Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030313a623030623a3a2f34382d3438203d3e20393435.roa
File:                     326130363a613030313a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          FXg0SOFR89t90fjT6Z5RZCTCE7yNxJwnfiXV1fkG+Vw=
Subject key identifier:   74:CB:90:63:99:40:4C:1C:A9:72:0B:69:7D:57:B2:B0:05:B2:78:EC
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       6E78432F8D586F79B68FFEFE61A095BC4DDD3AB6
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030313a623030623a3a2f34382d3438203d3e20393435.roa
Signing time:             Fri 09 Dec 2022 05:03:21 +0000
ROA not before:           Fri 09 Dec 2022 04:58:21 +0000
ROA not after:            Fri 08 Dec 2023 05:03:21 +0000
asID:                     945
IP address blocks:        2a06:a001:b00b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:43:2f:8d:58:6f:79:b6:8f:fe:fe:61:a0:95:bc:4d:dd:3a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 04:58:21 2022 GMT
            Not After : Dec  8 05:03:21 2023 GMT
        Subject: CN=74CB906399404C1CA9720B697D57B2B005B278EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:87:ee:08:21:f5:12:58:02:eb:e8:c0:85:6b:
                    de:a9:62:6f:d0:91:55:61:51:87:da:0d:c8:06:a2:
                    95:15:be:96:59:ec:fd:75:d8:8a:3e:af:39:20:78:
                    82:57:bb:44:9c:1b:e9:7b:30:38:78:ca:06:d3:e1:
                    04:ae:b4:eb:ce:ed:3f:d0:03:de:95:b7:6f:d4:b7:
                    83:f7:42:4e:4b:29:50:b7:8b:d8:1d:78:ac:5c:b3:
                    35:22:6a:87:6d:ab:43:ed:cf:ef:e1:9c:d4:cd:69:
                    e0:0e:95:99:92:1b:22:4f:ab:c3:d3:1c:a4:a2:35:
                    8a:26:a3:df:e4:1d:81:24:45:31:ce:eb:d4:b5:1a:
                    a9:f8:6a:00:e1:31:39:a1:fd:e6:78:5d:de:37:f7:
                    ef:70:34:64:9b:f4:5e:dc:f9:e8:1b:62:92:83:8d:
                    8a:8f:1e:a4:6b:a6:a6:77:68:4a:39:55:b1:22:25:
                    3b:46:08:ea:98:87:37:90:6c:00:5d:9b:d9:67:c0:
                    6e:6c:66:b6:51:63:93:89:7b:b9:b4:db:f6:5b:f0:
                    f4:31:05:c8:ea:67:4f:b3:dd:a6:75:cd:93:1b:ad:
                    4c:9a:f3:68:2d:4d:e5:42:ab:72:0e:3d:40:41:70:
                    01:70:f1:99:2e:f4:a7:56:f2:cb:73:ac:1a:b7:d7:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:90:63:99:40:4C:1C:A9:72:0B:69:7D:57:B2:B0:05:B2:78:EC
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030313a623030623a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:ab:92:fa:5b:78:37:09:84:82:83:04:55:dc:29:69:63:e9:
         14:fa:5b:a9:f0:27:5e:5b:84:4f:86:56:cc:63:ae:6e:1b:b4:
         1c:a1:4b:f5:25:74:b3:a6:ff:49:7e:63:60:51:90:18:c9:e8:
         6c:eb:bc:01:45:47:38:5a:e8:d0:74:3a:49:32:b7:7b:94:6b:
         7d:98:0f:e7:a6:41:38:e3:27:04:bf:3e:15:7c:3d:5b:15:ee:
         62:84:db:8d:a1:c9:ef:91:ba:e4:34:35:ae:32:c5:d6:c1:03:
         29:82:ad:d0:94:dc:ee:c1:5a:a8:9a:b0:49:f1:f0:7b:87:36:
         ca:b5:b9:a7:dc:a7:ff:ca:4f:d1:1f:87:96:06:3c:6d:f0:2c:
         eb:85:60:88:c1:a7:56:66:48:1f:89:a9:ec:29:9b:ad:05:02:
         fe:2c:72:de:dc:41:64:22:f2:aa:cf:12:ce:af:88:86:d6:55:
         a6:50:3f:24:e3:5a:8b:88:ed:8a:aa:04:fc:65:b1:ae:80:00:
         3d:c8:7b:79:e7:71:49:1b:50:45:d4:cf:35:c3:1c:e8:83:52:
         43:b1:d1:32:90:9b:a2:56:37:c8:5b:47:45:96:06:51:5b:b6:
         37:bd:a9:49:d3:f0:cd:57:d7:44:05:52:8b:f9:74:1d:9d:60:
         91:77:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:04 2025 by rpki-client