Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS136591.roa
File: AS136591.roa (raw, json)
Hash identifier: bnn1K6Cva+rFcptKDKX7r0neD3oQGvplKJKOVUbCZfg=
Subject key identifier: 55:65:8C:33:3A:3E:95:1F:C7:D5:4A:A1:C1:F0:0E:9B:E0:3D:F6:D8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4367A431E4C263C94DF7FD39DE3CA5F7A282BAB5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS136591.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 136591
IP address blocks: 2a06:a005:5f5::/48 maxlen: 48
2a06:a005:fd0::/44 maxlen: 48
2a06:a005:fe0::/44 maxlen: 48
2a06:a005:ff0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:67:a4:31:e4:c2:63:c9:4d:f7:fd:39:de:3c:a5:f7:a2:82:ba:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=55658C333A3E951FC7D54AA1C1F00E9BE03DF6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:46:fc:ef:de:65:41:b7:c8:77:1b:4e:87:
d9:27:ba:da:c6:8e:dd:64:9e:fa:b1:85:0d:d0:ad:
cc:53:ad:87:ef:39:1c:b6:a2:e9:39:c5:f4:33:40:
9b:4d:e7:78:68:f4:dc:13:f3:2b:75:ed:13:5d:78:
f9:0f:d2:56:8f:f7:fd:aa:13:71:20:e4:f4:fa:50:
e4:9f:43:00:65:f7:d9:56:18:36:e6:17:45:18:e4:
9c:5d:04:69:8b:02:07:9b:d7:2c:03:40:51:57:f5:
40:f4:61:89:ad:84:74:9e:83:5d:33:1d:31:d4:71:
17:a3:7e:62:98:ae:b8:71:9b:c0:54:97:36:96:ce:
8c:59:b3:19:00:5f:cf:80:ff:2d:6c:03:92:f0:46:
3e:1d:10:7f:79:e4:4e:05:d9:02:aa:ab:fe:ff:0d:
da:e9:60:8e:d5:bd:e3:25:64:6b:a3:82:ad:9f:ff:
7c:a3:93:7c:91:82:c7:92:7f:c2:7d:60:4a:6e:6c:
9c:59:db:10:ba:37:72:0e:10:3e:7e:e2:29:30:cf:
90:a0:15:66:a5:9c:52:a1:5b:85:d4:dc:de:5f:f5:
65:17:ac:14:56:c9:c2:cd:5f:1a:ff:27:44:23:fd:
e3:23:05:8f:57:0b:4e:79:5f:bf:9f:a7:de:ce:62:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:8C:33:3A:3E:95:1F:C7:D5:4A:A1:C1:F0:0E:9B:E0:3D:F6:D8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS136591.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f5::/48
2a06:a005:fd0::-2a06:a005:fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:f8:a6:2b:b6:f1:a9:eb:1c:77:8e:02:6d:b9:77:27:7a:4f:
2a:d6:3e:6e:cc:b9:4c:9f:64:7a:8c:60:0d:c1:3d:5d:d4:df:
1c:b0:1e:04:ff:1f:c6:b8:9b:0b:fc:56:1c:14:0a:f5:37:5a:
97:bc:cb:7b:a6:ea:4d:2e:7b:1d:96:97:6d:04:4d:57:de:42:
dc:7f:2d:40:ba:36:c2:53:3e:48:9f:46:3a:5a:03:01:a4:9a:
5c:b7:1c:ca:14:07:bc:a5:ca:d1:68:18:7c:7d:ff:46:d9:22:
37:5d:20:5c:de:14:7f:1c:c1:bd:20:d8:47:b6:f2:85:f1:c7:
d7:92:13:74:a4:e3:4a:4e:17:50:4c:c5:72:b3:ae:1d:93:24:
c9:18:c8:3a:b1:25:8a:bd:26:95:37:f3:86:3e:c3:94:68:40:
f5:9f:c8:9f:50:21:3b:6c:0d:fe:5c:32:c1:70:86:61:c6:e9:
dc:7f:36:e1:01:9a:9e:7e:df:1e:8f:00:da:87:3b:f1:9d:1b:
74:5c:c1:8d:59:87:40:3c:97:b4:47:c1:6e:e0:54:ae:c9:fb:
5b:97:0a:66:75:44:67:41:4f:51:2f:a8:6e:4f:ce:67:91:b3:
94:18:46:db:38:4e:f0:79:99:30:31:8c:9b:55:08:92:b4:18:
99:9b:c4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:05 2025 by rpki-client