Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212164.roa
File:                     AS212164.roa (raw, json)
Hash identifier:          J8N8SWPxqDQkhq/PLf66zU8Td8MDjZXL57jgdDLdgNk=
Subject key identifier:   D7:D1:A5:3D:FB:90:3A:F3:EF:6B:82:14:4C:06:D6:1A:7E:AE:D3:36
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       5FE67B6566C91A56B4DB5CB37152C746DAA515BE
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212164.roa
Signing time:             Wed 21 Dec 2022 16:56:54 +0000
ROA not before:           Wed 21 Dec 2022 16:51:54 +0000
ROA not after:            Wed 20 Dec 2023 16:56:54 +0000
asID:                     212164
IP address blocks:        2a06:a005:1167::/48 maxlen: 48
                          2a06:a005:1168::/48 maxlen: 48
                          2a06:a005:1330::/44 maxlen: 48
                          2a06:a005:25e0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e6:7b:65:66:c9:1a:56:b4:db:5c:b3:71:52:c7:46:da:a5:15:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:54 2022 GMT
            Not After : Dec 20 16:56:54 2023 GMT
        Subject: CN=D7D1A53DFB903AF3EF6B82144C06D61A7EAED336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:a1:9a:06:13:45:ae:76:55:2d:69:ec:68:
                    9e:c4:6a:ed:50:2f:25:35:ce:89:a9:d9:21:1d:a5:
                    43:25:fa:c4:84:2d:9b:b1:0e:0c:3d:4a:dc:de:1a:
                    ca:05:53:f3:3c:0c:53:bf:2c:c8:9e:ef:b3:52:d5:
                    46:bb:4b:bc:83:ab:d4:d4:c8:d5:f6:bf:ce:08:86:
                    2f:f5:db:05:03:d9:59:47:1b:89:d1:0d:0c:fc:97:
                    dc:d6:2a:96:1d:aa:cb:57:3f:81:b4:02:c9:f6:27:
                    91:e5:fe:ea:6e:38:07:01:4b:a7:a7:7c:c3:fd:e2:
                    85:25:9b:ae:56:55:98:8d:62:e2:21:f1:50:42:33:
                    cc:61:d1:13:9d:b3:2d:1d:57:7c:75:10:1b:a2:93:
                    5c:86:7f:cd:f5:59:75:3a:ae:76:4b:88:c6:cf:1d:
                    c4:3b:fc:51:ff:6b:ca:7c:bb:9e:e3:51:96:ef:88:
                    9c:cf:f1:aa:36:47:5f:cb:a3:25:53:53:64:1e:4e:
                    7d:d7:98:00:45:aa:97:15:33:02:4b:d0:88:bd:0a:
                    62:45:09:d1:3b:a3:76:ae:2d:ac:9a:16:4f:91:d1:
                    f6:2f:26:8f:11:67:55:a6:c6:4c:19:64:ae:47:65:
                    7d:6c:08:27:55:84:d7:9f:bf:f0:e8:52:fb:fa:69:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:A5:3D:FB:90:3A:F3:EF:6B:82:14:4C:06:D6:1A:7E:AE:D3:36
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212164.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1167::-2a06:a005:1168:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1330::/44
                  2a06:a005:25e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:20:39:dd:2d:1f:1d:17:97:52:e2:f0:7e:4e:2f:7b:3b:33:
         12:8f:22:da:f3:dd:17:8c:30:71:34:81:01:16:a2:37:47:60:
         70:ea:3d:00:a4:0d:71:32:04:ab:a9:4d:85:0a:3e:16:9a:30:
         ab:45:50:14:60:f9:90:c4:9b:2f:74:a3:dd:76:5c:d7:cc:8e:
         e2:8a:b3:6c:18:11:6b:73:0d:38:23:75:8e:2a:d7:2d:07:b0:
         6c:d0:6e:bf:8a:d5:7e:29:58:61:84:05:f0:34:c2:5a:ad:13:
         cc:5b:30:95:72:f8:c5:18:ad:11:d4:51:1e:d0:bf:d2:b5:2a:
         69:02:a5:50:2e:63:d9:32:6c:e1:8d:a0:df:f9:e7:d9:61:a9:
         d7:53:9e:af:2c:c0:46:32:59:01:97:81:76:82:55:c6:86:89:
         55:83:fc:0f:72:e5:3a:a9:c0:17:6a:d7:f8:90:31:b5:11:ba:
         6c:7d:da:a3:0a:69:03:42:b1:e2:89:9d:bb:68:a9:32:89:ab:
         70:8a:85:1d:45:92:58:33:d2:b0:61:39:d3:13:89:16:ef:08:
         7a:df:33:5a:18:1a:45:1c:cb:ad:3c:af:54:be:41:fa:fe:20:
         23:05:3d:0a:eb:04:e5:eb:b5:81:e9:e4:6b:6a:b0:98:f6:f1:
         7d:2b:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:05 2025 by rpki-client