Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
File:                     3134342e34382e38312e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier:          24euRIUnP5qjBPS9auKl/uxMHsqny4zaEQ8deHBhxv8=
Subject key identifier:   2B:ED:CD:55:BF:C0:72:A3:48:75:F5:66:4D:20:7F:1C:14:68:76:50
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       7F9D5DDDB976A0FB50307A13E6C293A1F7A69120
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     213122
IP address blocks:        144.48.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9d:5d:dd:b9:76:a0:fb:50:30:7a:13:e6:c2:93:a1:f7:a6:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=2BEDCD55BFC072A34875F5664D207F1C14687650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:8f:4a:bb:34:f3:cc:a7:fa:a7:30:25:b0:
                    83:d0:8e:a1:7b:41:34:c1:d4:20:f9:56:77:71:cd:
                    d8:1c:ea:06:ef:bd:25:87:e4:3b:ac:fd:ca:7b:78:
                    7b:ef:e6:91:48:85:f8:1d:84:2c:6a:94:7e:8c:02:
                    73:4d:bc:1f:e7:36:cd:2e:64:ce:d4:26:bc:15:8b:
                    2c:b4:19:7a:2f:9e:fa:92:8f:ac:0d:79:c7:5d:4f:
                    f6:18:82:ac:8c:2b:ee:56:a5:c6:95:ad:79:8e:de:
                    df:14:ef:df:94:83:0c:f0:8c:31:a7:f0:37:3c:d4:
                    c0:b5:1c:e0:d8:9b:04:be:e0:01:7d:6e:10:da:29:
                    99:4d:e8:9e:0b:88:a7:12:7c:fe:7a:1c:65:b8:3b:
                    67:0d:22:c2:85:4d:7c:c7:bb:92:50:53:fc:49:e3:
                    ab:7c:9c:b0:e8:25:8a:ee:84:6e:d0:4a:40:0d:b3:
                    55:62:1e:55:df:f4:d8:56:d3:59:5c:83:e0:ed:a5:
                    d9:97:21:71:3e:5d:f5:6e:7e:27:0e:c5:53:b3:34:
                    40:7c:cc:82:c6:4c:84:2b:a3:8a:bd:e0:2a:bf:7d:
                    0c:e4:50:94:b4:ef:1c:c0:8a:64:ec:cc:2d:84:e3:
                    bb:ae:a8:2a:c4:8e:d2:84:1e:65:20:e4:b9:b1:d6:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:ED:CD:55:BF:C0:72:A3:48:75:F5:66:4D:20:7F:1C:14:68:76:50
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3134342e34382e38312e302f32342d3234203d3e20323133313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:97:5d:75:4e:bf:ae:f1:3e:7c:76:70:0f:d2:67:90:fa:59:
         eb:eb:0b:e4:3b:be:e2:ae:b0:11:14:2a:9f:37:d2:26:c0:b3:
         74:e6:90:bc:0a:d3:19:79:bd:cf:c2:f6:2f:00:2c:c8:ef:bf:
         57:fb:8e:6d:38:2e:98:14:8c:13:93:3b:96:d0:55:87:31:d0:
         67:c4:42:a4:17:18:19:16:1e:32:db:52:e7:60:b3:3c:f9:ce:
         3f:41:e4:0b:20:79:c7:d2:23:f6:68:32:ea:8f:41:38:a8:9b:
         a4:56:26:55:85:7f:71:58:a6:a8:60:e0:ab:c2:b2:48:38:7b:
         3b:6d:9e:cc:ae:1c:84:9a:6f:d5:76:fb:f6:84:0d:a2:b6:e0:
         de:32:53:f2:b0:37:3d:c3:bf:7e:f1:71:65:60:ae:c6:54:fe:
         0c:b9:c2:c6:8f:f1:b6:19:66:fe:d4:54:68:44:b7:ac:81:6a:
         b1:fd:c9:9a:67:6c:75:c6:fd:4f:74:2e:55:08:cd:0b:7d:aa:
         58:c8:50:ce:39:36:00:09:c9:14:8a:d4:d4:7b:79:90:af:6c:
         a1:a8:67:af:bb:3d:05:39:68:d8:97:7a:1f:51:36:d1:aa:1e:
         3c:91:dc:a7:72:d4:cb:07:d2:9e:d8:6d:0d:97:98:db:0d:35:
         63:f2:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:53 2024 by rpki-client on console-ams.rpki-client.org