Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138517.roa
File: AS138517.roa (raw, json)
Hash identifier: Y7+ljNqIarTgpLaqQzNwqCeMEaIP0AOTn4bxgiJ8zqg=
Subject key identifier: 3D:9D:2F:7B:2F:39:7B:DC:72:73:B2:99:E8:8A:2C:86:92:F4:BC:06
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 729B1F46714A7CCF307A3C128B48175603B2924C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138517.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 138517
IP address blocks: 2a06:a005:2b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9b:1f:46:71:4a:7c:cf:30:7a:3c:12:8b:48:17:56:03:b2:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=3D9D2F7B2F397BDC7273B299E88A2C8692F4BC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:ce:08:41:81:99:ba:05:04:b0:12:93:1a:
a7:b2:d6:56:5a:57:cf:d7:49:64:56:43:31:06:b1:
47:8d:d0:73:e9:9e:de:c2:54:91:33:fe:4d:0c:7f:
5e:e1:2f:9d:5a:af:34:14:26:79:84:1a:66:94:98:
9b:ee:09:6b:47:36:f7:3c:7e:c3:eb:81:58:8e:bb:
a6:a9:fb:42:68:0e:fb:08:87:51:92:e9:c6:11:67:
d5:7e:aa:22:3c:22:b7:f6:80:3d:eb:5a:11:c7:08:
26:9b:8f:f7:41:13:52:60:dd:64:81:9d:50:23:67:
bb:1e:eb:58:ab:83:4a:85:36:2a:56:1d:94:12:9b:
ab:ef:ea:c6:42:10:d9:ac:92:52:bb:0b:3a:73:50:
ee:f8:4b:32:2c:8a:5f:af:e7:28:56:59:e9:d5:a9:
4a:78:8e:89:48:6a:f9:00:3b:19:18:b9:10:55:fa:
60:c2:56:06:bc:bc:99:41:73:51:8f:2b:7d:b5:ce:
52:33:36:38:cb:16:a5:f5:64:f6:a6:1f:5c:de:39:
cd:71:c2:26:9e:9f:0c:b7:5a:5b:fe:1d:82:8a:0c:
d2:7a:2a:73:72:a6:09:5e:b1:3f:ef:78:19:ab:0b:
ee:01:ef:1c:39:94:f8:69:4c:a2:e2:96:b6:3a:23:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:2F:7B:2F:39:7B:DC:72:73:B2:99:E8:8A:2C:86:92:F4:BC:06
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS138517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
9b:15:5c:3b:88:fa:cb:88:a9:04:c9:96:3c:2d:6c:07:01:30:
35:0a:7d:bd:2f:11:83:01:47:21:47:17:0f:3a:ec:88:dd:0e:
ae:7c:96:1a:56:36:1d:42:74:35:50:b8:b2:41:46:2f:74:82:
48:6c:7c:11:f8:67:e4:41:58:d2:11:fd:d9:b0:ab:54:3b:c5:
d8:5e:d5:90:bb:69:f0:ed:fc:a5:9f:a4:01:bd:f2:41:fa:46:
e2:bb:15:27:f2:35:87:8b:b9:24:ec:86:fb:d4:be:08:bf:c3:
f8:99:e8:8a:3d:87:97:9d:ea:c3:1c:11:74:6e:a6:b2:35:b0:
a4:5b:59:c4:cc:a0:f0:41:65:03:5b:70:2e:8b:9a:df:24:cc:
57:cd:6d:08:c1:f8:fe:19:5a:ce:08:e7:e2:9a:31:ce:15:32:
71:d0:ca:e3:18:05:6b:4f:5c:31:18:c4:45:0f:b3:c2:f3:63:
28:93:34:80:a7:f3:c2:28:2e:da:5a:9a:7b:6f:17:be:85:66:
98:4c:7c:6c:0f:f8:9d:7c:89:8d:27:04:c3:0c:58:0b:bf:c5:
04:72:73:15:3c:f7:94:3b:ba:73:ca:c6:cb:3a:a8:46:30:a1:
f5:49:b7:62:75:8b:00:9e:d3:c4:82:b5:f5:12:8d:51:51:bd:
54:c7:5d:6e
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUcpsfRnFKfM8wejwSi0gXVgOykkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKDNEOUQyRjdCMkYzOTdCREM3MjczQjI5OUU4OEEyQzg2OTJGNEJDMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJ84IQYGZugUEsBKTGqey1lZa
V8/XSWRWQzEGsUeN0HPpnt7CVJEz/k0Mf17hL51arzQUJnmEGmaUmJvuCWtHNvc8
fsPrgViOu6ap+0JoDvsIh1GS6cYRZ9V+qiI8Irf2gD3rWhHHCCabj/dBE1Jg3WSB
nVAjZ7se61irg0qFNipWHZQSm6vv6sZCENmsklK7CzpzUO74SzIsil+v5yhWWenV
qUp4jolIavkAOxkYuRBV+mDCVga8vJlBc1GPK321zlIzNjjLFqX1ZPamH1zeOc1x
wiaenwy3Wlv+HYKKDNJ6KnNypglesT/veBmrC+4B7xw5lPhpTKLilrY6I1snAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUPZ0vey85e9xyc7KZ6IoshpL0vAYwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTM4
NTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQKwMA0GCSqGSIb3DQEBCwUAA4IBAQCbFVw7iPrL
iKkEyZY8LWwHATA1Cn29LxGDAUchRxcPOuyI3Q6ufJYaVjYdQnQ1ULiyQUYvdIJI
bHwR+GfkQVjSEf3ZsKtUO8XYXtWQu2nw7fyln6QBvfJB+kbiuxUn8jWHi7kk7Ib7
1L4Iv8P4meiKPYeXnerDHBF0bqayNbCkW1nEzKDwQWUDW3Aui5rfJMxXzW0Iwfj+
GVrOCOfimjHOFTJx0MrjGAVrT1wxGMRFD7PC82MokzSAp/PCKC7aWpp7bxe+hWaY
THxsD/idfImNJwTDDFgLv8UEcnMVPPeUO7pzysbLOqhGMKH1SbdidYsAntPEgrX1
Eo1RUb1Ux11u
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:56 2025 by rpki-client