Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS207556.roa
File:                     AS207556.roa (raw, json)
Hash identifier:          Iw08w9Q0ICjW08aSzks9EyvisOK/daJQssAByrj7L/o=
Subject key identifier:   50:13:28:7D:4F:3D:82:A9:8D:A8:FB:06:87:C4:2A:24:9F:06:96:B3
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       3F1E20A2CE0291049EF4A2AF02D1EF21704F35E9
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS207556.roa
Signing time:             Thu 23 Feb 2023 18:37:33 +0000
ROA not before:           Thu 23 Feb 2023 18:32:33 +0000
ROA not after:            Thu 22 Feb 2024 18:37:33 +0000
asID:                     207556
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:1753::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1e:20:a2:ce:02:91:04:9e:f4:a2:af:02:d1:ef:21:70:4f:35:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:33 2023 GMT
            Not After : Feb 22 18:37:33 2024 GMT
        Subject: CN=5013287D4F3D82A98DA8FB0687C42A249F0696B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:4d:80:35:a7:99:9a:07:74:14:16:11:47:
                    09:86:e7:52:3c:4c:d6:39:7e:ad:f7:a2:f5:1f:6d:
                    7d:3d:68:ac:ce:df:b2:77:68:35:60:98:c8:f6:ab:
                    32:7a:0c:5d:50:ad:4a:52:dc:e9:7b:f4:c2:83:f0:
                    59:9c:ec:78:1c:3e:53:ff:46:ca:15:84:34:ec:76:
                    13:f6:f3:98:7e:8a:47:a8:5f:de:b0:75:3d:56:9c:
                    c9:b2:ed:ae:50:dd:87:5c:ed:45:65:2a:67:ff:d3:
                    1f:3a:15:ee:f2:a9:2f:ea:2c:ab:af:89:5f:93:98:
                    bc:54:59:29:af:9e:ab:19:dd:e1:cd:b9:45:57:f3:
                    ad:c7:41:84:9b:d3:70:bf:bf:48:f6:60:17:c1:db:
                    56:69:a9:38:32:ca:ce:9e:ed:a9:1a:b1:c3:89:56:
                    8c:63:52:dc:98:53:02:d8:55:30:8d:0a:a0:a9:4a:
                    2b:d5:15:3d:bd:dc:9b:84:4f:24:a7:e9:3d:59:da:
                    6d:da:e7:c8:dc:53:a3:73:be:c3:66:00:ca:1b:ed:
                    83:f8:be:20:01:92:46:61:e3:7e:4e:2b:9a:b6:2c:
                    c6:ff:82:21:4c:f1:f9:63:60:1f:d7:65:07:ae:5e:
                    58:9c:e4:f3:7f:5e:df:c7:0a:9f:53:3c:7e:1d:88:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:28:7D:4F:3D:82:A9:8D:A8:FB:06:87:C4:2A:24:9F:06:96:B3
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS207556.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:1753::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:0a:2c:fb:27:b9:95:fc:b3:be:2d:b2:85:56:9e:b2:5d:01:
         3d:1f:25:0a:2a:ed:51:6a:ba:f3:d7:6b:f1:5e:fc:fd:c6:9e:
         34:6d:96:15:cb:5d:42:8d:d5:32:68:88:ad:a8:71:d2:3e:50:
         ea:04:c8:3f:c2:7c:6f:86:28:1b:35:cd:81:43:ba:b0:dc:eb:
         41:03:e2:74:f7:48:44:e1:40:b2:30:ce:01:7a:2d:bc:ca:71:
         d5:5c:df:8d:55:2b:5f:ff:73:d5:b0:1a:e4:a6:73:56:bf:e3:
         62:ea:77:f1:b0:07:a0:75:9f:98:44:64:91:13:4e:f9:3a:bb:
         97:09:1a:eb:e1:2a:d7:e4:37:61:0f:e0:4b:cf:ac:6d:7b:2d:
         ef:98:b8:3b:4b:64:ad:57:0b:63:13:6e:72:77:9f:0f:b8:26:
         7e:55:d9:79:a0:65:e6:66:38:c1:9e:70:ef:34:62:8b:bd:7c:
         25:45:83:0e:a9:7a:bc:e4:7a:f7:e9:57:f6:55:c4:39:f6:d1:
         0d:83:2f:f8:5d:f3:73:08:45:8b:5b:5c:90:ed:03:e8:3b:53:
         2e:cd:c6:24:7d:51:0b:48:c8:6d:f4:b2:15:cf:37:58:3b:e6:
         43:42:08:4c:50:b0:fd:ac:af:f0:ee:23:ab:5d:52:fe:9b:a6:
         99:db:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org