Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS132282.roa
File: AS132282.roa (raw, json)
Hash identifier: tRapU7A8wG6gyJ6KTdtXoKgNWjrXY73maln0nvg3wmk=
Subject key identifier: 2E:62:54:BE:86:34:AD:9E:9E:3E:8B:75:90:85:E6:CA:3D:9F:7E:A1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7036031DAE4B806B658AB91E75ED26B15CD92CC9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS132282.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 132282
IP address blocks: 2a06:a005:bb0::/44 maxlen: 48
2a06:a005:c70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:36:03:1d:ae:4b:80:6b:65:8a:b9:1e:75:ed:26:b1:5c:d9:2c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=2E6254BE8634AD9E9E3E8B759085E6CA3D9F7EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:71:38:40:cb:9f:66:3f:72:0c:a6:be:c1:
fe:70:f5:8f:6b:67:9a:41:cf:81:61:81:eb:65:ae:
1d:21:56:ed:7b:7e:29:64:95:df:82:b1:5a:35:06:
1b:b9:06:ec:be:c6:c4:5e:a2:28:95:f6:e5:74:50:
bf:91:9b:29:0c:3a:2c:18:1b:53:b5:70:cf:3d:4d:
ed:5b:0c:57:ef:44:30:46:0d:14:b8:23:9b:aa:8b:
33:7d:6d:71:55:d6:36:8c:e5:dc:92:22:72:f8:be:
a6:ae:61:3e:35:fd:13:86:b6:72:9f:22:b2:8a:98:
a4:b3:c2:7b:53:dc:37:01:d6:81:95:ae:fa:fb:c4:
b1:e9:ab:59:5e:83:2d:05:9e:03:1a:e8:f1:25:da:
74:14:c7:d3:03:04:15:b4:43:62:0a:7e:58:3a:f2:
54:30:3f:a2:e8:5a:33:78:51:9c:de:0c:40:16:4e:
69:95:32:be:4b:10:34:2b:04:f1:8a:1e:01:26:00:
10:ec:8f:85:62:62:14:98:d9:72:c3:fb:83:5f:ff:
b7:1b:28:fd:6b:25:05:79:e0:be:83:96:c4:74:a1:
af:0d:46:32:7c:91:46:58:7f:75:b0:52:47:b6:dc:
c2:53:06:8c:d1:da:a0:3c:53:8b:98:42:6d:8b:18:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:62:54:BE:86:34:AD:9E:9E:3E:8B:75:90:85:E6:CA:3D:9F:7E:A1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS132282.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:bb0::/44
2a06:a005:c70::/44
Signature Algorithm: sha256WithRSAEncryption
c6:9d:1a:29:8f:fd:63:7e:b8:61:e7:b5:3b:9b:50:6c:01:ea:
ff:e6:23:c0:45:ca:1c:89:5e:06:56:e1:50:21:a5:51:4c:55:
06:42:bb:1f:d0:4c:17:0a:53:2e:73:3b:ac:2f:2f:a5:cc:10:
26:57:00:34:89:b9:cc:0d:05:04:09:bb:96:16:cd:28:f3:9c:
6b:76:2e:5c:95:f2:a7:5d:2f:e4:0d:63:3a:ca:8d:4f:84:7d:
ac:92:3f:01:6e:52:6b:0f:aa:d2:2e:63:84:d5:be:1f:2d:56:
f2:86:f7:35:be:e4:d1:d6:df:39:ca:74:cf:9f:6f:29:8f:7a:
c1:f7:7f:0b:ba:ea:83:8a:93:02:9e:f0:e7:22:62:2b:c8:eb:
c5:46:77:65:bb:2b:ce:09:68:b3:65:d9:e3:f4:1a:51:eb:54:
78:07:7a:ac:9c:d4:60:b8:df:f6:17:cb:a4:82:b2:52:ca:14:
22:e5:bf:e4:23:07:5c:f0:fc:ca:c1:6d:d3:f7:56:bb:44:a7:
5a:f3:cf:8d:74:df:0d:4e:6f:95:93:e3:23:47:83:05:c7:55:
58:e7:9d:66:93:ef:2e:84:61:85:84:d7:cc:dc:f2:94:c0:bf:
31:5c:9a:55:22:4b:28:e8:c2:bf:d7:d5:66:33:2a:e7:d8:a1:
76:f9:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:51 2025 by rpki-client