Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS13308.roa
File: AS13308.roa (raw, json)
Hash identifier: bo0ptgTMGfXQIRfcdt8VcSkyVlIaJ3A2bB3WEgiVj1g=
Subject key identifier: 7D:E6:18:35:46:4F:87:04:93:22:89:38:C4:E7:90:BB:C7:D4:8E:2B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 799C0628CA71112E9C4CDA37FBBD492AC3256D39
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS13308.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 13308
IP address blocks: 2a06:a005:2dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9c:06:28:ca:71:11:2e:9c:4c:da:37:fb:bd:49:2a:c3:25:6d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=7DE61835464F870493228938C4E790BBC7D48E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:f7:8a:b4:9a:5d:43:78:ba:dc:dc:10:63:
85:01:8e:07:0c:2b:47:85:8d:df:39:cb:9c:f9:fb:
bf:f5:cd:f2:ab:28:d1:b0:65:68:1a:66:59:e5:ee:
f5:09:2f:f1:42:6e:f2:86:43:4e:e8:21:a4:d1:a4:
69:05:b1:b0:34:c9:15:59:f3:2e:1b:c2:6c:9e:92:
08:aa:90:a5:59:df:ea:06:1b:5d:73:1d:08:ba:d0:
91:2c:0c:1d:73:75:60:db:b6:a1:e6:c6:19:6b:03:
30:63:ca:89:7a:d6:81:c7:69:1c:da:e2:e8:ee:e3:
75:29:33:32:fb:c0:e6:4e:7e:e3:bc:7b:4e:bb:55:
12:d5:aa:e2:af:21:15:03:49:b8:b9:f0:07:c0:74:
4f:2c:d8:07:bc:58:5d:46:8f:a4:62:2b:e3:07:8b:
0d:a9:15:e5:c2:68:09:da:1b:27:b9:b6:0f:6e:89:
35:bc:99:68:05:df:56:6c:55:85:59:42:e8:29:9f:
92:0a:db:7b:1c:57:05:4e:ec:d5:2c:bf:3b:c7:b9:
64:80:7f:e5:00:b0:c8:91:aa:17:45:4f:45:ad:6d:
40:82:09:37:23:a3:d6:cd:42:6b:15:9e:b9:a6:bc:
cd:74:ec:77:e3:b7:c2:88:d8:45:69:05:5e:b2:af:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:18:35:46:4F:87:04:93:22:89:38:C4:E7:90:BB:C7:D4:8E:2B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS13308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dc::/48
Signature Algorithm: sha256WithRSAEncryption
89:5f:b3:5c:b1:ca:64:60:d0:8b:07:6e:7f:9f:82:04:25:26:
d2:c9:dd:87:35:ae:58:18:b1:86:72:82:bc:e1:06:13:47:37:
d0:ee:06:53:56:0d:99:b2:2e:6f:71:84:e3:7d:79:9d:16:a9:
19:6c:52:fa:76:b7:62:4c:a3:bd:37:bc:0e:4c:0c:bb:c3:38:
d1:46:f4:66:15:5e:8b:ed:ec:d2:d6:bc:6e:87:1f:35:52:0f:
29:dc:13:ee:75:5d:81:ab:18:98:3f:87:0d:db:df:6c:5d:d7:
f6:01:c6:14:7b:86:55:95:b2:ec:63:5d:35:74:3d:6d:cc:2b:
1b:fd:ae:89:99:3b:08:5c:ec:88:e4:97:4d:76:ca:7e:ca:8a:
0c:fc:ac:3e:bc:6e:10:48:6d:54:e1:0d:35:64:61:f1:b6:e7:
54:c8:44:5e:7a:04:cf:b2:06:11:6c:ed:a2:97:41:cb:c3:3e:
fd:5e:a7:99:37:63:dc:c9:1e:01:7a:a5:ea:2a:ee:29:e1:d1:
52:23:b5:40:ea:0a:3c:a4:2e:bb:2b:12:e7:7c:ef:11:6e:08:
a1:ad:60:d6:f4:0d:8a:98:da:27:6b:e3:69:2f:20:f9:c5:4a:
df:06:82:dc:c3:0f:26:8e:11:c6:b8:2e:3b:bc:ec:38:9d:6d:
7e:7d:66:35
-----BEGIN CERTIFICATE-----
MIIEtDCCA5ygAwIBAgIUeZwGKMpxES6cTNo3+71JKsMlbTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTJaFw0yMzEyMjAxNjU2NTJaMDMxMTAvBgNV
BAMTKDdERTYxODM1NDY0Rjg3MDQ5MzIyODkzOEM0RTc5MEJCQzdENDhFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zPeKtJpdQ3i63NwQY4UBjgcM
K0eFjd85y5z5+7/1zfKrKNGwZWgaZlnl7vUJL/FCbvKGQ07oIaTRpGkFsbA0yRVZ
8y4bwmyekgiqkKVZ3+oGG11zHQi60JEsDB1zdWDbtqHmxhlrAzBjyol61oHHaRza
4uju43UpMzL7wOZOfuO8e067VRLVquKvIRUDSbi58AfAdE8s2Ae8WF1Gj6RiK+MH
iw2pFeXCaAnaGye5tg9uiTW8mWgF31ZsVYVZQugpn5IK23scVwVO7NUsvzvHuWSA
f+UAsMiRqhdFT0WtbUCCCTcjo9bNQmsVnrmmvM107Hfjt8KI2EVpBV6yr9IdAgMB
AAGjggG+MIIBujAdBgNVHQ4EFgQUfeYYNUZPhwSTIok4xOeQu8fUjiswHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTMz
MDgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAqBqAFAtwwDQYJKoZIhvcNAQELBQADggEBAIlfs1yxymRg
0IsHbn+fggQlJtLJ3Yc1rlgYsYZygrzhBhNHN9DuBlNWDZmyLm9xhON9eZ0WqRls
Uvp2t2JMo703vA5MDLvDONFG9GYVXovt7NLWvG6HHzVSDyncE+51XYGrGJg/hw3b
32xd1/YBxhR7hlWVsuxjXTV0PW3MKxv9romZOwhc7Ijkl012yn7Kigz8rD68bhBI
bVThDTVkYfG251TIRF56BM+yBhFs7aKXQcvDPv1ep5k3Y9zJHgF6peoq7inh0VIj
tUDqCjykLrsrEud87xFuCKGtYNb0DYqY2idr42kvIPnFSt8GgtzDDyaOEca4Lju8
7DidbX59ZjU=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:59 2025 by rpki-client