Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          +543ipTeMIqG2YFRYTzy4xXMHeNDvZ7IgspSOIm6QE8=
Subject key identifier:   2C:61:21:97:D1:FB:06:BB:58:59:8C:D7:36:82:BD:93:DB:FC:BF:3E
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       03AC0AABFC9DC4C58500BB3046EFD5E22B6C46D3
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Wed 19 Apr 2023 00:19:32 +0000
ROA not before:           Wed 19 Apr 2023 00:14:32 +0000
ROA not after:            Wed 17 Apr 2024 00:19:32 +0000
asID:                     204857
IP address blocks:        2a07:54c5:1300::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:0a:ab:fc:9d:c4:c5:85:00:bb:30:46:ef:d5:e2:2b:6c:46:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:32 2023 GMT
            Not After : Apr 17 00:19:32 2024 GMT
        Subject: CN=2C612197D1FB06BB58598CD73682BD93DBFCBF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:39:27:3b:d5:9e:e3:ea:b9:c7:9f:9b:d3:
                    c3:f2:cd:1b:dc:22:31:13:c8:bc:34:98:8f:0f:b7:
                    e7:f8:e4:d9:90:08:f3:fe:0e:7b:56:d8:a2:22:b5:
                    a1:51:2a:e4:ab:41:f8:36:c0:4b:f9:45:7b:01:7c:
                    ef:75:58:31:42:ac:5d:27:b6:86:f1:b5:2c:fb:5b:
                    51:39:0f:06:30:b9:1e:56:64:d2:58:69:e3:80:7b:
                    a4:ea:ba:16:f9:27:6e:57:2c:32:ee:61:54:75:ae:
                    48:2a:04:c4:5f:b6:54:96:33:95:19:cc:66:6a:ed:
                    a5:37:84:6a:de:65:c6:3b:0e:26:80:99:ac:75:6c:
                    66:59:5b:b8:bb:47:8a:8c:3b:e2:90:4f:7d:06:c0:
                    9b:24:fd:08:92:4a:56:03:cb:2d:d4:b7:91:19:8d:
                    20:a7:5c:03:f4:a7:b2:cb:70:45:93:4b:e6:6f:18:
                    9a:14:b2:02:b0:88:73:29:17:e6:08:03:2a:c3:29:
                    f1:65:e4:6c:72:ac:1b:05:f0:c9:5a:35:f7:5f:84:
                    d7:f4:3b:f5:c8:ed:33:7a:c9:ee:97:d1:7c:b7:c8:
                    d0:5b:6d:49:45:98:6a:4d:bc:f6:25:60:f3:92:74:
                    5b:26:ed:17:f2:fa:1a:ff:fe:4f:6b:18:27:d0:ca:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:61:21:97:D1:FB:06:BB:58:59:8C:D7:36:82:BD:93:DB:FC:BF:3E
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:af:fb:df:94:4a:2e:d8:76:91:2e:63:c3:7a:50:46:78:39:
         fd:e3:7f:f1:a2:9b:0c:f3:40:a4:00:5c:68:7c:cf:b2:27:64:
         3f:05:31:80:43:44:53:c3:73:fa:20:53:ed:bc:17:fc:ad:ef:
         10:b4:3a:23:e1:5f:96:e6:d5:ff:94:a2:2f:64:23:49:b4:bc:
         56:8f:46:23:b8:32:ad:c7:2a:8f:d4:a1:0b:38:f9:79:5f:13:
         a2:47:6a:da:32:9a:08:87:88:6f:e1:7f:a0:1e:94:64:38:6c:
         05:ca:5b:b5:23:b0:1b:0f:46:25:9b:81:11:da:9b:4f:d1:cc:
         60:9a:ac:f1:95:11:d7:8d:85:4f:5a:b1:12:01:e5:2d:f3:ff:
         5b:b8:07:2a:86:ce:f3:19:49:4f:5b:dd:69:f3:6c:84:7c:c2:
         ea:1a:0a:f3:88:d7:39:92:ec:38:e2:b0:ef:4b:85:ee:7a:4d:
         c9:a5:1e:0d:21:4a:cc:42:4f:6d:34:d3:14:4f:7f:ef:71:34:
         ff:3a:4b:40:2f:0e:f2:cf:57:9f:26:3a:14:f2:cf:57:2b:6c:
         e5:54:af:d8:cd:07:68:bc:9a:57:4d:bb:a8:bb:dd:eb:85:9f:
         07:98:42:60:fa:e8:55:3b:f6:31:95:93:4a:eb:01:00:5a:55:
         81:47:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:04 2025 by rpki-client