Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200866.roa
File:                     AS200866.roa (raw, json)
Hash identifier:          FrysfbNL4PibmAZuBEpnwgLcMFlT0Oy4gS3cbU8wKws=
Subject key identifier:   CA:F6:84:5D:91:04:7B:7A:F3:3B:3E:39:82:9C:03:76:7E:66:9F:6D
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       03748AD82591BC61F153BC3417353D0264482D00
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200866.roa
Signing time:             Wed 21 Dec 2022 16:56:48 +0000
ROA not before:           Wed 21 Dec 2022 16:51:48 +0000
ROA not after:            Wed 20 Dec 2023 16:56:48 +0000
asID:                     200866
IP address blocks:        2a06:a005:2370::/44 maxlen: 48
                          2a06:a005:26e0::/44 maxlen: 48
                          2a06:a005:26f0::/44 maxlen: 48
                          2a06:a005:2700::/44 maxlen: 48
                          2a06:a005:2710::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:74:8a:d8:25:91:bc:61:f1:53:bc:34:17:35:3d:02:64:48:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:48 2022 GMT
            Not After : Dec 20 16:56:48 2023 GMT
        Subject: CN=CAF6845D91047B7AF33B3E39829C03767E669F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:97:ec:01:39:cd:fd:8f:39:48:e2:60:43:
                    98:b8:6b:d8:42:74:43:17:63:3f:32:f0:7b:48:07:
                    f8:3d:57:a8:9c:fd:2f:c3:17:3e:05:66:c8:09:46:
                    15:72:e7:b1:6e:33:a6:7f:d3:96:a0:5a:c3:4a:da:
                    7c:df:5a:d8:04:bc:49:50:2b:b1:ed:bf:78:ed:4f:
                    d7:f4:e2:a0:70:a7:30:77:e2:f6:b6:56:b8:c8:30:
                    1f:93:1b:4e:97:44:21:64:f8:a6:d2:be:14:11:b9:
                    fd:e1:5f:c5:79:08:83:f9:20:8e:65:66:19:04:c7:
                    6c:e5:c7:78:a8:c0:54:e0:33:97:f2:48:92:25:de:
                    6d:e9:99:c3:e5:f1:ae:10:49:a1:c3:bf:7b:8b:ed:
                    9c:38:78:e2:32:9e:55:86:9a:96:10:b4:c3:e9:0a:
                    18:d2:da:ce:b8:f6:a7:40:72:3d:9d:f8:8d:89:19:
                    f2:57:85:75:6b:c2:c2:50:3c:0d:f2:84:f4:5a:0d:
                    ec:0a:cb:b3:18:bc:03:ec:e8:a8:c3:fd:4b:b4:67:
                    78:91:fc:24:8e:aa:3a:33:03:58:43:13:28:f3:af:
                    65:f9:80:09:68:46:7d:b8:32:ab:b0:ef:a5:ea:37:
                    76:f9:d7:36:4d:37:4e:54:2b:bd:d0:3b:62:da:84:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F6:84:5D:91:04:7B:7A:F3:3B:3E:39:82:9C:03:76:7E:66:9F:6D
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2370::/44
                  2a06:a005:26e0::-2a06:a005:271f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:8d:93:b2:17:bb:56:7a:7e:9d:50:d0:8c:51:dd:f6:b7:
         f5:6e:91:c1:84:41:b8:12:7b:a5:f0:68:de:51:91:18:1f:ba:
         a3:a3:f2:aa:4b:a7:52:a4:1e:b3:51:7a:71:7c:fa:e8:2c:ca:
         5e:22:93:36:94:c5:7f:0d:fe:ff:d0:a3:ec:a5:df:dc:c5:44:
         b0:a1:98:2d:d9:09:c2:f3:5b:9d:44:df:d1:d6:c8:06:ed:ca:
         bf:c9:e1:f5:27:89:6f:52:2b:a5:64:8e:91:bd:ed:c7:66:7c:
         ff:ab:43:85:05:2b:3b:a5:81:2b:02:57:59:60:ac:91:e6:36:
         dc:a7:d4:a6:c5:19:f5:17:c7:29:7b:c2:e0:c0:e7:b5:ad:fb:
         b2:62:e4:ca:bd:db:cd:e7:46:8c:61:c9:f3:a4:f2:ae:5b:5b:
         f2:a6:c2:af:aa:8d:79:64:69:17:7a:e7:05:1c:1d:29:52:82:
         ca:df:9c:8d:40:2f:84:9a:c7:74:d8:85:4b:87:f7:80:8d:b5:
         4b:b9:d7:ca:9b:6a:fa:cf:14:36:0d:39:93:15:5f:f5:79:12:
         29:42:12:86:72:20:fd:fe:3a:fc:20:4b:df:69:53:bd:e3:93:
         d3:25:63:8a:5a:44:48:02:47:84:b4:36:cd:80:1e:8b:a2:aa:
         5b:77:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:38 2025 by rpki-client