Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS137425.roa
File: AS137425.roa (raw, json)
Hash identifier: fSUBRk6LtS6Vj6vYgTslgjaqJarrEU4UCAfY7+Bbyj8=
Subject key identifier: 15:60:6C:F2:5B:D7:CC:3F:6D:A4:6F:0C:B9:C0:09:9F:8C:B5:9F:89
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1EDA2EFECF7E5293110CDA6FDB83277F808D4520
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS137425.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 137425
IP address blocks: 2a06:a005:4d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:da:2e:fe:cf:7e:52:93:11:0c:da:6f:db:83:27:7f:80:8d:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=15606CF25BD7CC3F6DA46F0CB9C0099F8CB59F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:9d:74:5d:23:da:80:b1:ee:92:96:9e:7d:
c1:93:52:94:ca:68:58:eb:2b:3a:28:bf:88:31:1b:
4d:e2:ce:9d:6d:88:0f:e6:78:31:73:9c:4b:6c:ef:
b2:0e:c8:3b:32:20:0b:a8:db:c5:03:6b:e5:80:ef:
9c:ab:54:c0:ad:a5:e1:0d:39:fd:7b:63:df:c8:39:
15:60:17:31:83:73:ed:91:0f:9b:9b:3c:2a:8f:13:
29:ec:cd:2e:47:b0:13:8e:2b:f1:36:b5:c9:96:c9:
ee:47:a8:76:de:1a:d4:5c:f1:62:f7:26:d9:c8:11:
75:55:08:a2:79:0b:fe:7f:df:1d:67:1f:9f:62:fd:
3b:23:85:14:29:74:90:65:80:76:57:08:df:e3:9d:
58:20:ba:90:66:96:66:81:fe:0a:6e:2e:d0:69:d0:
4c:71:9d:f8:a2:e5:ec:cd:f4:c9:bf:2d:65:3c:d8:
fc:1e:78:f8:64:92:62:5b:93:2d:51:85:bd:b6:ff:
7c:6b:3d:29:45:79:10:ed:a3:f5:ef:5f:be:7d:32:
d7:16:e0:e6:b1:bd:78:d4:ea:ee:ae:95:a7:1e:9e:
85:b6:c8:a1:bd:2f:ed:2f:4e:5d:00:28:4f:b7:84:
20:92:88:e5:32:b2:84:03:2b:40:8c:cc:cb:f0:6c:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:6C:F2:5B:D7:CC:3F:6D:A4:6F:0C:B9:C0:09:9F:8C:B5:9F:89
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS137425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d8::/48
Signature Algorithm: sha256WithRSAEncryption
d5:04:98:71:d5:1c:fd:ff:9a:48:37:b3:94:30:e8:a9:b7:63:
71:b6:79:52:48:36:70:d4:ea:c8:35:78:99:27:7e:02:0b:08:
56:56:7e:18:02:98:16:ae:22:1d:ff:f5:7d:56:7f:dc:3b:f5:
82:a1:b9:69:e4:4a:b2:06:e7:c6:16:f7:03:e3:ec:50:cd:d4:
1e:e2:4f:d1:ce:cf:e6:ef:42:8e:f0:0b:35:22:e2:3b:ba:7e:
b6:24:17:6d:a0:b3:27:a9:d7:96:d7:a4:cc:ba:7d:b3:a7:55:
7c:8d:51:f4:51:36:39:82:bb:e3:7c:b8:2a:e0:e3:69:3d:ab:
8d:b3:e1:09:8a:98:31:be:89:2e:4a:3c:ba:2a:4a:e6:a3:f2:
03:69:7c:6d:78:82:6d:d4:8f:2b:b2:74:b3:c9:f8:c7:45:22:
12:35:11:d5:37:aa:96:28:00:be:6e:d7:29:49:ce:a1:86:ad:
87:cc:73:d3:1d:4b:b5:5d:e7:74:ce:07:55:1c:6f:99:c2:1d:
88:69:6e:09:7b:c1:8a:d4:94:cf:0b:3d:eb:8e:18:c6:29:87:
38:13:71:ea:de:41:4f:b9:43:b5:1d:f6:82:d3:b1:a3:75:64:
05:35:c5:66:30:b4:f4:8d:9a:d9:e9:dc:b3:29:3b:e6:42:7c:
11:7d:d8:ff
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUHtou/s9+UpMRDNpv24Mnf4CNRSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKDE1NjA2Q0YyNUJEN0NDM0Y2REE0NkYwQ0I5QzAwOTlGOENCNTlGODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQ510XSPagLHukpaefcGTUpTK
aFjrKzoov4gxG03izp1tiA/meDFznEts77IOyDsyIAuo28UDa+WA75yrVMCtpeEN
Of17Y9/IORVgFzGDc+2RD5ubPCqPEynszS5HsBOOK/E2tcmWye5HqHbeGtRc8WL3
JtnIEXVVCKJ5C/5/3x1nH59i/TsjhRQpdJBlgHZXCN/jnVggupBmlmaB/gpuLtBp
0Exxnfii5ezN9Mm/LWU82PweePhkkmJbky1Rhb22/3xrPSlFeRDto/XvX759MtcW
4OaxvXjU6u6ulacenoW2yKG9L+0vTl0AKE+3hCCSiOUysoQDK0CMzMvwbBjXAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUFWBs8lvXzD9tpG8MucAJn4y1n4kwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTM3
NDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQTYMA0GCSqGSIb3DQEBCwUAA4IBAQDVBJhx1Rz9
/5pIN7OUMOipt2NxtnlSSDZw1OrINXiZJ34CCwhWVn4YApgWriId//V9Vn/cO/WC
oblp5EqyBufGFvcD4+xQzdQe4k/Rzs/m70KO8As1IuI7un62JBdtoLMnqdeW16TM
un2zp1V8jVH0UTY5grvjfLgq4ONpPauNs+EJipgxvokuSjy6Kkrmo/IDaXxteIJt
1I8rsnSzyfjHRSISNRHVN6qWKAC+btcpSc6hhq2HzHPTHUu1Xed0zgdVHG+Zwh2I
aW4Je8GK1JTPCz3rjhjGKYc4E3Hq3kFPuUO1HfaC07GjdWQFNcVmMLT0jZrZ6dyz
KTvmQnwRfdj/
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:12 2025 by rpki-client