Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139882.roa
File: AS139882.roa (raw, json)
Hash identifier: uCTNGPq5Yp+EojcRkM1xBlMxvrgMwoQxBA/579pQE9o=
Subject key identifier: 9A:56:14:56:9C:51:30:4F:47:01:83:69:E4:1A:36:67:BF:DF:D7:91
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 37FE5D0E3A68B53CADB1A0B2E46E63B2CBC30E75
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139882.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 139882
IP address blocks: 2a06:a005:360::/44 maxlen: 48
2a06:a005:370::/44 maxlen: 48
2a06:a005:380::/44 maxlen: 48
2a06:a005:390::/44 maxlen: 48
2a06:a005:3a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:fe:5d:0e:3a:68:b5:3c:ad:b1:a0:b2:e4:6e:63:b2:cb:c3:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=9A5614569C51304F47018369E41A3667BFDFD791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:fa:e0:7d:fc:ee:bb:ca:d4:44:7b:16:a8:
0c:29:0b:bc:ed:4f:b9:48:f1:38:f9:79:0f:29:05:
9d:91:86:41:21:f4:34:31:44:2d:df:9e:08:e8:ce:
2a:68:20:f2:36:b2:62:fb:0b:45:48:c1:a7:22:5b:
5c:f9:e0:e7:f7:67:aa:32:13:e6:e4:16:65:8a:82:
e1:60:72:67:41:cf:62:70:1a:09:b3:8c:2f:b0:40:
e3:d8:b0:1f:ea:8b:b7:83:8b:c7:23:da:f6:09:c8:
7d:63:aa:0d:64:43:d9:db:e4:be:b5:b2:0d:80:2f:
81:74:4e:c0:a5:95:54:97:01:9d:3b:ff:61:a1:bb:
75:71:9a:e7:25:74:c5:15:7d:98:4e:d2:7f:c6:d7:
07:4a:de:0d:ae:0e:92:b3:0b:db:4e:9b:03:a3:7e:
a5:f2:1f:90:dd:d0:b7:c1:cd:07:94:ad:9c:90:3d:
46:75:df:84:19:9f:b1:6f:ed:c0:a7:ea:a2:70:de:
ff:08:df:a1:3f:44:35:62:fc:1c:b7:5c:25:3a:8b:
2d:37:84:04:40:21:2e:74:65:e8:8b:f0:61:80:5b:
a1:6c:b2:16:f6:18:2c:c9:6a:56:3c:96:ba:ae:3f:
32:fa:19:7d:56:29:a2:10:50:97:56:d0:8f:8f:f6:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:14:56:9C:51:30:4F:47:01:83:69:E4:1A:36:67:BF:DF:D7:91
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:360::-2a06:a005:3af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
e2:9b:ec:6c:f3:c7:87:47:8a:b9:b8:df:ac:0a:f4:92:07:9a:
b6:6b:b6:3d:e3:46:ca:8d:70:05:4b:c1:46:f9:57:9b:4c:39:
b3:9c:df:9b:9a:a2:a7:42:69:0e:dc:3e:0d:09:1b:5b:eb:6e:
f7:0d:93:55:88:81:3d:e9:df:d2:d8:1a:d4:99:58:6d:ac:9d:
48:cb:67:1f:7f:f6:59:83:a0:63:b5:86:56:74:f6:2f:16:2f:
7e:50:7f:f6:cb:56:68:d9:f3:02:1d:dd:78:66:74:11:12:ff:
ed:69:b8:c6:e4:26:0c:4e:72:66:a0:df:42:b7:c1:dc:87:41:
e3:c8:e1:66:ce:6b:74:49:22:33:83:86:36:0e:1c:56:a2:a8:
df:41:d6:33:8f:b9:a2:b9:aa:55:84:d3:0e:1b:e3:4e:5e:7e:
00:59:94:d9:0f:ea:78:16:b2:a5:8e:71:0a:dd:ce:39:35:d1:
e8:c6:80:20:60:15:4f:f9:da:53:e8:32:a4:ed:aa:8a:ca:32:
9d:ba:93:38:6c:7e:6f:e3:10:83:8f:1b:b2:fa:3d:bd:79:5c:
47:78:ae:df:b4:1d:50:79:d6:1b:2b:63:1a:4e:ee:90:33:89:
89:28:3f:96:07:fc:a0:99:ba:02:54:29:59:d1:93:f6:60:34:
2b:c3:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:34 2025 by rpki-client