Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202996.roa
File:                     AS202996.roa (raw, json)
Hash identifier:          FzARiyBNYdDChYJoqhPHxwz1HVYfFqcniRQ9ost/plo=
Subject key identifier:   22:B6:4A:3D:1D:80:D4:6B:1A:DD:58:44:92:78:0F:11:49:51:A2:FC
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       1C092919125A3C396026FAED396FDC1EE6B2E161
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202996.roa
Signing time:             Wed 21 Dec 2022 16:56:44 +0000
ROA not before:           Wed 21 Dec 2022 16:51:44 +0000
ROA not after:            Wed 20 Dec 2023 16:56:44 +0000
asID:                     202996
IP address blocks:        2a06:a005:5a4::/48 maxlen: 48
                          2a06:a005:d2b::/48 maxlen: 48
                          2a06:a005:1680::/44 maxlen: 48
                          2a06:a005:16b0::/44 maxlen: 48
                          2a06:a005:1c00::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:29:19:12:5a:3c:39:60:26:fa:ed:39:6f:dc:1e:e6:b2:e1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:44 2022 GMT
            Not After : Dec 20 16:56:44 2023 GMT
        Subject: CN=22B64A3D1D80D46B1ADD584492780F114951A2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:a3:b3:23:67:82:23:70:35:28:b4:ef:b7:
                    01:c2:4c:20:2e:35:69:2a:9c:dc:84:cc:a9:0f:e0:
                    14:d1:17:10:a7:48:5e:7e:cf:a7:df:11:0e:aa:f6:
                    3a:d3:66:9c:90:11:da:ac:7c:67:22:ca:5f:92:d9:
                    10:4d:d8:af:f4:50:88:3b:16:67:02:2c:97:56:ad:
                    5e:b6:2b:da:d8:77:c7:f3:6d:59:fc:ea:39:63:13:
                    8f:b3:f4:8a:35:50:43:03:e1:e6:e4:dd:d2:36:f4:
                    4e:08:ef:0e:42:08:fb:23:47:94:26:92:f9:e3:22:
                    89:18:47:09:77:af:ed:56:9f:b7:6c:f2:cc:4a:10:
                    b6:e9:e6:9c:7c:c7:14:10:a5:3d:70:1a:7f:04:86:
                    3a:59:78:d9:ae:33:ae:66:d7:cc:c9:a1:4b:d8:a8:
                    a7:71:87:55:7d:bf:8a:dc:af:71:35:58:90:7f:3a:
                    14:e7:01:66:5b:16:b2:cb:26:6a:e2:68:42:f3:49:
                    02:40:6d:6a:d4:45:64:5f:49:68:c6:b2:74:50:6b:
                    d9:ef:33:ca:65:a1:92:10:b1:b5:a6:f0:b2:f6:06:
                    a7:36:65:21:6c:6c:95:29:a0:55:4d:80:0d:41:2a:
                    a7:04:7d:ed:df:84:d1:0e:24:7c:e9:84:07:4d:82:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B6:4A:3D:1D:80:D4:6B:1A:DD:58:44:92:78:0F:11:49:51:A2:FC
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a4::/48
                  2a06:a005:d2b::/48
                  2a06:a005:1680::/44
                  2a06:a005:16b0::/44
                  2a06:a005:1c00::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:ef:e0:5f:f1:b2:36:5f:92:de:dc:cb:d1:86:e8:d8:3d:
         8d:9e:6f:46:7c:df:1c:45:3b:88:ba:ca:44:5a:b9:5c:e9:0a:
         bd:d1:4e:5a:da:75:5f:04:ba:a2:7c:3b:dc:2e:73:ef:b0:22:
         4b:49:57:f9:86:81:96:bc:8c:93:98:bc:86:a8:67:88:22:10:
         cc:61:0c:24:8b:25:2c:9b:4f:a2:a3:47:3b:35:07:23:ac:50:
         29:ba:8d:26:74:8a:07:56:48:b7:90:24:d1:65:03:22:4e:52:
         ab:28:2e:20:30:ba:0e:a1:e8:fb:1d:c4:58:9a:f1:70:69:22:
         68:fd:9f:b7:d8:8d:8e:7f:fe:a5:da:4f:44:a3:25:f3:e4:0b:
         5d:25:da:59:cd:89:96:8b:5c:c4:2b:c7:dd:91:d1:38:56:33:
         34:36:4a:8e:fe:16:7e:6a:ef:0c:4d:58:f0:20:f2:ff:73:10:
         78:d9:69:57:bb:ff:fb:e9:10:7e:dc:59:32:25:f2:bf:e6:97:
         2f:6a:7e:e7:b1:9f:ca:32:67:39:2b:a8:ad:ef:0a:cd:97:a7:
         b1:1a:ca:2f:f2:e9:e7:b3:92:65:25:e0:3e:a2:70:41:9d:11:
         2a:63:7b:56:23:d8:b4:d8:ac:a8:4d:c5:df:6e:c7:38:43:ad:
         9b:37:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:56 2025 by rpki-client