Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa
File:                     326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa (raw, json)
Hash identifier:          wpR5j8qYy8Xwy32OwbcDIJsVtJ9H0EKkHYJ0+fiQ1dw=
Subject key identifier:   04:6D:33:EA:D1:ED:AF:46:44:51:E4:E6:AF:DC:1B:5F:32:EA:C6:2D
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       28473B24D74FCEBCFCFC9E306DF53418A699DCEA
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa
Signing time:             Wed 19 Apr 2023 00:19:31 +0000
ROA not before:           Wed 19 Apr 2023 00:14:31 +0000
ROA not after:            Wed 17 Apr 2024 00:19:31 +0000
asID:                     199765
IP address blocks:        2a07:54c5:1600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:47:3b:24:d7:4f:ce:bc:fc:fc:9e:30:6d:f5:34:18:a6:99:dc:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:31 2023 GMT
            Not After : Apr 17 00:19:31 2024 GMT
        Subject: CN=046D33EAD1EDAF464451E4E6AFDC1B5F32EAC62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:be:46:e1:e6:dd:7a:98:3c:35:5d:43:8a:
                    67:3f:f4:79:3e:48:58:a1:8a:eb:3a:aa:89:69:0a:
                    b3:e7:fc:bc:a3:cc:8e:54:5d:05:02:36:e8:40:22:
                    be:6d:e4:20:0d:bd:cb:de:97:46:ab:d0:34:be:e5:
                    f6:f5:0a:fe:19:59:ba:58:f6:e4:08:df:6c:53:c0:
                    06:63:5d:1a:86:00:80:14:52:9f:c2:b5:0a:0f:d2:
                    82:98:58:ed:0e:0d:51:0e:7b:2e:27:71:91:ca:b0:
                    3b:49:b4:80:fe:99:71:cf:48:44:15:04:5f:97:d7:
                    af:7a:a9:b6:d6:fb:7c:48:59:64:d1:bb:56:d5:b0:
                    e0:fb:8b:5e:e7:f8:81:fe:5d:1d:4d:50:ce:60:5d:
                    e9:e8:42:ee:0c:76:71:00:92:74:38:ed:ab:50:6b:
                    b9:00:99:5f:9c:d9:df:41:ac:63:3a:bd:a3:45:20:
                    b8:c2:c7:3c:00:0e:e9:04:af:7a:2b:41:a1:b2:48:
                    d2:b3:33:30:ce:af:79:60:e3:1b:46:cb:8f:66:f1:
                    67:84:36:ed:9c:9e:8d:ee:06:e6:fa:e3:9a:cb:e0:
                    fd:e2:3a:72:96:5e:9b:e9:b0:b0:13:ba:ea:f9:01:
                    6e:db:19:f5:68:4d:ea:fd:2f:cf:f1:a4:bd:36:f1:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:33:EA:D1:ED:AF:46:44:51:E4:E6:AF:DC:1B:5F:32:EA:C6:2D
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         ce:e8:90:68:71:41:34:cd:01:71:f5:2d:e2:32:af:c4:aa:5e:
         39:f0:a9:ff:69:e9:3e:95:1e:63:00:cf:38:a8:0e:fe:b8:ae:
         9f:10:56:3d:89:6e:99:c5:6b:f2:9e:0a:11:1d:75:fe:8c:3a:
         fb:41:9d:c5:30:06:2f:19:3b:a1:26:21:4a:ef:e2:e0:6c:32:
         f1:18:01:69:8e:97:a0:3c:e2:92:2e:a6:77:28:dc:e4:d5:c4:
         96:e6:69:f5:c9:14:de:e0:5b:de:3c:b3:b5:b5:d5:92:8a:c4:
         4c:d9:18:ef:76:96:ea:83:56:83:93:2d:16:09:68:99:b2:d1:
         c0:b2:82:b8:99:cb:56:28:fd:92:18:fa:52:58:15:06:29:24:
         1b:d3:c7:1c:67:63:b8:7b:b9:03:87:fc:65:73:fc:a9:77:99:
         b9:ff:e9:a7:de:82:ba:8a:65:a6:2d:55:4c:9c:bf:92:e9:7f:
         e4:2c:71:35:37:c8:d3:07:9c:a4:c1:90:2c:b8:2a:4b:4a:8c:
         ea:ec:61:b4:07:79:d5:ac:4d:81:d4:08:63:5b:44:f9:ad:5c:
         a5:3d:a0:e9:cf:28:12:af:5d:ec:7f:e6:1a:75:0c:79:f8:70:
         db:fb:be:0a:2f:01:71:ae:45:e9:96:3e:bd:12:a1:d4:ea:55:
         af:52:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:40 2025 by rpki-client