Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139328.roa
File: AS139328.roa (raw, json)
Hash identifier: Ezz5/SgklpTDwZNTuPsgIJLDnFKxjxIeeqDdf8oNt30=
Subject key identifier: D2:2C:EA:68:76:E0:09:75:92:18:5F:24:FC:DE:D6:F2:9A:A2:3F:4F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 611022E0E90E28AD7DE0693E787C3961814B7E1E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139328.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 139328
IP address blocks: 2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:520::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
2a06:a005:1150::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:10:22:e0:e9:0e:28:ad:7d:e0:69:3e:78:7c:39:61:81:4b:7e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=D22CEA6876E0097592185F24FCDED6F29AA23F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:a0:de:b5:2a:b6:0a:17:a9:7c:88:6c:ea:
78:1b:06:e9:a9:9b:71:f5:e3:91:ee:dd:27:a3:6a:
b2:2a:87:35:17:3d:32:79:94:56:90:72:1f:b5:73:
48:86:60:36:1a:29:9f:c0:f0:15:a7:88:dc:28:8b:
53:2e:86:45:90:7c:fc:4b:e5:dc:e3:10:c5:cd:22:
52:78:89:a9:f8:2f:78:78:46:5e:a1:93:45:9f:28:
1c:ee:c9:0c:73:c2:ba:e9:21:17:a7:64:d3:56:6a:
24:0c:f0:f9:94:f9:d5:e3:00:c7:20:a4:5b:0a:84:
a8:88:70:ae:a0:a1:51:b3:62:2a:34:ca:3b:89:a8:
7b:e1:96:c7:77:c1:bf:0e:07:f4:09:ae:44:ff:5c:
c2:db:48:64:c9:a7:80:a0:2b:8d:e9:ef:66:a4:ff:
21:47:c7:63:67:00:d5:f8:a2:86:09:1c:d8:40:33:
3e:cb:7c:e1:fb:54:46:20:6b:fc:26:f0:5e:0f:0c:
f5:21:0a:20:f0:ca:94:d6:7b:75:62:29:76:79:b5:
1b:d2:d6:7e:c6:6b:7d:20:4d:40:4c:f7:0d:87:e5:
69:83:00:01:96:a2:c7:44:45:fd:4d:a4:7a:97:1d:
c0:b0:e0:00:b4:3a:56:ea:13:f6:88:66:49:3c:3e:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:EA:68:76:E0:09:75:92:18:5F:24:FC:DE:D6:F2:9A:A2:3F:4F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
2a06:a005:1150::/44
Signature Algorithm: sha256WithRSAEncryption
dc:fb:24:31:3d:9c:78:c7:60:90:59:04:7e:4b:bf:6f:da:fe:
90:19:01:b2:af:80:6f:d3:c2:46:1d:c0:30:27:8b:2b:51:19:
11:a5:f0:32:f6:33:05:83:08:36:83:1b:20:66:fa:21:1d:71:
f8:e5:d8:32:56:e0:55:a6:cb:00:e1:4c:17:98:4b:dd:2e:0a:
9d:c6:17:63:39:55:f2:59:07:7c:43:71:f0:bf:02:9c:72:b5:
3c:83:5e:f8:7d:f9:85:7c:f9:5f:2a:2c:c2:bf:e3:5f:2b:16:
71:74:e2:16:70:ad:0b:8b:51:15:17:08:d1:b7:35:69:87:60:
82:c3:10:e3:8f:17:85:56:6f:ca:71:1e:d0:04:4c:04:84:0c:
36:d5:a5:ee:2f:9d:d0:d5:53:d5:68:75:3b:18:03:e1:82:92:
b7:cd:f7:3d:d6:8b:17:46:86:58:2e:92:6d:dc:37:54:e4:69:
4a:d2:08:a3:68:d2:07:1c:7b:33:c8:0c:85:43:51:b8:0a:b4:
cc:63:a2:4d:c0:c7:a9:f5:35:9d:fb:ef:81:55:37:60:ac:93:
93:39:8f:92:96:70:bb:c0:31:67:ae:5a:17:dd:38:32:da:1d:
ea:05:2d:ed:d3:2f:ca:05:8f:0b:a7:2d:65:eb:bc:ca:73:c0:
26:dc:04:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:09 2025 by rpki-client