Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204901.roa
File: AS204901.roa (raw, json)
Hash identifier: ZzPZqfV+ClLA9nqUwP7Vl7lIGV7ujrRUgQfkFBeZcow=
Subject key identifier: 8A:E0:9A:EA:28:64:A2:49:9B:78:01:C4:DB:6C:E6:48:85:32:91:53
Certificate issuer: /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial: 5A5A60CBC6814A29B8C9734335AACCC0B729B326
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access: rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204901.roa
Signing time: Thu 23 Feb 2023 18:37:12 +0000
ROA not before: Thu 23 Feb 2023 18:32:12 +0000
ROA not after: Thu 22 Feb 2024 18:37:12 +0000
asID: 204901
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5a:60:cb:c6:81:4a:29:b8:c9:73:43:35:aa:cc:c0:b7:29:b3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Validity
Not Before: Feb 23 18:32:12 2023 GMT
Not After : Feb 22 18:37:12 2024 GMT
Subject: CN=8AE09AEA2864A2499B7801C4DB6CE64885329153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:39:e7:4b:8e:57:38:1e:89:1f:2e:46:71:
73:9f:a2:ed:d3:02:5a:55:a2:25:12:f2:e3:a4:08:
3d:c1:e6:4b:fc:8d:f0:76:47:13:09:a3:0f:56:dd:
5d:72:d5:3a:06:82:e3:64:54:f4:7d:26:5b:f5:82:
41:fe:e8:c8:2a:ab:c5:0c:96:24:a3:1a:f6:8a:50:
47:dc:11:7f:1c:20:11:a9:75:35:6d:5f:fd:94:b6:
b3:22:31:46:cf:91:a7:14:6a:21:1f:68:0d:5c:e6:
e2:76:db:28:cd:85:06:c8:0e:3c:11:4e:43:fb:41:
85:6a:8a:4e:4a:dc:74:03:0f:2b:5d:db:30:e4:ff:
63:66:51:45:e9:41:5c:d3:98:86:3d:b7:9d:4b:5d:
a0:2e:00:d8:4e:89:30:12:96:0e:28:93:c3:60:b2:
c5:db:4d:eb:26:a6:49:7b:8d:8b:09:de:89:c7:93:
6e:9b:8a:66:2c:ca:95:9d:72:f6:5f:eb:ae:d9:2a:
b4:a2:33:7d:7b:09:b6:1f:97:b4:5b:b4:94:e5:e6:
7f:a0:95:99:0f:83:0e:af:c7:8f:32:a0:b8:5f:11:
51:c8:a3:85:a8:a5:9f:4d:6a:72:6c:63:c9:fd:34:
1f:ff:b4:27:04:21:51:b1:72:24:ea:fc:fe:d3:06:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:9A:EA:28:64:A2:49:9B:78:01:C4:DB:6C:E6:48:85:32:91:53
X509v3 Authority Key Identifier:
keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204901.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
3c:1c:c2:a2:46:11:39:d0:f1:f6:6a:50:f7:85:1e:a7:5c:96:
c2:3b:a6:8f:c6:b2:78:d2:bb:cc:a8:cf:1e:fe:61:72:ac:4b:
31:b9:2c:1f:bd:75:c2:3c:b5:51:69:5f:70:56:0c:72:70:56:
0c:68:00:37:c3:23:27:1f:35:6f:92:9f:9e:18:b5:f0:e8:43:
e1:15:5d:52:0a:16:80:75:36:64:27:f1:57:5c:fa:38:b8:ec:
b8:76:14:6f:8f:5d:40:6f:50:6f:61:1a:03:75:3e:15:d6:ab:
ad:6d:69:cb:25:1e:df:3b:2f:34:b7:09:11:03:c1:73:42:16:
a0:8f:2e:4c:8a:41:e7:0a:b9:86:95:0e:d3:30:46:5c:7b:e4:
e2:b3:be:ab:1c:da:af:27:94:f9:b2:e6:02:01:36:2c:24:dc:
ff:bb:73:28:3a:6e:29:1e:56:e0:33:9e:39:4c:66:9a:fb:74:
91:8a:64:06:55:de:9c:83:e0:79:f4:e5:5c:a7:fb:0c:1f:8b:
6c:c5:c1:67:2b:4d:30:0b:97:b0:ac:fc:9c:ab:23:56:8d:18:
6b:9b:68:7c:a0:a9:2b:be:cc:86:53:48:da:9b:f8:bc:8d:0c:
e4:8b:1f:89:20:27:b4:06:26:e7:b6:30:90:3a:cd:50:a2:41:
0a:d1:45:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:59 2025 by rpki-client