Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa
File:                     326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          qYdZIDTIzgkP6gowRKIRr8FEM+q3x3Dh9XfcwLz+2bA=
Subject key identifier:   7E:3F:CF:B4:EE:FE:C6:21:A6:7A:29:A0:36:37:0D:00:D0:DF:9E:11
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       256A971A57C5D120D7513B2F2330CB8D83D41117
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa
Signing time:             Wed 19 Apr 2023 00:19:31 +0000
ROA not before:           Wed 19 Apr 2023 00:14:31 +0000
ROA not after:            Wed 17 Apr 2024 00:19:31 +0000
asID:                     212618
IP address blocks:        2a07:54c5:a000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6a:97:1a:57:c5:d1:20:d7:51:3b:2f:23:30:cb:8d:83:d4:11:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:31 2023 GMT
            Not After : Apr 17 00:19:31 2024 GMT
        Subject: CN=7E3FCFB4EEFEC621A67A29A036370D00D0DF9E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:46:66:9d:2e:86:39:e1:46:81:0a:da:23:35:
                    0d:4a:76:e3:db:5f:e6:97:a0:50:5b:c7:37:2f:e2:
                    f3:f8:d7:06:c6:a4:1a:4c:45:8b:44:b7:7a:04:79:
                    41:bd:db:69:90:73:d2:3a:5c:eb:95:0b:a2:09:36:
                    81:d2:95:fc:8b:8c:df:33:e9:f7:3d:cd:c3:e9:ab:
                    b2:20:b8:e7:5c:4e:23:0e:1d:54:2f:43:a5:4b:bd:
                    5d:2c:5e:bb:9c:b2:37:58:58:29:16:bf:30:31:bc:
                    fe:af:73:68:95:95:7e:d1:c0:51:98:bb:be:e4:c0:
                    a3:d0:af:37:42:76:38:b7:e4:d0:fd:cd:4e:b1:4c:
                    77:99:4f:e8:3a:be:1c:a6:25:2e:fe:59:fe:6e:a2:
                    ff:e0:c4:a2:c7:2c:47:d8:fa:2a:54:19:2b:3e:38:
                    a5:e1:11:29:4f:6b:a2:bb:07:86:c2:99:37:2f:a3:
                    01:32:75:89:e5:d9:4e:b0:4e:f2:58:ce:a4:3a:b3:
                    55:80:59:89:bf:12:0f:8f:53:a5:3f:f0:17:2c:d0:
                    f0:51:af:86:09:f9:b3:ff:32:4b:96:95:17:ae:55:
                    61:5e:b8:c1:1a:28:fd:5f:b9:cb:47:c8:d3:5c:11:
                    cb:34:ea:4b:d8:2e:57:15:9b:ad:e2:b5:22:a1:e2:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3F:CF:B4:EE:FE:C6:21:A6:7A:29:A0:36:37:0D:00:D0:DF:9E:11
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a613030303a3a2f34382d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:0f:59:cc:2d:8a:d5:f0:9b:02:9b:b6:9b:34:c1:ed:72:06:
         20:fb:7e:ff:28:7d:e6:0f:eb:91:da:d3:a9:29:c2:d8:e2:6f:
         ce:af:82:ca:5d:97:e8:b6:d4:1e:83:f7:82:62:a6:f6:b5:a9:
         c2:ef:f4:cc:bd:dd:d3:6a:9b:b1:ac:d4:5a:f4:e5:bb:45:b2:
         5f:fe:68:57:19:36:64:76:ac:63:f0:ac:ca:cb:c4:51:3c:14:
         fb:c0:d3:b4:01:f9:0b:34:d7:62:e0:79:08:07:cb:85:37:ae:
         a2:b1:af:19:bd:5d:52:f1:bb:38:ce:2d:0f:ed:fe:20:04:08:
         6a:97:0d:50:9a:86:af:7c:c3:d3:0f:90:51:f1:db:76:ff:30:
         76:da:47:25:be:43:a6:52:2e:bc:6f:df:30:ce:b2:44:29:4a:
         41:3a:9a:57:71:24:df:1e:49:2a:d6:ff:27:b5:c8:6f:5b:df:
         05:b7:40:de:79:8f:4c:25:5d:32:7b:3d:81:63:78:30:22:10:
         4a:51:e2:54:a1:b5:a5:7d:e0:51:10:62:a6:ec:95:56:bc:33:
         d4:e2:42:f5:c8:5a:e8:e1:f2:0e:18:cc:a0:57:28:5b:47:87:
         6f:de:ca:d4:ca:4f:e9:dc:3d:70:5a:c5:3c:1d:91:1c:e8:ea:
         d6:d0:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:12 2025 by rpki-client