Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138211.roa
File: AS138211.roa (raw, json)
Hash identifier: uFFePrfbarU6FUP6e9DfVHRx38acQ1aPr+IY8ENJ3LA=
Subject key identifier: 87:7E:C5:39:E2:66:AA:12:BD:6D:69:A0:EA:07:74:48:4C:DA:93:51
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7C27C688E439E42DCD5C86727AA654C1F6478202
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138211.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 138211
IP address blocks: 2a06:a005:7c0::/44 maxlen: 48
2a06:a005:c20::/44 maxlen: 48
2a06:a005:c30::/44 maxlen: 48
2a06:a005:11f0::/44 maxlen: 48
2a06:a005:2400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:27:c6:88:e4:39:e4:2d:cd:5c:86:72:7a:a6:54:c1:f6:47:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=877EC539E266AA12BD6D69A0EA0774484CDA9351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:5b:74:e5:52:f5:7e:e4:77:de:b1:c1:ab:
66:ef:60:31:15:4b:20:65:b7:7f:01:ea:3d:28:33:
6f:aa:56:ba:7a:03:2e:5e:c1:61:e0:0c:c4:b3:13:
c1:04:ff:ae:9f:25:a7:86:c7:c5:c3:74:c0:63:12:
ae:d6:05:8a:cb:81:3f:77:5f:e1:df:bd:a2:b4:f7:
fc:c9:27:b7:4b:5f:9c:5b:f2:7f:d0:90:88:95:b1:
c0:67:36:f1:5b:9f:e2:95:41:cb:d0:eb:90:df:8d:
c7:b0:49:d2:48:db:c2:a3:e3:d5:4f:63:42:81:0e:
27:b3:04:87:b0:98:96:35:fd:85:ae:ff:62:06:c0:
02:2c:e3:8b:09:6c:94:53:31:eb:5b:fb:13:44:fa:
df:f0:02:4f:58:58:85:95:b5:6a:b1:d4:bf:bc:c9:
bd:cb:11:7b:10:1b:fd:13:01:73:95:4e:f0:e2:9a:
f6:9f:73:00:c2:c9:e4:ea:1f:51:44:0a:30:9f:b0:
89:b8:d9:75:1b:53:24:b6:04:49:e3:ab:5c:e4:4c:
f8:c2:a4:f6:5e:b6:8c:65:2a:04:c9:79:58:51:d1:
a2:e4:07:4f:e3:5a:4b:d9:21:9c:e6:37:eb:90:fe:
d2:3f:c1:19:b9:e4:9b:39:4e:02:ce:55:5a:5f:d5:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7E:C5:39:E2:66:AA:12:BD:6D:69:A0:EA:07:74:48:4C:DA:93:51
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138211.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7c0::/44
2a06:a005:c20::/43
2a06:a005:11f0::/44
2a06:a005:2400::/44
Signature Algorithm: sha256WithRSAEncryption
47:8f:35:6d:3c:62:8a:14:ea:72:2a:c6:2f:49:36:02:81:58:
87:ec:5b:82:b0:fc:d6:9a:49:18:5a:af:dd:27:64:da:39:70:
3a:fc:d8:73:db:14:99:68:b2:27:9d:1c:72:7c:a4:91:f0:bf:
a6:d6:0c:a5:64:89:06:03:13:33:9e:3a:c7:24:ea:3f:cc:81:
46:13:2b:bd:15:a2:1e:2e:eb:72:8e:b9:ca:d6:c0:e0:69:bb:
b7:84:5a:47:74:4b:1d:d6:2a:7f:8d:bd:54:db:15:1d:c3:cf:
75:1e:15:a4:97:6f:24:29:8f:59:bb:31:dd:a3:63:b8:aa:59:
18:49:1b:b4:1e:da:e1:dd:a1:8f:59:00:1c:5d:20:b8:35:e3:
e1:1b:b4:ff:74:2b:32:71:13:25:8b:cd:6e:a2:88:91:e2:ec:
45:9e:56:8a:63:b6:32:48:4f:c6:f5:55:53:ed:f2:fe:4d:71:
63:31:e2:07:d2:92:b3:7b:6c:54:85:33:29:65:b1:8f:d6:97:
e4:b9:33:c9:67:99:d2:01:ec:11:99:fd:77:84:ca:bb:a6:31:
86:17:e5:29:c1:07:88:be:8a:01:0e:29:f8:17:3c:b9:37:49:
43:92:97:2b:26:da:31:6d:d8:0d:8e:9f:1a:cf:a9:60:ab:fd:
1b:90:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:04 2025 by rpki-client