Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203472.roa
File:                     AS203472.roa (raw, json)
Hash identifier:          LWf3G4hTevk/EV9J/0mLv0UTqEgyIYV8a+v/QFg8mgg=
Subject key identifier:   1D:D2:B2:FA:B7:4C:5F:CE:30:46:72:9B:4C:D5:08:F8:35:89:A9:0F
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       137E562E2898EA5D993ED70E6A1D57AD3491BA5E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203472.roa
Signing time:             Wed 21 Dec 2022 16:56:53 +0000
ROA not before:           Wed 21 Dec 2022 16:51:53 +0000
ROA not after:            Wed 20 Dec 2023 16:56:53 +0000
asID:                     203472
IP address blocks:        2a06:a005:600::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7e:56:2e:28:98:ea:5d:99:3e:d7:0e:6a:1d:57:ad:34:91:ba:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:53 2022 GMT
            Not After : Dec 20 16:56:53 2023 GMT
        Subject: CN=1DD2B2FAB74C5FCE3046729B4CD508F83589A90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:17:02:d6:21:da:af:3e:23:97:67:1c:bb:
                    61:46:a7:0e:92:f4:c9:4f:bf:f7:c5:bd:73:cb:ec:
                    26:49:33:f5:36:b9:bd:d8:b2:04:4b:dc:78:54:bb:
                    f7:ac:2c:03:15:ed:21:5d:2c:c3:1a:5e:b7:18:59:
                    fb:1f:34:aa:7a:6f:f7:35:d0:c1:0d:05:c1:11:52:
                    c5:a5:fd:d3:d4:34:a1:0e:6a:e0:52:00:ce:e1:1b:
                    5e:a6:65:09:59:42:38:53:47:02:58:31:11:2b:24:
                    be:58:e0:e1:ab:6c:04:d6:31:e8:62:34:e2:e2:27:
                    03:19:a3:a0:3c:0c:e2:a5:f1:dd:c2:27:3e:d1:34:
                    dd:bb:f9:91:f3:b3:18:3d:25:ad:51:e2:a4:21:3f:
                    e9:f1:a4:24:fc:cb:37:46:e6:91:b3:9e:d5:f0:6c:
                    99:44:04:c4:06:35:08:51:be:3c:16:ff:ce:f0:0b:
                    ad:60:b8:d3:50:15:de:7a:4c:79:0f:a2:07:41:2b:
                    ab:85:03:32:bb:47:f5:47:9f:d2:58:67:26:45:e9:
                    4a:0b:e6:30:6a:f9:83:66:0a:2d:6a:82:37:8d:6a:
                    65:64:1e:12:71:65:40:78:08:87:d4:b5:2c:2f:bd:
                    a6:01:96:57:23:58:96:aa:cf:fe:3a:c0:59:c1:29:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D2:B2:FA:B7:4C:5F:CE:30:46:72:9B:4C:D5:08:F8:35:89:A9:0F
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203472.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:600::/44

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:91:ca:91:32:38:47:d5:d2:95:9a:8c:a7:8f:eb:b2:11:
         92:4d:bd:b7:2c:94:0f:c1:61:d2:ba:36:9e:8f:e9:a3:51:fd:
         4c:ff:3a:15:d8:11:be:e5:e1:9c:02:67:de:72:b0:84:7c:9f:
         15:35:ba:81:02:e9:b8:c2:46:db:cd:dc:be:08:36:a0:b8:8b:
         8f:d9:0e:e2:0e:06:91:16:d3:ff:99:89:8e:97:d3:a0:07:94:
         93:b3:cd:06:88:86:38:6b:d5:63:f4:b8:b2:9c:8a:44:68:d7:
         0a:24:e6:d2:4d:29:ae:11:b1:84:2e:9d:31:3f:d3:d8:7d:5d:
         24:83:8c:a4:a4:22:17:e8:c3:e9:4e:d1:22:2c:bd:73:9d:73:
         c0:ff:b0:08:2b:b3:25:c2:ed:f2:73:e9:c0:a9:57:47:e8:4d:
         c2:b5:0c:b9:55:78:47:c5:bf:ac:09:58:63:10:04:38:d6:84:
         96:ed:b4:38:bc:cf:ee:13:49:4a:41:79:21:6f:d3:7c:07:42:
         ec:71:cf:f7:ac:93:94:bc:cc:2a:ae:13:12:cd:5b:9f:f0:42:
         fc:14:3c:4e:a9:86:97:80:3d:40:5b:20:f0:1c:75:a1:b0:8f:
         bc:00:5b:04:2e:05:ba:6f:63:49:da:b7:60:fe:7f:2a:a0:70:
         55:66:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:56 2025 by rpki-client