Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139967.roa
File: AS139967.roa (raw, json)
Hash identifier: jsprZOYP8nhhpYtJC8xdaICFwMoiUESNhwMMafJ0x/E=
Subject key identifier: 62:D9:46:E9:D7:F0:91:41:F8:F1:05:68:E8:22:E5:7C:38:7F:3C:70
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0B90FE0E22F74BBB88EC8407463E2337D25632E9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139967.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 139967
IP address blocks: 2a06:a005:45f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:90:fe:0e:22:f7:4b:bb:88:ec:84:07:46:3e:23:37:d2:56:32:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=62D946E9D7F09141F8F10568E822E57C387F3C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:04:e3:39:aa:0d:98:a9:8b:f5:63:28:e5:
23:76:4c:1a:4b:b8:82:67:29:f7:55:ae:c9:8f:b6:
26:64:7c:f9:6b:b5:21:ed:62:f9:a6:9d:23:cd:69:
01:b0:db:e8:0a:2f:dc:15:8e:84:8e:61:9e:46:01:
d5:be:c0:a1:0e:25:2a:df:92:16:90:85:72:fe:ee:
bd:b7:21:52:eb:20:5d:40:de:39:f6:19:2a:b3:3e:
dc:2a:62:a0:bb:5a:14:15:19:27:aa:45:df:05:57:
53:3f:8a:73:60:96:be:e1:2c:ae:8d:29:72:58:15:
6c:fd:4d:0e:2e:c7:8b:4f:05:ca:e8:0c:38:92:78:
1f:60:4d:f1:b2:4c:e8:e0:45:6c:85:b1:57:c8:cb:
a6:f2:8e:ba:8d:93:bf:f9:2e:17:ae:6f:71:ba:0f:
85:b2:07:93:21:41:8c:77:fd:53:59:44:fc:74:11:
a6:21:9d:6f:5d:ee:c7:96:82:a5:28:14:0c:94:de:
81:c4:19:57:df:7c:ee:95:24:93:03:2e:34:01:15:
c3:21:93:9d:e7:d4:85:47:93:b6:f9:e2:2f:ac:60:
af:40:3d:f4:3a:1b:c1:6c:87:70:4f:d7:8e:09:13:
0c:91:b8:d8:ba:68:93:1a:74:3c:8c:1f:fa:00:6d:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:46:E9:D7:F0:91:41:F8:F1:05:68:E8:22:E5:7C:38:7F:3C:70
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45f::/48
Signature Algorithm: sha256WithRSAEncryption
5d:70:40:a6:5e:ab:ce:d5:b6:93:8e:c5:7a:0c:16:76:eb:24:
81:a2:93:33:ae:66:e6:50:0c:f1:c4:42:46:05:3c:5a:6c:cb:
93:4a:22:0e:b8:8b:37:fb:05:c5:34:1a:7d:bc:de:32:ae:6a:
4d:5d:d6:b3:62:ea:18:9e:e7:2f:59:24:e1:d5:8a:d3:90:47:
4d:f6:97:d4:70:e0:6a:08:3c:c6:40:ef:d2:41:0a:f0:d0:52:
d2:ff:a6:3e:5e:16:9d:8d:79:8b:50:df:9a:cd:e2:31:8e:7a:
29:8f:c1:8e:bf:bb:3f:c7:50:a5:83:5f:79:87:93:16:5b:89:
38:ae:22:de:78:7b:58:5a:10:1c:00:61:5e:9f:da:1d:a4:d5:
ed:0c:17:e7:13:8c:8d:02:2d:fd:3d:53:f9:c3:2c:c6:2f:99:
89:a0:aa:7c:a0:64:45:f5:81:26:23:1f:33:90:ed:63:cf:fe:
28:98:15:a6:9b:81:3c:91:44:e8:6b:96:4c:d6:85:e0:f0:de:
76:00:25:42:8b:e0:0a:8e:b2:fd:2c:bb:d5:ce:be:de:52:03:
61:a3:d8:58:06:e8:18:5c:41:7d:7c:b0:b8:39:aa:1e:a3:e8:
ac:ac:5f:6d:ae:36:a4:43:53:f1:90:00:38:87:74:7a:81:9c:
be:91:71:9b
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUC5D+DiL3S7uI7IQHRj4jN9JWMukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDVaFw0yMzEyMjAxNjU2NDVaMDMxMTAvBgNV
BAMTKDYyRDk0NkU5RDdGMDkxNDFGOEYxMDU2OEU4MjJFNTdDMzg3RjNDNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4wTjOaoNmKmL9WMo5SN2TBpL
uIJnKfdVrsmPtiZkfPlrtSHtYvmmnSPNaQGw2+gKL9wVjoSOYZ5GAdW+wKEOJSrf
khaQhXL+7r23IVLrIF1A3jn2GSqzPtwqYqC7WhQVGSeqRd8FV1M/inNglr7hLK6N
KXJYFWz9TQ4ux4tPBcroDDiSeB9gTfGyTOjgRWyFsVfIy6byjrqNk7/5Lheub3G6
D4WyB5MhQYx3/VNZRPx0EaYhnW9d7seWgqUoFAyU3oHEGVfffO6VJJMDLjQBFcMh
k53n1IVHk7b54i+sYK9APfQ6G8Fsh3BP144JEwyRuNi6aJMadDyMH/oAbUolAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUYtlG6dfwkUH48QVo6CLlfDh/PHAwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTM5
OTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQRfMA0GCSqGSIb3DQEBCwUAA4IBAQBdcECmXqvO
1baTjsV6DBZ26ySBopMzrmbmUAzxxEJGBTxabMuTSiIOuIs3+wXFNBp9vN4yrmpN
XdazYuoYnucvWSTh1YrTkEdN9pfUcOBqCDzGQO/SQQrw0FLS/6Y+XhadjXmLUN+a
zeIxjnopj8GOv7s/x1Clg195h5MWW4k4riLeeHtYWhAcAGFen9odpNXtDBfnE4yN
Ai39PVP5wyzGL5mJoKp8oGRF9YEmIx8zkO1jz/4omBWmm4E8kUToa5ZM1oXg8N52
ACVCi+AKjrL9LLvVzr7eUgNho9hYBugYXEF9fLC4Oaoeo+isrF9trjakQ1PxkAA4
h3R6gZy+kXGb
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:13 2025 by rpki-client