Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a3a2f33322d3438203d3e203631313338.roa
File:                     326130363a313238303a3a2f33322d3438203d3e203631313338.roa (raw, json)
Hash identifier:          EYpbbXvGz++LmoIQWUVpvUR4ESYox115fFfW71yHTSg=
Subject key identifier:   A6:64:0C:4A:1A:92:37:0C:F5:95:72:B3:26:BB:10:05:CD:19:04:ED
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       3507616B689E84829E9781E6F7DC86FE95530835
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a3a2f33322d3438203d3e203631313338.roa
Signing time:             Fri 09 Dec 2022 04:55:24 +0000
ROA not before:           Fri 09 Dec 2022 04:50:24 +0000
ROA not after:            Fri 08 Dec 2023 04:55:24 +0000
asID:                     61138
IP address blocks:        2a06:1280::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:07:61:6b:68:9e:84:82:9e:97:81:e6:f7:dc:86:fe:95:53:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 04:50:24 2022 GMT
            Not After : Dec  8 04:55:24 2023 GMT
        Subject: CN=A6640C4A1A92370CF59572B326BB1005CD1904ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:df:69:5f:64:6c:f3:fd:bc:99:0c:aa:28:
                    b1:e2:80:b4:ba:56:24:49:54:a1:a9:85:a8:7a:20:
                    38:7c:99:ec:c4:12:40:e2:dc:7b:49:e5:75:f5:a8:
                    a8:b3:53:cf:ac:f9:82:13:50:8c:8f:9b:fe:82:37:
                    13:51:c6:b6:4c:9c:fa:79:6c:59:1f:9c:24:76:d5:
                    f8:93:69:5b:e4:12:c4:9a:a4:93:d5:ae:64:c4:7f:
                    70:c6:81:33:56:fc:95:37:03:c0:82:28:79:88:a2:
                    73:e5:ff:c8:9f:72:63:d8:cb:e0:dc:61:80:de:2a:
                    8f:4e:ca:22:76:d6:c1:d6:15:9b:74:cb:3e:3c:86:
                    c8:95:d5:00:09:bd:d4:75:53:7e:6b:60:64:10:33:
                    7a:30:61:36:97:90:e8:9a:48:90:29:29:9a:1d:bb:
                    3b:5b:7a:01:45:00:17:b8:3f:3f:e2:4a:de:5f:25:
                    79:3c:16:b6:98:e3:d1:10:cc:0e:81:c4:16:d0:5e:
                    30:d1:82:7e:52:dc:f8:30:18:c7:60:2e:7e:2d:32:
                    35:5a:f5:1b:a3:a9:a4:18:90:12:49:da:90:12:e0:
                    71:11:9e:ef:b8:17:4e:b7:db:7f:34:f2:06:6a:bb:
                    0e:e0:39:78:c3:c1:1e:d5:76:a5:86:9b:3d:46:42:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:64:0C:4A:1A:92:37:0C:F5:95:72:B3:26:BB:10:05:CD:19:04:ED
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238303a3a2f33322d3438203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:e7:03:0e:03:f4:91:8e:7e:20:02:ce:cd:57:b0:51:13:
         eb:55:8c:a1:35:6c:1f:be:27:bf:23:ea:7b:6f:01:78:85:e0:
         72:52:ea:f0:41:0c:c6:6a:92:cb:97:41:97:27:e7:66:c3:63:
         7f:66:57:8c:4b:10:11:da:17:ab:ee:02:3b:15:97:dd:a1:e0:
         da:b0:90:5c:02:99:4f:21:4a:68:f1:ca:93:10:80:98:cc:c8:
         0f:8b:47:9c:14:c3:b6:8c:8b:1f:1e:92:34:bf:88:e7:fd:48:
         d7:13:90:13:60:00:00:ec:2c:56:34:1d:8c:89:0d:d3:46:b5:
         83:f1:2a:b8:f2:fb:9d:8b:f2:06:38:65:eb:6c:a8:e8:8c:fd:
         c2:eb:bc:b7:4b:9d:56:86:2c:ba:fd:29:56:ba:e8:da:17:f4:
         bc:26:71:4b:c2:dd:cf:9e:82:87:83:d9:f3:ef:e1:15:f9:cf:
         34:60:0f:7b:1c:13:0a:0f:61:d6:03:5e:22:e6:d1:63:61:94:
         c0:9d:c3:fa:f6:25:8d:c3:7e:79:bf:ff:80:de:e3:df:3f:27:
         38:33:5a:a7:8d:d8:ee:76:19:2e:f1:4a:7a:ae:30:13:bc:52:
         b1:b2:f8:58:a5:7c:99:00:1c:05:a5:0d:ee:01:0f:2b:14:12:
         a8:4b:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:23 2025 by rpki-client