Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS133555.roa
File: AS133555.roa (raw, json)
Hash identifier: PR1fL2mb52lGVRqWpeEG3QFL3JqTAENH1olhZR/3i9w=
Subject key identifier: 73:FA:63:3B:C4:EF:45:BF:64:0A:B5:9E:2F:F4:31:52:63:D5:DE:E2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 50C0CE750A504DDC0B39CCCC0D9CCC7010CB94DF
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS133555.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 133555
IP address blocks: 2a06:a005:260::/44 maxlen: 48
2a06:a005:270::/44 maxlen: 48
2a06:a005:280::/44 maxlen: 48
2a06:a005:290::/44 maxlen: 48
2a06:a005:2a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c0:ce:75:0a:50:4d:dc:0b:39:cc:cc:0d:9c:cc:70:10:cb:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=73FA633BC4EF45BF640AB59E2FF4315263D5DEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:eb:4f:3c:95:29:cc:f1:0c:63:32:f1:50:
2a:f6:b2:ff:23:28:98:40:82:db:47:c0:42:82:f8:
42:40:60:bf:2b:19:88:04:20:6d:f6:b9:ef:89:80:
4a:9a:8f:a1:99:95:a5:a1:69:b9:e1:a0:09:95:7e:
62:dd:91:a9:ff:bd:df:08:d9:e7:de:9c:7a:a7:fc:
1e:6b:96:1f:48:82:16:03:ee:13:f3:6b:43:7f:fe:
2f:d4:38:25:3c:85:48:29:61:e4:cc:9b:fa:69:ba:
5f:58:c0:70:61:db:9c:c0:87:7a:7c:fd:77:6d:ae:
6b:3e:3b:f8:95:1d:4c:d7:e1:ce:e2:6e:d0:f6:02:
da:a4:8f:7d:3b:35:83:05:1d:c6:46:f1:f2:f1:bd:
ab:71:5d:0e:e8:55:65:7e:6b:cc:1b:ed:de:86:98:
f0:5f:52:8e:fd:c2:e6:bf:d9:68:be:86:19:e9:2c:
4c:a6:50:3d:3e:28:0e:05:4b:bf:99:a4:88:02:d9:
6c:d0:72:4e:04:12:9a:db:a5:83:f9:17:19:65:18:
6c:16:c8:e0:b0:60:9a:b6:28:14:81:72:e4:e8:ae:
98:d4:3b:a4:c4:55:eb:76:c8:ee:d7:b8:85:ee:f2:
b0:07:ee:fd:69:27:c9:67:51:b6:eb:94:b6:0d:a8:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:63:3B:C4:EF:45:BF:64:0A:B5:9E:2F:F4:31:52:63:D5:DE:E2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS133555.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:260::-2a06:a005:2af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
e0:9f:eb:56:be:bc:b7:f4:4a:dc:d3:c6:96:07:11:80:3b:11:
d9:1c:f2:bf:64:9b:1c:5a:3e:bc:b0:9e:d7:64:4a:54:b7:1d:
91:4e:fc:b7:d8:f0:c4:a1:39:b9:c9:c7:90:4c:19:06:0b:07:
d2:a7:4d:da:75:21:e9:52:b4:61:13:0c:eb:5e:99:23:82:2f:
2b:59:b5:83:d0:81:81:e4:64:95:4f:3a:28:6e:3c:d9:f3:80:
37:18:28:28:a1:04:82:a2:ba:db:69:2c:7a:6f:c7:ac:a6:21:
db:0d:fb:5b:8b:cf:6a:25:b4:36:d8:6e:ce:04:c6:68:54:98:
b3:ad:ab:08:a3:aa:7b:5f:80:4f:34:e0:95:8e:c4:f0:ef:58:
82:39:a2:b4:d7:b6:6e:fd:12:19:70:ab:56:1a:4c:0d:7b:0c:
59:03:12:b3:90:7b:08:be:4f:0b:1e:e3:7e:1c:50:64:8d:1f:
73:ad:57:70:5a:3b:53:fe:1d:80:d4:01:11:b7:8e:9c:38:af:
dd:b0:32:f3:70:18:c9:ea:28:52:52:a6:78:3a:84:a3:40:6e:
97:54:99:7a:1d:02:23:46:48:e2:aa:5b:56:8a:ba:ec:53:b4:
0b:d2:dc:80:19:ad:4d:50:9c:be:43:6c:33:ad:54:a6:7f:64:
de:f7:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:42 2025 by rpki-client