Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33342e302f32342d3234203d3e20323133313232.roa
File:                     3138352e3134372e33342e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier:          6ToV1CXKONwM6NdrLXm+sYvEiijOjA+pnMjIkJYTTAI=
Subject key identifier:   C6:C0:08:41:41:BC:3D:23:CE:2F:5A:DD:F3:CC:8A:42:D5:24:8A:24
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       540E3649511F37766719C920987AC34D33D1B2B6
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33342e302f32342d3234203d3e20323133313232.roa
Signing time:             Fri 09 Dec 2022 05:13:08 +0000
ROA not before:           Fri 09 Dec 2022 05:08:08 +0000
ROA not after:            Fri 08 Dec 2023 05:13:08 +0000
asID:                     213122
IP address blocks:        185.147.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:36:49:51:1f:37:76:67:19:c9:20:98:7a:c3:4d:33:d1:b2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 05:08:08 2022 GMT
            Not After : Dec  8 05:13:08 2023 GMT
        Subject: CN=C6C0084141BC3D23CE2F5ADDF3CC8A42D5248A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:a9:2a:a3:4e:64:95:c4:ec:2f:64:48:c8:
                    d4:6b:15:96:02:bb:e4:d7:97:9c:c6:cb:5f:bf:c9:
                    6f:cc:cf:bf:9f:bd:56:98:33:7a:cb:d4:6f:d8:0f:
                    98:8a:07:0e:d8:42:d2:a9:03:2f:94:5b:87:81:29:
                    71:30:fc:93:d0:ff:b8:40:73:db:25:6d:48:af:15:
                    45:7d:aa:47:0d:fe:15:6c:27:9c:82:6c:5f:ef:ec:
                    14:a5:46:59:4e:0a:ca:d7:53:d4:3c:76:dd:7f:31:
                    73:b0:61:24:37:fb:fc:55:68:56:66:f7:38:f6:d5:
                    15:c0:d6:d9:80:1e:4a:fc:8e:83:9e:b1:b0:53:16:
                    94:bd:90:c5:f0:08:2b:a5:58:78:5c:0b:bd:d6:ef:
                    db:96:36:86:ed:6b:46:cd:8b:2c:ac:aa:8d:2a:e3:
                    e6:00:03:ef:53:28:29:5a:ef:f1:ed:ea:89:6c:08:
                    7b:c7:ea:ed:d1:13:47:ff:75:25:0e:a5:d1:c0:bf:
                    d6:65:e5:6b:71:2c:0c:a3:d9:5e:92:03:c1:43:99:
                    ef:78:1d:3f:67:c0:b0:3f:9c:3a:68:75:27:ec:8b:
                    63:9a:73:9b:d7:02:56:d0:58:59:a4:8f:46:92:82:
                    88:fa:02:d3:77:5b:17:23:66:93:c0:a1:c9:c7:c1:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:08:41:41:BC:3D:23:CE:2F:5A:DD:F3:CC:8A:42:D5:24:8A:24
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/3138352e3134372e33342e302f32342d3234203d3e20323133313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:f7:a6:68:f6:87:88:57:8f:79:3a:bb:aa:71:91:b2:c7:11:
         3d:4b:6b:44:2f:9c:ff:2d:e3:6a:1d:ec:c3:70:e5:d8:bf:db:
         0c:59:d5:9c:1c:a0:58:97:d8:ea:07:6b:6e:30:2c:51:3b:cb:
         43:fd:b2:1b:4b:0d:0c:35:3c:2a:ea:ce:33:b3:09:00:34:20:
         48:dd:93:e5:74:87:a3:3e:24:8e:dc:a3:2b:15:bf:06:33:d7:
         8c:13:9b:b9:aa:a1:b1:d4:ec:d5:75:3d:cf:ee:c0:93:7e:3c:
         7a:4a:1e:34:ba:4e:a9:2d:26:55:ab:d5:ce:c5:47:85:5e:c3:
         ac:79:f6:2d:a8:0f:df:eb:f1:b4:78:3a:ef:00:61:ac:aa:51:
         31:c2:d6:9c:91:03:69:49:60:e6:33:6d:2a:e7:fd:ed:c9:40:
         6b:8f:13:13:61:e4:16:ea:c2:32:5b:6a:97:65:53:dd:85:17:
         a9:f9:b3:e7:53:5c:9f:1c:2d:48:0c:77:21:34:b7:cb:cd:70:
         c5:93:2a:36:fb:c7:58:81:99:b4:18:a8:75:ed:f5:d5:16:4f:
         e9:2c:46:96:aa:f3:f4:2e:58:0b:0a:8c:41:66:53:a9:d7:5a:
         07:6d:6d:b8:c5:fb:bd:ea:2c:2b:87:f1:a3:7d:96:2d:ba:bf:
         11:c6:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:36 2025 by rpki-client