Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS207341.roa
File:                     AS207341.roa (raw, json)
Hash identifier:          xlusKzo69KKaJsRoVtArVc/Z7Q7yIKymlzF5D9Cy7CQ=
Subject key identifier:   9E:CC:F3:B3:2F:23:7A:01:C5:4E:1B:74:CC:79:50:FD:0A:E8:E8:74
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       79F3728A9045DFC1BC265F6EE12A382AC1824E31
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS207341.roa
Signing time:             Thu 23 Feb 2023 18:37:13 +0000
ROA not before:           Thu 23 Feb 2023 18:32:13 +0000
ROA not after:            Thu 22 Feb 2024 18:37:13 +0000
asID:                     207341
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f3:72:8a:90:45:df:c1:bc:26:5f:6e:e1:2a:38:2a:c1:82:4e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:13 2023 GMT
            Not After : Feb 22 18:37:13 2024 GMT
        Subject: CN=9ECCF3B32F237A01C54E1B74CC7950FD0AE8E874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:89:10:8e:ea:43:4f:3b:55:c9:bf:e1:49:
                    56:c1:8a:13:4d:22:dc:e1:ce:a8:3d:95:32:47:7f:
                    7a:27:19:95:08:bf:34:66:a2:ab:30:d8:64:ab:0d:
                    4e:4c:af:18:75:38:be:0c:1d:0a:96:42:f3:eb:43:
                    d3:0e:04:ac:b5:01:9c:59:6c:e4:0a:f1:07:5a:c0:
                    24:77:32:03:99:70:88:b3:2c:f0:8b:9b:1a:9b:db:
                    80:20:0c:7d:d3:75:41:58:6a:b5:72:bf:a9:3c:da:
                    bd:8a:54:ac:e0:b9:69:c1:fe:e7:00:5a:a8:15:6d:
                    9b:f0:59:14:75:c6:03:68:ff:1d:bd:bf:f5:ec:70:
                    3e:aa:c2:9d:48:ea:03:33:7a:d0:5d:f2:5f:7f:62:
                    79:3c:52:11:ad:fa:37:d2:5a:62:8e:9c:e3:66:e1:
                    2e:19:5b:3a:bd:1d:d8:75:65:06:8f:dd:e3:15:28:
                    f0:bb:42:7c:fe:e4:b6:b8:6e:88:1d:19:cc:97:ed:
                    43:15:30:33:f9:8d:b5:ba:9e:68:ad:cf:6f:ad:78:
                    a2:ff:cc:7c:86:68:48:58:1a:a6:aa:80:1b:71:da:
                    9a:f4:ec:c1:05:b0:0c:7a:22:58:b4:72:16:f8:e2:
                    43:24:a6:e9:dc:fe:ac:33:7c:09:29:6c:49:7c:7e:
                    18:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CC:F3:B3:2F:23:7A:01:C5:4E:1B:74:CC:79:50:FD:0A:E8:E8:74
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS207341.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         e6:bb:27:ba:b6:0c:0c:c8:93:94:23:e8:bb:4b:8a:be:52:d1:
         60:02:0d:4c:fe:85:21:8c:50:01:37:c1:27:bf:be:37:41:1f:
         7e:08:85:4b:c5:8a:27:5f:53:63:31:05:df:03:a5:65:ab:54:
         e0:77:a0:76:f6:c0:34:54:15:7a:ca:7d:ef:89:86:45:8c:b9:
         b6:48:a6:2d:c7:9b:64:39:25:db:ee:56:f5:50:ab:14:4d:4f:
         2d:f7:bf:4a:7a:cf:27:0b:8c:83:78:7f:07:58:e5:12:85:ef:
         d7:b1:0b:be:a0:ec:9c:86:64:a6:28:e8:62:b4:fb:56:0d:bc:
         7d:2b:d1:b3:31:7a:bb:8a:49:9b:ef:0c:10:57:64:17:42:6f:
         cf:a7:88:15:b2:38:7f:4d:cf:5a:55:96:5d:ee:aa:66:6b:00:
         06:3e:35:24:a0:86:90:1c:30:5f:86:af:30:b2:74:3e:1c:fa:
         79:82:d3:20:e8:36:63:86:20:12:b8:6c:9b:a7:dd:8e:ca:dc:
         56:0e:cf:eb:34:af:20:32:d4:c8:77:38:bd:ed:24:8d:4f:89:
         cd:cb:ed:1b:b1:f3:fc:b8:c8:06:ab:db:8c:10:0d:f9:32:c7:
         b9:3a:24:4b:e2:b5:af:a6:ae:0b:59:ae:a6:af:12:36:2d:22:
         b4:fe:09:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org