:          3Gt+T4ODIcfiJA3o4cRdfGyjJBlIFswZ98R2rj8xZtI=
Subject key identifier:   03:0F:F6:ED:6A:58:09:E2:5C:B5:F0:2D:B0:5E:53:B3:36:F6:0C:45
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       050E572347D92CCDBB23466F5795ED01CAF810DE
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204005.roa
Signing time:             Thu 23 Feb 2023 18:37:20 +0000
ROA not before:           Thu 23 Feb 2023 18:32:20 +0000
ROA not after:            Thu 22 Feb 2024 18:37:20 +0000
asID:                     204005
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0e:57:23:47:d9:2c:cd:bb:23:46:6f:57:95:ed:01:ca:f8:10:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:20 2023 GMT
            Not After : Feb 22 18:37:20 2024 GMT
        Subject: CN=030FF6ED6A5809E25CB5F02DB05E53B336F60C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:57:0d:f8:ed:59:a8:c7:95:b2:36:5f:e0:
                    26:6c:79:29:39:9d:8c:c2:66:6a:be:6f:b5:1a:e6:
                    a3:5c:1e:20:2f:05:f1:5f:9e:4b:cd:4f:3f:fb:03:
                    db:91:55:3f:d0:55:99:fe:27:26:0b:4f:3c:7b:8b:
                    7a:f1:81:41:48:69:e4:8b:45:12:2a:6a:ca:ae:c0:
                    8f:87:de:82:d4:c8:6d:72:17:51:0a:37:21:57:e2:
                    c7:38:37:d8:44:d8:b7:2b:5c:cc:b6:5c:9d:cb:d3:
                    62:fe:a7:5b:e1:4c:23:b4:eb:ad:e1:7f:ae:f7:1f:
                    2d:de:08:11:34:0f:36:17:09:85:43:52:78:89:cf:
                    bd:2e:a3:c9:cf:04:0a:c4:42:74:b5:b6:48:34:12:
                    b8:50:90:04:9c:3c:e5:95:30:66:ca:03:4b:4f:dd:
                    7f:d1:05:ab:59:49:31:7f:ce:86:00:83:c6:2b:39:
                    90:83:5e:66:d4:ad:9b:69:77:0f:de:85:86:8c:72:
                    38:ea:cf:82:ea:47:c3:83:00:f2:99:fd:22:b2:60:
                    c5:22:e4:64:9a:e7:8e:64:f9:e3:18:35:d5:4e:e3:
                    cd:8a:07:06:0c:5e:2c:40:fd:1b:6b:52:7e:9f:79:
                    a4:5b:a8:67:31:d4:1e:57:06:88:5a:d9:f1:f6:ec:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0F:F6:ED:6A:58:09:E2:5C:B5:F0:2D:B0:5E:53:B3:36:F6:0C:45
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:d5:7a:5b:0b:a9:d7:3c:38:24:dc:86:40:33:cd:a2:63:24:
         c3:ba:fd:54:bf:2c:90:45:7f:56:a5:f9:d7:a9:a7:cd:94:b6:
         1f:5d:aa:91:30:44:8b:66:1e:53:d9:be:c1:11:28:24:6f:c9:
         e3:b6:fb:d2:46:8a:11:a2:44:2d:0d:d6:14:c8:2b:6c:8d:1f:
         d1:b1:27:35:72:82:d8:92:6b:0c:7c:e3:bf:f1:c1:76:0d:bd:
         a6:b6:71:7f:5c:8e:5c:38:9c:73:8a:f4:83:12:ac:33:12:f6:
         05:3b:89:8d:cf:5e:bf:d4:60:b5:f4:2e:01:43:44:4f:f7:75:
         08:cf:6d:24:0f:4c:a4:ca:94:72:6e:c4:98:8b:d2:f4:a1:14:
         c3:91:ec:7a:a4:55:70:9e:da:e0:50:2c:6c:88:e9:4e:35:62:
         8b:ac:e7:67:f2:61:ae:25:89:b9:f8:3a:2d:47:bb:67:df:98:
         0b:4c:c3:a1:28:ae:2e:61:0f:f6:27:56:26:c3:99:0b:09:7d:
         8f:ac:9c:86:12:ac:7f:da:b7:33:73:b9:16:12:98:7f:cf:c7:
         dd:04:32:3a:89:b6:8e:67:86:37:39:6e:d4:b6:1b:8c:9b:bf:
         83:55:20:d9:fd:a1:ab:06:9c:83:80:68:5f:8e:06:9a:ae:26:
         66:c8:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org