Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS36351.roa
File:                     AS36351.roa (raw, json)
Hash identifier:          VPXWnG0/7hoqVJWVe1NVH0eFHpnOcpdejREHj8ZZa/Q=
Subject key identifier:   AB:A1:31:B5:FB:09:40:E6:2F:F3:F4:C3:5D:8B:E5:C1:40:3E:9E:25
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       6ED41496CFD8A848F07B2183E59322765738C0D6
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS36351.roa
Signing time:             Wed 21 Dec 2022 16:56:55 +0000
ROA not before:           Wed 21 Dec 2022 16:51:55 +0000
ROA not after:            Wed 20 Dec 2023 16:56:55 +0000
asID:                     36351
IP address blocks:        185.236.212.0/24 maxlen: 24
                          185.236.213.0/24 maxlen: 24
                          185.236.214.0/24 maxlen: 24
                          185.236.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d4:14:96:cf:d8:a8:48:f0:7b:21:83:e5:93:22:76:57:38:c0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:55 2022 GMT
            Not After : Dec 20 16:56:55 2023 GMT
        Subject: CN=ABA131B5FB0940E62FF3F4C35D8BE5C1403E9E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:77:8d:73:42:ea:30:d6:92:2e:e1:26:25:
                    a7:e7:12:0f:15:3a:14:2a:d9:b2:c8:de:a4:01:03:
                    2f:89:09:35:41:75:76:50:ec:7a:cc:68:47:f7:59:
                    7d:4a:24:93:f8:23:30:8c:75:c9:45:6c:46:b9:42:
                    bc:2b:e2:d6:23:74:4c:e1:f6:58:fb:e0:b6:12:87:
                    bd:c4:36:62:ae:3d:e9:df:bb:34:c8:bd:89:17:0c:
                    77:51:ac:65:b5:48:6c:39:45:84:5e:df:d1:32:d2:
                    cb:71:0a:30:fe:0a:10:44:7a:58:34:73:05:20:71:
                    af:5d:a4:fa:79:aa:2e:d5:76:7a:de:34:79:f9:22:
                    16:c6:9d:ab:36:25:71:b3:48:ce:97:81:7a:92:cf:
                    92:07:23:84:1a:2a:36:b2:ec:e7:36:7e:86:08:61:
                    ae:19:bf:e3:b8:bc:08:4b:4c:13:75:a4:c7:07:18:
                    b3:3d:04:a6:91:5d:4f:9e:c4:76:8b:24:25:2f:6f:
                    06:98:76:ab:18:d8:c8:da:42:67:e8:45:a5:c2:83:
                    ce:6b:a0:98:0d:5b:76:5d:34:45:63:43:de:27:43:
                    0e:92:73:af:c0:c2:11:be:b9:f2:2f:da:49:14:05:
                    89:14:0e:2d:ce:a7:ff:90:97:4b:13:0f:10:60:f5:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A1:31:B5:FB:09:40:E6:2F:F3:F4:C3:5D:8B:E5:C1:40:3E:9E:25
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS36351.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:ce:e5:97:1f:80:71:81:d3:0f:3a:ee:c5:1b:95:ec:75:
         d6:3e:96:67:bc:cc:b1:4f:31:8c:c6:31:d9:c1:18:44:fb:ed:
         66:1b:04:b5:29:08:8c:a2:ed:b8:d1:d9:5c:15:b9:1d:2a:d2:
         eb:de:17:45:82:0b:f9:4b:ee:86:87:22:6f:bb:3c:2c:81:3d:
         ba:2e:c9:51:54:51:c5:af:6f:dc:53:bd:de:d2:c0:6a:17:e0:
         c6:d5:2b:f3:a4:96:f9:96:ca:8b:67:e2:f9:8b:6f:94:3f:ac:
         ce:ec:46:11:3f:ae:3d:c5:7a:71:17:d8:e1:b3:13:bc:cf:2e:
         08:43:96:db:90:ed:46:ac:ed:d7:be:e1:1e:e6:fa:22:d9:1d:
         8b:b6:28:e7:2e:54:b0:76:48:7d:23:6a:07:a4:b7:bb:65:b5:
         c6:e1:26:5c:3d:2e:2e:5a:a6:9b:84:c0:0a:31:82:8b:83:07:
         12:45:a7:c5:78:c3:89:b8:c0:e6:9b:94:56:d4:72:9c:00:e5:
         f2:15:ef:7d:31:a5:91:2e:00:5e:96:39:80:25:03:af:1e:aa:
         4f:7b:d7:7d:2d:5b:85:cb:2f:ed:42:8a:95:6e:db:17:ba:4e:
         08:13:9f:db:47:52:61:0f:b2:d7:f4:d1:c0:dc:e0:4b:30:59:
         c6:05:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:04 2025 by rpki-client