Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS1012.roa
File: AS1012.roa (raw, json)
Hash identifier: 6dbypvQjLVaxe50+fmQBQacm2bOHUol4M5tnidpBXh4=
Subject key identifier: 00:95:89:A1:8C:3C:7D:F0:78:A9:AE:6D:E5:B8:0B:D5:2B:19:8F:E6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 266BFC6803DF57B20CF4D6618F88A51DEFCB6BDD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS1012.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 1012
IP address blocks: 2a06:a005:1c80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:6b:fc:68:03:df:57:b2:0c:f4:d6:61:8f:88:a5:1d:ef:cb:6b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=009589A18C3C7DF078A9AE6DE5B80BD52B198FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:ec:98:f8:85:6d:b9:03:14:cd:fa:f9:97:
2b:b4:02:49:e9:56:06:cb:dc:59:0b:16:4a:9b:1d:
e1:b7:6f:c1:e7:d9:1a:34:e2:89:93:c9:3f:4f:97:
17:6b:53:56:4b:34:cd:ad:fa:85:b3:5d:53:5a:c5:
be:cf:d5:ff:6c:80:a6:a0:46:6b:1a:90:cf:57:3e:
42:8c:6a:3d:f8:fa:cc:c2:6e:80:bf:7c:92:ea:29:
bb:62:8f:94:7b:e8:89:0f:f8:a9:7a:b9:df:8d:74:
61:fb:9e:a0:87:fd:7e:88:6e:85:65:be:37:06:ac:
e9:0e:42:9c:d1:f8:27:57:c0:cf:da:46:a4:91:a1:
bb:6e:71:c4:8c:0a:2f:eb:20:46:ec:5f:1f:e2:a8:
e1:45:17:13:18:b0:8b:0e:fc:9a:01:83:45:9e:4a:
5d:77:fb:a8:4e:a5:78:67:69:df:98:6c:41:1a:ef:
05:48:4b:c6:32:ea:0b:46:b1:84:96:6d:54:60:6a:
f8:39:f3:20:68:09:ff:ba:9b:a3:dc:b5:52:3b:61:
a0:f0:64:0f:bc:e6:50:84:01:65:a3:85:6a:42:e9:
8d:25:28:4e:b8:af:74:61:d4:94:d2:7c:81:53:3b:
bc:54:bf:8a:b6:4a:bf:ae:04:2b:58:65:0a:43:ca:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:95:89:A1:8C:3C:7D:F0:78:A9:AE:6D:E5:B8:0B:D5:2B:19:8F:E6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS1012.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c80::/44
Signature Algorithm: sha256WithRSAEncryption
a3:fc:55:e0:13:fb:ed:e2:29:08:26:d3:c6:5b:4f:32:02:1b:
c6:22:56:a2:1d:9f:27:a0:85:10:ad:0d:10:b4:20:c4:04:c5:
ab:26:b7:db:ff:01:a5:e9:9f:a0:48:13:0b:49:99:8a:77:f9:
80:3c:a4:0a:56:54:75:2f:78:55:cb:d0:4c:18:66:c1:c2:ab:
99:4b:94:84:72:78:61:13:57:ee:87:3b:ba:74:28:29:ea:66:
90:76:2a:28:71:bb:9b:c6:b8:d1:99:c1:84:71:a7:60:39:d6:
63:03:19:80:f1:f3:bb:0d:cf:a3:b5:af:15:da:7a:18:6d:37:
4b:dd:12:65:5b:9c:13:4a:9a:36:a9:e7:cf:80:9b:0e:c4:e9:
04:09:d2:25:0f:cb:64:73:c5:1f:32:35:cd:a0:52:c4:c5:40:
5d:83:2d:14:43:a5:df:41:e5:ca:60:65:5f:c7:10:f7:e9:de:
11:3f:f3:70:56:de:71:ae:c9:bd:90:e9:c7:04:7a:37:85:b2:
dd:d9:6e:7e:3a:b1:3d:66:18:60:4e:64:af:bb:b7:b7:87:04:
cd:f0:70:a6:79:a1:cd:a9:ac:26:94:b0:e1:2f:c0:23:92:c6:
10:b1:1e:08:15:07:d0:c3:96:32:21:a2:9e:9c:ee:88:3c:a2:
6c:f7:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:04 2025 by rpki-client