Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS60379.roa
File:                     AS60379.roa (raw, json)
Hash identifier:          V+kFor7eGyZtPqTnr0h+Ccc+zyeTnjqUtnY/YAvGnBQ=
Subject key identifier:   AA:47:B3:B5:BB:E0:92:AD:41:73:8D:C7:52:C9:78:1B:28:2B:C3:65
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2F21EC9C2238FC8E22BB0332FFA8337856D5CD9E
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS60379.roa
Signing time:             Thu 23 Feb 2023 18:37:35 +0000
ROA not before:           Thu 23 Feb 2023 18:32:35 +0000
ROA not after:            Thu 22 Feb 2024 18:37:35 +0000
asID:                     60379
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:21:ec:9c:22:38:fc:8e:22:bb:03:32:ff:a8:33:78:56:d5:cd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:35 2023 GMT
            Not After : Feb 22 18:37:35 2024 GMT
        Subject: CN=AA47B3B5BBE092AD41738DC752C9781B282BC365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:21:f1:ee:cb:53:49:4e:15:01:08:bd:30:
                    1f:02:e3:6b:be:a2:70:06:92:93:05:bd:a4:10:f9:
                    47:53:6a:39:7e:55:3f:a4:b5:8b:ae:f1:3a:2d:c6:
                    7e:e0:58:9a:55:4e:8c:97:18:2d:d2:20:16:39:32:
                    cb:5a:da:23:8e:1b:d6:64:44:19:bb:cd:81:1a:34:
                    a5:8d:e5:a4:78:5a:1e:51:b5:a6:78:6a:c0:4c:ed:
                    d3:f8:8e:34:c6:9b:ee:72:d8:2a:35:6f:8b:06:61:
                    29:eb:84:2c:c4:2a:fc:9a:7d:1d:74:3b:06:56:e1:
                    6c:9f:d8:89:47:1c:91:99:3b:a8:e7:16:7f:8b:0c:
                    65:5b:f0:6b:d8:4d:3d:4b:02:5d:c8:7e:5c:d5:cc:
                    41:9c:61:43:3b:9d:5e:05:27:e5:17:99:8d:cd:2c:
                    18:ee:5b:aa:f9:cc:10:be:9a:b8:dc:99:e7:c8:f5:
                    c4:78:75:ba:45:6d:e0:b7:39:6b:59:13:57:59:aa:
                    e6:f8:1b:83:72:bc:7c:cd:46:ca:9d:2b:c1:fb:48:
                    aa:90:3a:74:08:6e:b6:06:a6:eb:71:89:db:45:5d:
                    9a:b2:72:59:f1:68:1b:df:b9:92:20:73:24:50:c8:
                    51:16:4f:ad:66:dd:ee:dd:9d:32:83:bf:c9:ea:67:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:47:B3:B5:BB:E0:92:AD:41:73:8D:C7:52:C9:78:1B:28:2B:C3:65
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS60379.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:26:77:65:79:9d:be:c2:79:74:c1:31:15:43:4d:75:7a:
         3f:28:44:7e:a0:76:95:37:e9:b3:e0:5e:63:7c:ce:6c:b4:0c:
         09:9d:ff:ce:7e:70:07:b8:5c:20:f3:6e:9e:a2:f4:33:54:77:
         f0:b2:61:9f:de:08:0e:ec:1a:da:c4:92:18:fc:45:58:2c:f9:
         95:65:25:2b:67:5a:2c:1f:2d:62:53:2b:f4:01:c9:14:a5:f0:
         be:35:d8:d2:76:28:2a:30:51:9e:1a:3e:be:bf:c2:62:f5:d9:
         ab:f5:09:e7:74:ac:27:8f:ae:85:43:ff:bc:a2:74:11:ce:7e:
         7d:e9:bd:44:52:f0:2b:04:3c:7a:d5:fe:12:48:1c:5c:6f:44:
         91:23:d3:31:d0:7a:9e:34:ff:90:f7:38:90:2a:c5:65:67:db:
         92:fa:31:04:34:77:22:0c:36:a2:cc:20:9c:de:61:e7:98:fd:
         50:e7:01:e0:b7:52:f9:44:ee:70:2d:96:ce:7f:ae:e7:2c:10:
         23:7d:7d:0c:3e:4b:4b:61:e6:09:14:1f:5a:3b:8b:7e:38:15:
         ca:15:f0:31:c0:b4:dc:6f:fa:22:ba:a8:7a:7f:64:dc:b5:ff:
         7f:3c:6e:d5:72:47:7f:69:47:6a:83:f6:92:5a:e0:f2:5a:bc:
         18:15:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org