Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS134478.roa
File: AS134478.roa (raw, json)
Hash identifier: XoPh/URo3kk1DzPnc3NQXsfu3gREcI+1YARPtGVfGlI=
Subject key identifier: C9:96:78:F4:05:69:5F:FD:DC:93:E0:55:B4:FA:0B:86:11:0F:0B:8B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 24F0DA14832FEDBDCFCDC918289FACDD7BF2A90D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS134478.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 134478
IP address blocks: 2a06:a005:580::/44 maxlen: 48
2a06:a005:950::/44 maxlen: 48
2a06:a005:d00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f0:da:14:83:2f:ed:bd:cf:cd:c9:18:28:9f:ac:dd:7b:f2:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=C99678F405695FFDDC93E055B4FA0B86110F0B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:13:3f:5d:f9:29:e4:8c:04:4d:0b:3a:95:
d0:17:d1:37:17:7c:f3:f3:63:f0:d3:d1:3b:de:96:
be:7b:aa:09:0b:9d:56:2f:c2:a7:45:eb:a3:04:e3:
25:17:a1:fc:9d:f7:4b:e4:db:31:b3:1a:1c:67:19:
2d:69:85:ce:4c:1d:aa:a6:18:66:2f:d0:5b:24:6c:
57:ca:63:12:8d:ab:37:d0:03:fe:b3:74:5d:7f:c8:
5e:a0:5d:98:2f:50:87:fc:04:24:1c:7c:87:a5:3e:
e7:13:ed:b4:b4:b3:b1:c1:ec:6f:1a:e5:ee:cc:06:
5c:b6:db:aa:03:13:77:0e:8d:48:2f:9d:2d:f7:b2:
ef:06:7a:62:69:1d:d6:21:95:f3:c2:4a:b9:34:bc:
e2:14:40:aa:05:75:92:a2:b5:33:ee:ad:07:b0:a6:
ff:0f:88:61:ec:f1:40:80:99:c5:09:6c:ac:19:d0:
b3:10:c9:e7:84:07:68:05:9c:bd:14:c2:61:21:d2:
b9:09:14:f1:81:3a:6c:c6:00:2f:00:75:5b:f6:e9:
0c:ce:26:54:65:5c:c0:13:57:3e:61:ca:2c:94:74:
4e:cb:5a:e6:f4:ff:c3:df:f7:92:29:ed:b9:04:5a:
38:b9:81:2f:a6:4c:d7:c2:c9:14:c1:8c:bd:90:ff:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:78:F4:05:69:5F:FD:DC:93:E0:55:B4:FA:0B:86:11:0F:0B:8B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS134478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:580::/44
2a06:a005:950::/44
2a06:a005:d00::/44
Signature Algorithm: sha256WithRSAEncryption
a4:fe:16:04:6a:19:8d:9e:13:e3:2f:34:bd:90:40:84:56:32:
ef:01:21:09:56:bf:c2:69:f2:c3:f5:19:cb:ec:ca:04:4b:06:
2b:be:8c:f5:74:a6:24:9a:32:bf:8d:48:38:35:a4:6f:1f:69:
c3:33:8a:91:e1:24:04:b1:cb:59:5f:11:bf:4b:2a:2c:9f:7c:
a9:75:44:5a:41:0b:e1:ce:b9:f7:3b:16:c5:cc:4e:dc:bf:d5:
db:c2:b8:37:a3:53:00:be:13:55:a9:8c:74:b5:eb:98:0a:07:
a9:bd:f1:97:dc:71:88:07:af:5d:9d:3b:ed:06:6e:d0:5b:da:
31:85:2f:08:b6:4b:57:5a:ca:46:e8:e8:ba:53:d7:31:10:e2:
59:27:ca:f2:06:e5:4c:de:63:ad:0f:3e:60:0a:55:4c:38:fa:
9c:99:e9:84:90:35:68:16:7f:99:b0:b3:25:d4:de:c0:49:db:
18:e0:5d:1a:79:59:ba:6e:41:6f:5c:a6:2b:d9:52:d9:a6:fc:
ea:63:9e:de:bd:1c:92:bb:99:90:f4:a3:dd:2a:9a:b9:52:58:
6f:0c:bb:55:3a:a2:18:dc:da:b6:57:a5:11:75:05:5a:12:43:
10:ff:fd:49:3f:77:2b:7e:ea:79:1c:59:c9:64:1f:48:83:45:
9b:f1:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:30 2025 by rpki-client