Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
File:                     3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          xgY8YF1MuAbvNRCoermW+vAo/mmH304ZFh5ZgiWeuQU=
Subject key identifier:   AC:DA:BD:EF:AA:E3:19:35:41:9D:A2:66:E6:6F:2A:97:FF:FD:37:D9
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       1624A269C0AAA772F651D1C459BA9ABC00404BD1
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:38 +0000
ROA not before:           Wed 21 Dec 2022 16:51:38 +0000
ROA not after:            Wed 20 Dec 2023 16:56:38 +0000
asID:                     61138
IP address blocks:        103.208.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:24:a2:69:c0:aa:a7:72:f6:51:d1:c4:59:ba:9a:bc:00:40:4b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:38 2022 GMT
            Not After : Dec 20 16:56:38 2023 GMT
        Subject: CN=ACDABDEFAAE31935419DA266E66F2A97FFFD37D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:5d:f4:00:ed:14:0b:fe:1c:90:6c:a9:cc:
                    09:c8:ef:5a:b9:e6:f6:0f:90:cb:65:01:d6:a6:95:
                    65:eb:15:46:0f:2b:65:10:30:41:1f:80:2a:8f:94:
                    ed:04:d4:10:13:d5:79:eb:24:b8:fb:2b:48:8c:63:
                    25:1d:4b:26:41:69:96:91:72:a5:d4:9b:9a:83:69:
                    62:a4:fc:98:6d:04:f3:01:c3:ea:db:40:78:db:b9:
                    8d:57:25:86:be:42:ab:23:8b:94:a7:fc:64:ca:75:
                    f8:90:8f:8a:9f:06:f1:f0:cb:63:cb:24:fa:45:30:
                    10:af:44:3e:85:0f:0c:1e:46:8d:7e:ca:42:7e:89:
                    30:22:a9:9d:4e:fd:27:ed:7b:3c:34:86:ec:c0:bd:
                    de:2f:90:26:c3:73:27:8c:95:15:f6:dc:af:29:95:
                    ac:9b:e5:2f:1e:52:ff:de:9e:7c:ea:e1:89:9d:2b:
                    88:2f:a2:36:d4:41:f8:3d:f5:5c:25:db:6c:62:3b:
                    09:e0:76:64:a7:5e:b3:34:f4:b8:45:20:ce:17:22:
                    48:c0:64:77:aa:36:c0:fe:0a:d5:1d:c5:7e:07:0b:
                    c2:d2:71:a2:fc:1f:e8:cc:43:2d:cc:86:c5:f2:b1:
                    9a:e3:77:5a:cd:27:ed:bf:1f:39:e6:c6:fd:97:d9:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:BD:EF:AA:E3:19:35:41:9D:A2:66:E6:6F:2A:97:FF:FD:37:D9
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:b6:70:c1:30:88:ba:d7:ff:f7:3a:11:2f:8a:30:ea:79:
         1c:f6:0e:b8:c7:5f:6f:bf:1b:8c:d3:71:f5:1e:9d:05:6e:34:
         e1:f2:6c:2a:49:0d:62:03:a5:fe:df:8e:35:9d:7d:5a:5a:76:
         cd:9d:9a:3c:ee:4f:c9:be:5e:ce:0d:a3:8c:c6:53:53:cd:e3:
         b1:70:c0:0d:ce:80:60:f0:02:ae:1b:f2:d8:23:3a:f1:fd:2c:
         83:50:e5:6b:49:a4:57:58:d3:25:b4:18:36:cc:da:16:12:0f:
         af:12:b5:c1:51:fc:aa:2e:ab:b1:34:d0:39:93:c0:f4:c1:c7:
         65:e1:e6:32:ea:62:a8:a7:a0:4c:85:22:b0:f7:d5:2a:8e:e2:
         0e:6e:8a:ce:06:b9:c8:f8:bc:0e:f5:a4:ff:69:e4:a1:f8:ad:
         7f:25:a0:a9:e8:02:cb:28:ff:ba:b5:49:7b:4b:11:45:5c:70:
         ea:f3:af:ee:a3:08:5d:7f:c6:46:94:4d:6e:ee:f3:0e:85:c6:
         71:85:e3:17:ab:14:e0:f7:85:91:ae:6b:4f:fe:21:f0:a7:da:
         26:b0:39:a0:75:ec:4a:a5:6f:d8:63:40:a2:01:1d:ae:9a:5e:
         17:9f:ed:8b:a9:e2:b1:00:3c:57:73:6b:73:f2:56:c0:23:06:
         a8:98:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org