Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137382e302f32342d3234203d3e20313338393935.roa
File:                     3138352e3132312e3137382e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          BEAc5qSHEY6eVx1OEzQHyV8cgH83H10L3pDdyc6WcBg=
Subject key identifier:   0F:AD:E7:01:3A:BC:69:A3:49:BC:42:F2:1B:AA:BC:AF:F6:75:F2:D7
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       49FA914293FC1E806CCED8860B47897898C92D95
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137382e302f32342d3234203d3e20313338393935.roa
Signing time:             Fri 09 Dec 2022 05:12:12 +0000
ROA not before:           Fri 09 Dec 2022 05:07:12 +0000
ROA not after:            Fri 08 Dec 2023 05:12:12 +0000
asID:                     138995
IP address blocks:        185.121.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fa:91:42:93:fc:1e:80:6c:ce:d8:86:0b:47:89:78:98:c9:2d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 05:07:12 2022 GMT
            Not After : Dec  8 05:12:12 2023 GMT
        Subject: CN=0FADE7013ABC69A349BC42F21BAABCAFF675F2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:e5:35:4d:77:b6:aa:39:0a:7b:dd:37:ab:
                    9c:ca:73:ab:e8:33:94:bc:93:ab:7d:7a:af:03:21:
                    68:63:03:12:57:35:6e:24:17:74:22:2a:e2:12:e1:
                    91:b0:a5:f2:01:78:04:52:4e:43:1e:cf:ae:1b:19:
                    28:6c:38:4f:dd:7e:68:83:fb:31:7f:b1:08:6c:70:
                    56:d5:91:b2:36:b3:46:94:6b:9b:6d:34:c8:d9:4f:
                    87:82:be:66:ca:1b:25:f8:11:e2:5c:76:17:0a:75:
                    51:4c:e0:05:eb:9f:25:79:93:6c:bd:e4:4a:fc:42:
                    26:3b:54:80:25:b6:92:74:4b:8a:04:37:90:b0:d8:
                    d9:df:3c:4c:e8:16:88:d3:99:13:01:c3:8c:e9:6d:
                    32:89:4f:57:c0:b7:da:ff:e6:fd:a9:3b:ed:7c:a9:
                    4c:69:35:ba:f8:5f:4a:e0:ee:44:3e:83:8f:7a:83:
                    8a:87:f5:45:3c:1d:a2:ee:4a:96:38:75:35:da:53:
                    e1:ac:9c:03:fc:f6:d8:3c:84:6e:12:2a:d5:68:97:
                    4b:b7:6e:05:2c:3a:f2:18:54:57:01:72:52:e8:d6:
                    58:1a:41:fc:42:25:40:ad:dd:57:aa:e7:b9:26:3e:
                    f3:4d:e3:34:a0:4c:3c:cc:30:5b:8a:15:56:82:7b:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AD:E7:01:3A:BC:69:A3:49:BC:42:F2:1B:AA:BC:AF:F6:75:F2:D7
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3132312e3137382e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ee:f0:1f:b0:70:f7:f8:9e:61:ad:b6:57:2a:e8:fd:05:a9:
         cd:26:38:db:8f:2e:77:93:3d:cc:dd:25:34:48:3b:8a:7d:db:
         20:b7:b3:eb:dc:15:0f:e1:ad:dd:b3:0f:2f:ba:06:67:52:35:
         4f:12:ed:91:11:4c:83:79:50:0c:28:c7:53:05:29:b8:86:7e:
         52:bc:91:c5:c4:a0:d7:b9:23:8d:2b:c9:a8:69:c5:53:d2:bf:
         72:0f:b0:1d:6f:ca:cf:9e:cd:32:8e:a4:b9:fa:85:7a:08:59:
         24:2c:09:97:3d:d6:8b:4b:e8:cb:b9:90:a8:2e:96:94:8d:62:
         50:bf:4c:0b:88:9d:88:d1:d8:f3:bc:d6:7f:1e:9e:a9:8b:d8:
         b5:c1:44:17:89:5e:75:dd:43:b3:0f:2d:28:1d:45:52:97:3c:
         2f:1c:42:47:19:96:95:ea:d3:e5:99:06:2b:11:8b:8f:e7:89:
         f2:d8:9d:64:e2:66:7d:8d:23:e2:c6:ec:51:29:f6:50:52:8d:
         40:60:ce:71:23:02:68:1a:e9:1b:69:2d:38:6d:ce:0c:ec:7c:
         c3:d0:21:0e:23:54:59:56:31:60:73:19:63:ac:32:c2:a0:3e:
         dd:89:49:48:8b:97:9b:ba:5c:79:e9:e6:e7:39:65:93:e0:25:
         8c:fc:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:15 2025 by rpki-client