Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139311.roa
File: AS139311.roa (raw, json)
Hash identifier: qJHVZNCgjGvSqXYZ4T1LCGFw5e9sCKrk0554gu/F2Jo=
Subject key identifier: 18:32:83:33:7C:4B:6F:7E:50:D1:3C:DC:9B:03:78:C8:81:62:73:4B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7C3923CF6463C9605784ADBD61C954D89ADC2665
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139311.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 139311
IP address blocks: 2a06:a005:10b0::/44 maxlen: 48
2a06:a005:10c0::/44 maxlen: 48
2a06:a005:10d0::/44 maxlen: 48
2a06:a005:10e0::/44 maxlen: 48
2a06:a005:10f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:39:23:cf:64:63:c9:60:57:84:ad:bd:61:c9:54:d8:9a:dc:26:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=183283337C4B6F7E50D13CDC9B0378C88162734B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:1b:11:10:bc:34:d8:f1:52:18:b7:f1:1e:
b4:7c:b9:8b:fb:eb:da:b0:8e:af:dd:9b:64:f4:f0:
d2:c8:9e:bc:e2:32:cf:5b:27:5e:fa:82:51:d3:59:
23:87:47:4d:dc:77:fe:87:37:92:33:8c:45:a4:9d:
88:9b:9b:03:00:24:34:aa:eb:58:fe:85:58:b3:ba:
86:52:af:92:d9:52:86:7e:47:a6:10:0b:11:be:29:
c4:e5:18:4f:48:e4:b9:1b:01:fa:02:29:d0:55:4b:
89:b8:45:6b:9c:50:ef:3b:3d:5a:81:06:5d:61:52:
58:f8:76:e8:c6:f7:a9:15:db:67:ab:4f:3f:75:30:
1f:97:3f:11:9b:4e:4c:8f:5b:a1:6f:1b:37:3d:ef:
16:c3:75:3f:13:29:8c:57:ca:94:3a:1e:19:3c:46:
cc:d8:e8:52:ce:f3:aa:d7:d6:ab:8b:f7:4f:a0:71:
68:53:ff:36:b6:ce:b2:86:74:d6:7e:b2:15:c4:1e:
55:d5:b4:70:f7:de:5d:65:75:d8:c9:73:cc:2b:25:
f2:99:4c:bb:a6:4b:f9:43:df:22:94:c4:47:20:f8:
43:91:c6:4d:b3:71:42:c9:75:65:41:0a:bc:d2:76:
f7:6f:33:32:b4:ce:dc:8f:e5:90:c5:33:40:6a:06:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:32:83:33:7C:4B:6F:7E:50:D1:3C:DC:9B:03:78:C8:81:62:73:4B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10b0::-2a06:a005:10ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:14:43:68:c6:35:fb:f4:00:89:54:91:98:2f:0d:66:ca:d1:
40:33:c6:88:08:2b:40:3b:04:7a:de:41:3a:ef:c0:28:d2:8e:
61:a5:ba:1f:d1:37:5a:b6:a6:61:d2:ec:f3:8e:3a:a5:43:ac:
ae:45:07:6d:f2:94:12:74:15:28:55:a8:c8:26:b1:ec:a6:d2:
2b:0d:c1:be:72:2f:8a:3e:0c:4c:4b:48:fa:97:62:96:c5:6b:
01:d8:1e:d1:c4:55:7f:c6:2e:39:2a:69:da:3d:c6:0f:1c:ea:
34:fa:30:f5:cc:1c:9c:22:fa:cc:f6:b8:c3:cb:7b:07:8d:d0:
24:a0:8e:45:4f:f3:72:41:e8:55:68:fc:f1:b0:5c:df:8a:a3:
2f:73:c7:c2:51:fc:96:37:bf:c7:9d:d7:1e:39:0c:eb:a2:6d:
32:56:1e:ce:90:e9:09:08:76:8a:c5:38:6c:b0:1d:0d:2d:12:
c5:ad:22:42:ad:4c:79:b4:d2:65:6d:41:7b:27:83:26:5b:80:
a4:c1:65:e3:df:8e:e6:90:fa:26:13:c3:dd:89:d8:6f:03:b9:
53:25:f7:26:5a:d1:ad:71:9b:58:54:f8:32:83:de:f7:8e:1b:
f3:06:44:2f:fb:cc:fc:74:02:6e:6b:d2:60:79:98:47:2c:f3:
d7:f9:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:42 2025 by rpki-client