Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313830303a3a2f34302d3438203d3e20313939373635.roa
File:                     326130373a353463353a313830303a3a2f34302d3438203d3e20313939373635.roa (raw, json)
Hash identifier:          P5uKmHevDgr39GBtRnAyUhcTOzDsUkQO3rvYcbZA07w=
Subject key identifier:   93:EB:CB:EC:DC:B8:EE:65:8B:B4:49:B3:38:6C:89:47:5C:69:A8:34
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       166A980FF0023EDE854B708916578FAD1DF965D8
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313830303a3a2f34302d3438203d3e20313939373635.roa
Signing time:             Sun 23 Apr 2023 15:18:58 +0000
ROA not before:           Sun 23 Apr 2023 15:13:58 +0000
ROA not after:            Sun 21 Apr 2024 15:18:58 +0000
asID:                     199765
IP address blocks:        2a07:54c5:1800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6a:98:0f:f0:02:3e:de:85:4b:70:89:16:57:8f:ad:1d:f9:65:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 23 15:13:58 2023 GMT
            Not After : Apr 21 15:18:58 2024 GMT
        Subject: CN=93EBCBECDCB8EE658BB449B3386C89475C69A834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:67:63:97:5a:a7:d4:54:e5:65:1c:2d:b3:
                    78:d2:ae:72:74:ff:26:96:2d:2c:dd:e4:73:45:83:
                    a8:b8:06:ca:11:22:8c:e0:c4:66:7a:3c:18:21:e5:
                    94:09:70:ef:b5:41:c2:95:7e:00:3e:cf:1a:cf:03:
                    95:9c:00:00:d1:e6:cd:98:fe:a5:c4:39:15:25:53:
                    ae:f0:d9:49:4c:2b:0b:96:02:1f:f6:86:8b:af:0c:
                    67:98:f1:d5:52:b0:2f:5e:55:08:d1:9b:29:fc:0d:
                    6c:03:2d:13:97:bf:7d:34:d5:2a:d4:e3:d0:78:c0:
                    4b:6e:7b:55:6e:15:52:4a:fc:f5:f1:73:95:a0:da:
                    46:e5:31:9a:2f:08:fa:74:fa:ae:5c:76:5a:ef:1b:
                    26:6c:ff:58:43:86:bd:f1:e0:ed:d0:5e:0e:69:75:
                    6b:3a:7b:a9:1c:e7:19:48:e6:15:fa:ea:3a:cd:13:
                    83:80:a4:41:71:30:d4:7e:82:97:e1:63:24:7a:a5:
                    9e:c3:8c:da:bc:a8:9f:24:ba:9a:56:e8:3c:1b:ff:
                    be:9c:bb:c9:9d:b4:49:d2:b6:41:8b:26:18:3c:01:
                    53:31:ae:47:85:d2:2b:a2:dc:27:16:3b:3e:c4:c2:
                    c6:8e:4a:6d:0d:98:ca:4e:ff:87:57:15:73:84:4c:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EB:CB:EC:DC:B8:EE:65:8B:B4:49:B3:38:6C:89:47:5C:69:A8:34
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313830303a3a2f34302d3438203d3e20313939373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:2c:71:61:9c:ab:92:4e:3c:7e:7d:1a:ff:0a:4f:94:46:15:
         0d:4b:29:6d:d0:55:bd:5c:54:c8:15:d9:5a:cd:c7:04:ac:00:
         44:43:3a:41:b9:26:df:0d:e0:64:5f:5f:9d:66:53:4e:46:c3:
         79:91:bd:db:5e:8f:a7:b6:5a:83:98:3d:b9:cc:ab:25:7f:1c:
         6e:ba:e2:a3:97:6c:ae:35:59:e4:20:62:51:d0:5e:1d:d4:a1:
         17:bf:77:4e:0c:ef:e7:34:3a:85:9b:c2:82:1e:f5:8f:4d:f3:
         9a:8a:2e:b4:af:1c:0e:d2:ff:d8:4d:3d:e7:e1:ff:19:44:c4:
         d0:7a:59:5f:58:8e:9e:81:5f:15:d0:b8:c7:3f:aa:3e:ab:a6:
         0f:79:8a:8b:7b:f4:62:e1:86:3f:6a:a3:cf:f8:0b:f6:4c:41:
         2f:3d:41:21:8a:83:58:13:2b:82:7c:2e:a8:10:50:73:1e:72:
         e6:a7:d0:42:0c:6b:45:58:52:0c:7f:db:b3:54:c6:79:9a:48:
         2b:c8:f5:87:87:93:3c:68:25:ef:de:59:88:f6:67:bf:2c:51:
         85:3c:b7:e0:e6:dc:fc:36:4f:71:44:17:01:57:d4:62:54:9d:
         50:db:8b:e2:4c:2d:34:22:2a:2b:d3:99:ee:5b:ca:d6:ac:ce:
         23:0e:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:00 2025 by rpki-client