Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57429.roa
File:                     AS57429.roa (raw, json)
Hash identifier:          k7Eh0hTlOIAmOFUNGJDaoZPIQOOXtLy9P2dQWkMkv9k=
Subject key identifier:   DE:65:6E:A7:CC:15:01:98:44:8A:37:93:C0:79:9D:4C:70:C3:EF:53
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       780DF4BD196136B115F755E41D2AF41BF01CC7E7
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57429.roa
Signing time:             Wed 21 Dec 2022 16:56:48 +0000
ROA not before:           Wed 21 Dec 2022 16:51:48 +0000
ROA not after:            Wed 20 Dec 2023 16:56:48 +0000
asID:                     57429
IP address blocks:        2a06:a005:190::/44 maxlen: 48
                          2a06:a005:1a0::/44 maxlen: 48
                          2a06:a005:1b0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0d:f4:bd:19:61:36:b1:15:f7:55:e4:1d:2a:f4:1b:f0:1c:c7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:48 2022 GMT
            Not After : Dec 20 16:56:48 2023 GMT
        Subject: CN=DE656EA7CC150198448A3793C0799D4C70C3EF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:e4:fc:21:d9:6c:5e:c3:56:3d:2f:88:65:
                    e4:86:e9:e2:1e:56:cd:aa:11:21:f1:81:0c:29:dd:
                    66:8b:08:df:33:a7:16:97:47:19:4e:a8:05:77:e6:
                    2b:37:73:c4:3d:9d:f6:6d:b7:5a:22:c1:6f:16:39:
                    f3:41:3a:12:a1:7c:c0:f6:ec:b9:12:10:73:92:7f:
                    3d:9b:e1:1f:48:87:60:ca:4a:0f:ff:ce:6e:c2:7b:
                    24:79:b3:58:60:40:d1:5f:e4:ee:65:6f:9f:af:24:
                    ff:06:87:51:8d:72:63:e0:fb:9b:2a:57:c8:64:b8:
                    b5:b1:52:1d:c0:91:2a:e4:1e:06:d4:43:ca:8a:f3:
                    f9:af:8f:6b:45:cd:ae:f9:16:62:8c:83:5a:c4:d8:
                    8e:81:e8:85:ea:77:36:fc:9e:2a:84:f9:64:86:95:
                    92:23:75:c2:34:1e:69:1d:a8:5a:72:36:35:73:3f:
                    14:78:e2:c1:73:ff:77:06:5b:0e:fb:99:97:43:8a:
                    66:44:26:25:6a:4a:60:86:15:04:d2:f8:3a:d0:d5:
                    9d:14:3c:77:06:51:e4:de:ea:e6:e8:39:15:41:39:
                    d6:64:17:1e:6b:47:30:98:eb:07:96:ec:51:fb:a4:
                    89:ab:3b:ad:09:07:ed:5a:af:91:dd:e4:4c:eb:88:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:65:6E:A7:CC:15:01:98:44:8A:37:93:C0:79:9D:4C:70:C3:EF:53
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS57429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:190::-2a06:a005:1bf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:d1:53:b8:13:4c:2d:04:ab:98:d1:a7:30:c4:02:11:94:
         62:e2:e7:e0:51:e5:59:c6:85:34:cb:50:9e:15:b0:8a:8c:61:
         80:8f:f0:1d:89:56:5a:71:03:70:b8:83:31:eb:06:f9:2a:c6:
         80:ba:82:72:2c:11:a8:2a:aa:34:7e:2e:cf:69:7d:51:c1:47:
         66:89:f2:23:d2:f1:34:e6:ed:2b:c5:b4:ca:53:23:29:58:9c:
         be:7a:16:db:26:41:36:39:81:c1:11:d2:78:f8:71:73:f1:45:
         0b:51:df:b4:e0:02:ae:56:46:3d:20:4e:05:54:4a:d7:8f:fc:
         5b:02:5a:d1:13:db:e8:74:b0:e8:34:bd:aa:ea:ab:5e:bf:08:
         cc:f8:13:fc:8d:0f:52:3f:0c:93:6c:cf:19:ff:e7:b1:72:d7:
         37:e8:c5:fd:c6:50:9e:0d:20:2c:95:ca:a2:cb:c3:26:04:cc:
         e5:fb:c8:7f:91:20:f9:12:47:ef:a6:55:d7:ab:7b:98:1a:b0:
         b6:db:fb:4e:b7:06:e7:f7:fa:17:49:27:ce:b0:a8:2d:c2:25:
         ef:c7:08:dd:7d:45:fa:5c:9e:4c:21:b0:f4:29:a6:59:6a:9c:
         9f:c7:fa:08:d4:32:1a:dd:fe:d6:ae:3e:f0:da:fa:ce:5f:2d:
         60:b3:2f:82
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUeA30vRlhNrEV91XkHSr0G/Acx+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKERFNjU2RUE3Q0MxNTAxOTg0NDhBMzc5M0MwNzk5RDRDNzBDM0VGNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLveT8IdlsXsNWPS+IZeSG6eIe
Vs2qESHxgQwp3WaLCN8zpxaXRxlOqAV35is3c8Q9nfZtt1oiwW8WOfNBOhKhfMD2
7LkSEHOSfz2b4R9Ih2DKSg//zm7CeyR5s1hgQNFf5O5lb5+vJP8Gh1GNcmPg+5sq
V8hkuLWxUh3AkSrkHgbUQ8qK8/mvj2tFza75FmKMg1rE2I6B6IXqdzb8niqE+WSG
lZIjdcI0HmkdqFpyNjVzPxR44sFz/3cGWw77mZdDimZEJiVqSmCGFQTS+DrQ1Z0U
PHcGUeTe6uboORVBOdZkFx5rRzCY6weW7FH7pImrO60JB+1ar5Hd5EzriLQHAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU3mVup8wVAZhEijeTwHmdTHDD71MwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTNTc0
Mjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgACMBQwEgMHBCoGoAUBkAMHBioGoAUBgDANBgkqhkiG9w0BAQsFAAOC
AQEAgrjRU7gTTC0Eq5jRpzDEAhGUYuLn4FHlWcaFNMtQnhWwioxhgI/wHYlWWnED
cLiDMesG+SrGgLqCciwRqCqqNH4uz2l9UcFHZonyI9LxNObtK8W0ylMjKVicvnoW
2yZBNjmBwRHSePhxc/FFC1HftOACrlZGPSBOBVRK14/8WwJa0RPb6HSw6DS9quqr
Xr8IzPgT/I0PUj8Mk2zPGf/nsXLXN+jF/cZQng0gLJXKosvDJgTM5fvIf5Eg+RJH
76ZV16t7mBqwttv7TrcG5/f6F0knzrCoLcIl78cI3X1F+lyeTCGw9CmmWWqcn8f6
CNQyGt3+1q4+8Nr6zl8tYLMvgg==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:30 2025 by rpki-client