Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS134666.roa
File: AS134666.roa (raw, json)
Hash identifier: YUdezmEHTswZUWmP1+jfPcZVD8z8Gka/83Ih/vWeb4U=
Subject key identifier: A2:37:DB:55:06:C3:BC:D1:F7:AF:D0:5A:0F:48:F0:13:A1:07:D6:76
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 36C9673ED694D6B9082B7C1F04E8250B633B1BB3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS134666.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 134666
IP address blocks: 2a06:a005:a70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c9:67:3e:d6:94:d6:b9:08:2b:7c:1f:04:e8:25:0b:63:3b:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=A237DB5506C3BCD1F7AFD05A0F48F013A107D676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:45:87:1b:68:31:85:2c:a3:06:6c:3a:11:
a3:f7:e2:94:ea:e2:98:5c:f4:79:21:06:82:e9:7c:
e2:f5:b7:63:c6:39:ea:58:c9:f7:af:d4:49:0c:96:
b2:e3:ab:14:96:b1:57:5e:37:a1:ed:50:ff:cf:6d:
8c:10:90:9c:51:12:76:5a:7a:b7:4b:44:8b:5c:fc:
8b:f0:34:26:7f:cc:8b:98:30:2c:6e:ee:04:ff:b0:
20:a6:40:27:c4:c0:cb:37:00:92:03:a8:f0:58:31:
84:ee:19:be:54:6d:cf:c1:2a:f9:ce:75:e9:81:12:
2f:a1:14:07:b8:66:b8:c8:48:33:e2:07:c8:79:dd:
e7:fd:90:0c:41:a4:1c:87:ba:b1:ff:27:71:73:0a:
6f:47:06:cf:58:ab:8c:48:a3:b3:e2:76:15:31:f5:
ab:b0:45:80:d1:eb:37:10:bc:74:5a:94:59:a5:a4:
c2:8d:13:69:3b:51:ff:0b:2f:31:bb:39:83:c9:4a:
31:87:c6:b4:7e:59:ef:04:94:2a:57:78:e5:9d:a2:
ce:1f:cc:d6:c5:a3:51:88:20:8b:5f:97:a9:0b:67:
aa:da:e7:f7:eb:dc:93:e8:d6:93:b9:29:7c:1a:10:
aa:32:ee:fb:ff:e3:c0:8d:3c:b8:1d:66:6f:92:da:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:DB:55:06:C3:BC:D1:F7:AF:D0:5A:0F:48:F0:13:A1:07:D6:76
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS134666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a70::/44
Signature Algorithm: sha256WithRSAEncryption
e3:57:d8:b3:0e:be:06:02:93:4c:99:9e:2c:16:2f:40:e8:27:
4d:99:ab:ec:63:89:b5:8a:aa:2b:63:62:09:17:83:cb:c0:2a:
9e:96:5b:32:ca:fd:9a:6d:1e:4b:5e:ba:ee:d4:20:4d:d9:69:
76:60:de:f1:72:29:3e:f1:12:67:c4:38:07:77:fd:9b:12:b0:
92:b7:bb:65:2a:72:ae:e2:df:16:27:b0:39:57:01:cf:52:9a:
f1:09:16:3c:92:fd:74:98:ba:5e:13:38:d6:ed:bf:b5:6a:0b:
19:c1:22:1f:4c:00:35:c3:50:39:fc:09:71:06:db:e0:99:43:
18:fc:1d:47:29:36:51:4e:9f:82:c1:69:a6:d2:69:f3:35:fe:
7a:49:8c:a0:fe:8c:7b:9d:90:e7:79:d7:82:c7:0f:37:8d:4a:
bc:1d:ba:11:46:80:90:aa:0e:fb:5d:b2:71:be:43:4a:fe:64:
1e:dc:16:05:01:8e:0e:cd:41:3b:b5:ca:22:3e:aa:ab:a0:98:
c1:fa:08:0d:c2:90:df:a6:c7:6a:38:01:3f:d3:bc:35:89:1f:
66:40:68:14:97:4b:0b:1e:6f:c8:94:4c:c8:d0:6f:4a:33:47:
05:65:e4:ea:7d:5b:9f:e4:81:9a:42:e8:6e:ff:2d:72:cc:34:
d9:f5:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:59 2025 by rpki-client