Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS136258.roa
File:                     AS136258.roa (raw, json)
Hash identifier:          GV62EVEEkecJ/lI9ZwbvF8Uc5J43Z6RqUFv9g/Suk+A=
Subject key identifier:   E0:BD:19:1A:9B:6E:ED:41:65:72:8B:44:FF:91:A2:01:65:D9:67:89
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       6F373583D54E6EFFEA1AA2D5ECF7B42B5F7B27FA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS136258.roa
Signing time:             Wed 21 Dec 2022 16:56:54 +0000
ROA not before:           Wed 21 Dec 2022 16:51:54 +0000
ROA not after:            Wed 20 Dec 2023 16:56:54 +0000
asID:                     136258
IP address blocks:        185.90.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:37:35:83:d5:4e:6e:ff:ea:1a:a2:d5:ec:f7:b4:2b:5f:7b:27:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:54 2022 GMT
            Not After : Dec 20 16:56:54 2023 GMT
        Subject: CN=E0BD191A9B6EED4165728B44FF91A20165D96789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:8a:d9:ed:a5:e1:51:58:f0:76:98:11:2b:
                    f1:de:04:19:39:59:0c:36:16:00:76:12:69:9e:b3:
                    d8:54:a0:fd:71:c0:c0:17:51:ff:7b:86:c0:c2:55:
                    3c:4b:a5:c5:e7:e4:6e:a8:1a:89:6e:01:09:d4:46:
                    16:b5:0c:e7:9b:08:05:ed:f8:0e:e3:5a:38:93:9d:
                    16:f8:65:ac:5b:50:99:d3:6f:46:0b:20:d7:99:82:
                    01:40:71:99:63:e9:36:43:65:82:34:e7:7d:a0:1f:
                    9e:33:0f:ff:22:2a:76:01:60:59:e5:40:76:47:ce:
                    c5:1e:5f:94:27:92:04:78:32:50:01:f3:38:e9:16:
                    43:3d:13:b6:de:16:87:94:1c:4e:d5:2d:bb:7b:f4:
                    19:54:47:6f:cd:db:a9:a4:51:45:a0:a0:6b:c3:ad:
                    22:ad:fc:5d:0a:3f:63:b3:ae:89:90:e1:c6:6b:e6:
                    f7:87:9a:e6:cf:f3:c8:de:4c:ed:f2:54:9c:21:f8:
                    b8:1c:83:44:a9:d4:cb:07:1a:5b:54:82:0f:f2:c8:
                    43:81:a6:00:57:01:08:8c:f3:d2:73:e5:13:d3:6e:
                    59:d1:21:3d:98:b0:8f:6a:6d:e0:97:7b:81:d0:59:
                    a1:01:61:f0:05:b8:d9:6a:95:84:b4:57:13:dc:1f:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:19:1A:9B:6E:ED:41:65:72:8B:44:FF:91:A2:01:65:D9:67:89
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS136258.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:6b:f6:a6:48:ff:65:f4:88:41:a6:9e:8a:d8:8c:d4:de:
         e2:3d:97:ea:e5:1d:e5:8e:33:e6:31:61:e8:09:54:49:7e:b7:
         4b:e4:f1:a1:1e:48:cf:43:a7:d6:90:7d:46:04:4c:8a:21:c4:
         27:7e:fc:e9:df:1a:8c:be:24:d1:23:3c:38:8b:21:ca:d7:76:
         92:89:8f:76:d1:f5:08:dd:1e:25:99:32:17:f5:11:6d:cc:4a:
         70:ff:08:64:ae:1f:52:37:aa:5f:74:05:5a:17:6a:8a:e2:da:
         92:c6:e0:1c:dd:4a:4b:06:99:a6:3b:12:1c:54:ea:5b:79:b0:
         f9:b6:aa:a9:ca:e4:a6:23:b9:0e:e8:87:1d:c6:96:64:04:ae:
         2b:c4:ce:ab:db:45:99:3f:b5:43:87:f6:f1:32:bc:0b:fb:48:
         fd:e6:c4:af:1e:8e:ec:dc:64:56:1d:8f:0d:e4:14:14:b8:9a:
         a5:f9:19:24:68:59:42:bb:07:16:2f:66:24:e1:df:14:0e:58:
         8a:34:1b:32:9e:3b:0c:f0:82:ce:a8:bf:b4:8f:01:12:0a:8a:
         ad:90:17:50:bb:b2:85:fb:46:4a:fb:b7:3d:4e:ee:1e:0f:5f:
         9d:2a:c6:3a:a5:f7:05:91:40:55:2b:35:0f:68:5f:01:2b:94:
         e6:3b:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:03 2025 by rpki-client