Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139989.roa
File: AS139989.roa (raw, json)
Hash identifier: 1k//z7OKwJxRFiB4O3FoiG1iHuxR1BFPdVxtG9bw+YQ=
Subject key identifier: 5E:2F:EF:CF:A4:2D:5C:C9:71:FD:EA:46:30:DE:F7:32:32:A7:38:C6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 707BF6DDB14011B731957C761E5EC574E9F9E772
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139989.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 139989
IP address blocks: 2a06:a005:a10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7b:f6:dd:b1:40:11:b7:31:95:7c:76:1e:5e:c5:74:e9:f9:e7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=5E2FEFCFA42D5CC971FDEA4630DEF73232A738C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:da:05:55:a2:97:f5:11:03:4d:51:e0:45:
f4:c0:fd:8e:b2:48:22:32:bf:1d:9c:73:e8:05:9f:
42:3f:4c:21:3b:4e:66:60:54:30:69:f5:4e:83:ca:
0f:b9:cc:72:91:85:b8:53:32:4b:56:1f:13:cb:b6:
3a:34:dd:85:94:b6:2d:92:11:36:b1:55:fe:72:c3:
63:eb:9b:52:78:44:89:05:10:e6:cb:e8:24:32:52:
35:66:8e:f3:9a:61:8d:08:a4:87:c3:58:cc:94:ec:
1a:a0:91:14:e8:4c:99:33:47:c3:c4:81:17:e4:de:
53:ac:84:f8:a2:af:bd:0f:64:bb:3e:6f:30:e4:6e:
f6:2f:0c:b2:18:4e:fe:72:b0:b5:87:89:cc:a7:76:
9a:e2:fc:15:d9:78:5c:b2:14:b2:2a:78:23:c4:06:
3f:04:f5:e3:53:c4:98:31:6d:fd:b0:96:27:01:57:
63:a7:e6:56:9c:37:1b:ef:83:ba:ab:59:ab:36:19:
f8:51:8b:2f:3a:ac:8e:40:39:39:b1:9c:f0:7b:ae:
88:07:c6:74:80:20:f6:bd:a1:75:a7:1d:e9:fb:75:
73:71:36:07:80:35:d9:f9:a6:96:43:e5:20:fc:39:
00:97:69:67:d0:1b:92:d0:7d:82:6d:e2:44:c1:b3:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2F:EF:CF:A4:2D:5C:C9:71:FD:EA:46:30:DE:F7:32:32:A7:38:C6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS139989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a10::/48
Signature Algorithm: sha256WithRSAEncryption
bd:9d:02:dc:84:f5:36:c3:ef:2c:fc:79:1e:58:57:82:d7:ab:
5c:68:3f:d1:6e:32:4b:a6:c4:89:2f:86:f3:1e:b4:3e:92:58:
04:8a:3b:22:ab:07:81:c2:fc:d2:37:a8:a9:b9:26:9e:97:17:
41:7c:78:d7:02:82:f0:d4:76:50:d7:41:ff:28:85:e3:03:ac:
73:81:98:34:f9:64:73:31:1a:26:d7:4d:0b:34:0d:84:f4:92:
27:79:38:d3:a5:d7:7c:e4:26:c9:e0:64:30:bd:ba:86:f4:2e:
aa:49:f9:02:0d:13:4f:5f:8f:22:84:0b:db:2f:44:cb:91:1c:
1f:35:db:1e:9e:0e:a3:09:95:18:b8:cb:e3:89:0e:07:25:ab:
57:2f:75:68:ec:a5:6d:e0:de:7c:df:48:7c:94:23:49:f1:a8:
24:fd:f5:de:45:35:95:f1:c7:23:e8:15:15:fd:31:77:c9:4d:
d8:26:d8:68:05:7a:e7:41:34:a7:d5:80:b3:e0:48:44:e0:6a:
ab:ad:89:be:c7:1d:d2:8d:a5:db:e1:97:a7:0a:6c:38:4f:aa:
e3:9d:bc:81:c3:e4:b6:e7:e8:2e:51:78:33:69:0f:9d:92:d5:
63:79:67:7f:65:7c:1a:25:07:96:d9:71:2d:69:6b:c5:5c:46:
b1:b0:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:43 2025 by rpki-client