Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa
File:                     326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa (raw, json)
Hash identifier:          ceRB5AkpuYhgORfn7GKC0IiPG9PaZAiI0IkOqid3v5w=
Subject key identifier:   4B:69:85:8A:FD:4B:8A:4D:D5:9C:93:7A:47:C2:2A:35:37:2F:23:F2
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       133A176938EBAE88E0E9976068233279948A7D3F
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa
Signing time:             Sun 23 Apr 2023 12:50:31 +0000
ROA not before:           Sun 23 Apr 2023 12:45:31 +0000
ROA not after:            Sun 21 Apr 2024 12:50:31 +0000
asID:                     203597
IP address blocks:        2a07:54c5:1400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3a:17:69:38:eb:ae:88:e0:e9:97:60:68:23:32:79:94:8a:7d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 23 12:45:31 2023 GMT
            Not After : Apr 21 12:50:31 2024 GMT
        Subject: CN=4B69858AFD4B8A4DD59C937A47C22A35372F23F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:7a:e0:8b:ce:49:52:54:9f:7e:66:c6:2c:
                    7d:4c:46:2a:12:9f:70:2c:96:3e:bd:78:2a:c2:bc:
                    51:98:cb:9e:e3:b2:d5:7c:fd:8f:9c:74:fe:49:5a:
                    ea:6e:b4:57:fd:a4:4e:01:65:00:de:02:f6:a1:bd:
                    35:cf:1b:ee:82:27:d6:9a:ce:48:cf:5b:77:db:9b:
                    30:fa:5c:c2:60:9d:0e:a9:2e:44:40:63:ba:7e:e6:
                    42:54:e4:51:b0:61:eb:2e:3b:38:7b:8d:cb:6e:75:
                    85:1c:15:26:47:15:26:aa:76:e1:b7:bc:08:4d:cc:
                    3d:26:87:e7:fb:c1:70:59:0a:fb:7e:3c:47:0e:5f:
                    9f:bc:cd:9c:77:ba:db:e3:e1:3e:6b:f5:5e:98:7e:
                    07:ea:4d:6e:fc:f6:aa:dc:dc:a3:9d:d1:79:02:35:
                    f1:be:41:4a:40:0b:03:fe:9b:f8:02:ef:5c:e5:a9:
                    87:60:09:30:56:13:3e:3a:96:92:5a:24:90:71:f1:
                    76:e8:81:bb:83:b3:6c:34:25:8d:45:7c:ee:9c:30:
                    68:74:05:2c:30:7b:c1:4a:88:94:19:ed:26:81:14:
                    92:41:fc:5f:fc:e1:50:cd:3b:55:56:0a:83:6c:8a:
                    f9:10:80:47:4d:6d:59:57:bb:3d:f8:e4:bf:6f:ea:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:69:85:8A:FD:4B:8A:4D:D5:9C:93:7A:47:C2:2A:35:37:2F:23:F2
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313430303a3a2f34302d3438203d3e20323033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:82:86:36:59:b2:e2:bd:d4:2d:e4:4b:a4:85:20:17:2b:5c:
         ec:a5:32:60:a9:6a:82:ec:9d:f1:05:ab:35:28:5a:ac:dd:9e:
         66:b5:93:eb:10:94:64:93:b5:b8:10:4c:2a:27:7f:87:ea:e3:
         f0:3f:59:82:35:43:6c:de:32:ea:42:09:59:22:27:5d:02:66:
         f6:52:21:a4:5f:f5:15:1a:c4:eb:3f:9a:17:3a:42:45:9e:7c:
         f6:cb:d0:2a:18:02:c2:37:f5:00:e1:af:4f:b9:c6:72:58:98:
         4d:28:53:5a:83:2b:66:fe:89:c8:6c:aa:c4:61:b8:b0:a8:d4:
         68:24:02:2f:b9:02:c8:c6:b6:84:55:f8:66:6b:eb:82:88:e6:
         e2:56:e0:4f:d7:1c:3b:79:ab:85:1b:07:b9:13:40:f0:9f:e0:
         e7:a1:8b:49:fc:94:ee:03:12:ba:70:fb:94:93:c0:7c:6d:cb:
         cf:c1:60:a6:58:74:3f:7c:5b:7c:e9:4b:5d:83:35:0b:80:fe:
         f8:b0:6d:9c:b1:11:78:99:95:2c:38:78:4c:0b:77:e0:bd:b8:
         17:91:5e:4b:60:55:fe:6d:53:2b:dd:dc:95:61:89:b9:41:60:
         1b:83:d0:d0:59:a3:c2:54:02:c2:3d:37:3f:a8:a6:b0:1f:39:
         98:35:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:34 2025 by rpki-client