Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238363a3a2f33322d3438203d3e20323034373839.roa
File:                     326130363a313238363a3a2f33322d3438203d3e20323034373839.roa (raw, json)
Hash identifier:          Hkq5D2YpAof9EplpCcpwEwmJk6XIrDUq7WjUXQfiItE=
Subject key identifier:   4B:DF:10:E3:C9:B6:19:43:A5:2E:27:22:CE:C3:17:3C:FF:D0:8F:62
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       3CE4AC506B8C860AF37D4BF8162C9D855924E9C6
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238363a3a2f33322d3438203d3e20323034373839.roa
Signing time:             Fri 09 Dec 2022 05:20:24 +0000
ROA not before:           Fri 09 Dec 2022 05:15:24 +0000
ROA not after:            Fri 08 Dec 2023 05:20:24 +0000
asID:                     204789
IP address blocks:        2a06:1286::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e4:ac:50:6b:8c:86:0a:f3:7d:4b:f8:16:2c:9d:85:59:24:e9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 05:15:24 2022 GMT
            Not After : Dec  8 05:20:24 2023 GMT
        Subject: CN=4BDF10E3C9B61943A52E2722CEC3173CFFD08F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:e7:64:8d:85:33:4a:00:8d:df:63:95:6b:
                    64:8e:41:f5:ca:d4:b8:2b:ef:66:b2:20:4f:a1:24:
                    82:27:33:40:31:52:b4:8d:fe:37:50:58:e3:22:8b:
                    e2:aa:22:0f:93:c4:ed:84:0f:d8:ae:66:77:c4:55:
                    25:61:42:ea:be:97:33:24:26:45:d4:d3:37:57:a7:
                    df:c5:2c:cb:ae:24:c9:9c:7b:e8:8b:b9:61:44:7c:
                    02:a6:38:ef:e0:eb:1a:d4:05:89:78:0d:d2:3b:12:
                    c3:31:45:a3:86:fe:17:0f:53:74:30:cc:a1:63:3f:
                    4e:92:32:68:76:b3:85:d7:9c:e1:74:9b:41:d7:16:
                    c8:09:82:bc:6e:4e:b8:84:3b:f9:ac:bc:66:2e:b3:
                    87:9d:85:f7:d4:b1:50:4b:02:15:51:36:4d:b0:b4:
                    70:7e:96:b7:c2:31:23:b1:69:4e:15:1e:ac:5a:d8:
                    c5:3e:72:a2:7e:07:f7:b2:fa:ca:4f:02:1b:b4:f1:
                    d8:bc:f1:4b:14:f1:8d:6f:cb:06:a4:dd:58:77:0f:
                    af:64:10:1b:ff:3b:c5:58:6c:6a:8b:9e:8f:59:20:
                    30:57:2c:7b:02:d3:2a:04:00:eb:7c:40:1f:ce:8f:
                    b5:4c:65:4c:a1:19:5e:bb:1d:7a:ef:8c:17:77:31:
                    99:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:10:E3:C9:B6:19:43:A5:2E:27:22:CE:C3:17:3C:FF:D0:8F:62
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a313238363a3a2f33322d3438203d3e20323034373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1286::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:c5:ae:a0:97:d1:f1:36:a9:2c:19:a6:46:80:9b:7b:a3:90:
         73:34:5b:6f:bd:78:0d:f6:71:07:7f:d4:9b:4b:59:25:cf:59:
         4e:52:45:06:4a:08:c0:fb:3a:26:c3:1b:0d:d7:73:31:11:86:
         1c:61:30:de:20:c0:85:8e:0f:80:f0:54:ff:7f:d6:1e:22:7b:
         c6:6e:01:ac:c9:05:68:c4:5e:6f:57:9e:7c:8d:04:84:dc:2b:
         70:45:07:e0:4f:19:89:b1:b8:5b:75:00:27:47:e0:78:f7:74:
         3e:c7:b0:51:08:cb:4d:7a:8a:a1:c9:f8:fd:01:35:90:2d:44:
         32:56:6c:69:b8:83:46:fa:9d:08:fb:d6:40:51:59:83:65:0d:
         b1:a8:a1:0e:45:69:a3:c1:06:6a:3b:5a:92:cb:91:17:4e:57:
         cd:57:0d:09:3b:a9:9a:75:02:6e:87:ec:99:8f:18:73:a7:3c:
         d2:2b:c5:e7:3e:03:0e:d9:fc:da:a5:30:6e:24:21:68:12:63:
         f1:15:47:6e:c0:1e:b4:b2:99:7e:4e:82:b0:2b:cd:13:9f:37:
         91:a4:92:ca:f6:07:3b:b6:f9:0f:da:46:09:6b:5b:57:fe:07:
         2c:9f:2f:fa:7a:48:9f:1a:78:60:c6:9c:8e:d5:f2:13:e8:a4:
         36:8d:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:39 2025 by rpki-client