Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202726.roa
File:                     AS202726.roa (raw, json)
Hash identifier:          NzGeT0+qMUwHKAV4M/nXHLZKEVIYpuu8h9O7vbBuhnQ=
Subject key identifier:   69:7A:D7:CC:41:ED:A9:6F:35:0A:9D:BD:F7:94:9E:13:39:AA:FB:E6
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       5BBE25B5ACB4C83DCEA3B1AA48FB9986BF33A559
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202726.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     202726
IP address blocks:        2a06:a005:20d0::/44 maxlen: 48
                          2a06:a005:20e0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:be:25:b5:ac:b4:c8:3d:ce:a3:b1:aa:48:fb:99:86:bf:33:a5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=697AD7CC41EDA96F350A9DBDF7949E1339AAFBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:88:35:c7:cd:78:3b:34:df:f7:aa:bc:79:
                    bf:c0:59:17:8b:ce:65:e2:04:b8:3d:b3:18:bc:61:
                    f2:03:dd:72:c3:9e:3c:1e:62:6d:d8:d9:4f:45:86:
                    2e:d5:59:05:2e:13:9c:73:6a:63:a6:d4:ef:75:3b:
                    99:15:a2:56:4d:16:fc:ef:19:41:af:d0:72:df:6e:
                    ce:6d:a4:d2:e7:38:15:cd:55:fe:02:6d:bc:0e:73:
                    cd:67:a8:56:53:03:8c:50:b4:30:a8:d1:23:41:87:
                    65:20:f5:29:0f:00:31:43:b1:65:a7:92:c7:c5:06:
                    6f:ae:f6:93:95:99:ed:26:74:04:78:8b:77:7e:4c:
                    11:1c:04:a9:96:7e:97:13:ee:64:4d:2a:15:43:04:
                    00:a2:e1:e6:19:ae:83:8a:69:f8:b7:6c:2f:28:31:
                    79:4e:1f:6e:dc:47:e4:6b:95:22:3e:48:53:24:44:
                    e6:45:79:fb:2e:3d:e0:22:9f:98:4f:50:4f:74:0a:
                    f8:e5:75:0a:c7:a2:fb:de:ab:00:87:5e:24:4f:1e:
                    67:2c:85:fa:02:4a:cc:64:57:1f:1e:a2:51:23:da:
                    71:e4:87:23:e9:99:61:24:15:cb:65:4f:8a:9d:96:
                    3e:65:17:d9:f3:48:e5:e8:3c:a1:73:ef:cb:bd:57:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:D7:CC:41:ED:A9:6F:35:0A:9D:BD:F7:94:9E:13:39:AA:FB:E6
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:20d0::-2a06:a005:20ef:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b0:dd:fb:49:43:3f:df:2d:41:75:54:1f:35:e2:11:82:5d:ec:
         ce:90:5d:da:48:60:f3:71:2d:f5:ef:e0:83:38:5c:ab:86:64:
         d8:e2:ae:83:11:3f:e1:59:87:b8:78:62:09:6c:49:7f:cf:b5:
         e4:34:08:90:30:ce:eb:b1:bf:8f:54:fc:5c:e3:01:fa:c5:0c:
         b7:60:83:9b:8b:69:2f:d5:61:dd:4f:c5:51:63:00:06:08:88:
         05:2f:43:d0:96:77:4a:cd:cf:af:d6:70:3f:4c:ff:db:96:49:
         ec:fa:25:a2:cc:6b:b6:e1:f7:39:9e:a3:c9:05:00:76:27:bd:
         35:3e:50:3f:e4:0c:a2:8c:e2:df:59:7e:fa:8e:9f:5b:b4:5b:
         9f:8c:41:25:48:44:38:8e:18:c0:4f:ea:2a:4a:5e:dd:ac:7d:
         95:93:b5:0b:ef:f0:18:b4:ff:b8:b7:3a:4f:fa:6c:e0:4b:c5:
         a4:72:bc:11:f8:90:7f:a7:e5:e3:da:a5:47:46:af:40:81:72:
         f5:09:bb:b7:9d:a7:ff:fd:05:cf:32:26:c9:17:63:31:cb:f0:
         81:be:35:81:8c:b1:29:61:45:71:1f:c4:da:88:ea:cd:ac:c5:
         dd:29:54:d8:a5:7f:04:77:ee:5a:22:01:94:0d:e9:7a:5c:73:
         72:15:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:52 2025 by rpki-client