Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS140506.roa
File: AS140506.roa (raw, json)
Hash identifier: sdv44SbgpjBy5Fays9qOimx9ThBGdwXSdnBXKNuL6oM=
Subject key identifier: F5:73:3C:2E:B8:3A:24:86:21:4D:8D:8D:0D:E4:35:31:C9:BF:68:56
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0DDAD325E8A1FB05F9F08B94117F63152B10E9E4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS140506.roa
Signing time: Mon 26 Dec 2022 19:15:20 +0000
ROA not before: Mon 26 Dec 2022 19:10:20 +0000
ROA not after: Mon 25 Dec 2023 19:15:20 +0000
asID: 140506
IP address blocks: 2a06:a005:d70::/44 maxlen: 48
2a06:a005:e60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:da:d3:25:e8:a1:fb:05:f9:f0:8b:94:11:7f:63:15:2b:10:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 26 19:10:20 2022 GMT
Not After : Dec 25 19:15:20 2023 GMT
Subject: CN=F5733C2EB83A2486214D8D8D0DE43531C9BF6856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:b2:1c:b6:82:c1:88:57:fd:55:db:4d:98:
62:5f:50:81:59:09:b1:62:68:92:76:7c:4f:11:0c:
e2:a4:84:1b:ea:d6:39:6d:99:df:37:3d:c3:0f:66:
7d:36:62:7c:ea:5a:48:5a:72:df:7c:28:85:bf:ec:
9d:8e:2f:c7:d2:4c:0d:e6:d7:9f:f7:bf:37:a7:b4:
19:4f:f5:0c:69:f2:8f:b3:ab:e0:c2:0e:65:fe:fd:
24:48:6f:f3:a1:c9:35:f6:b3:31:9b:47:b2:54:80:
0c:9f:7b:fe:bc:02:70:30:6f:41:54:60:53:c7:95:
9f:77:17:53:4f:db:35:8a:c6:a0:ee:f8:63:f4:d4:
54:f1:a4:40:66:45:cd:f3:0a:cb:1f:31:1e:23:53:
24:80:dc:63:82:71:de:10:1f:d4:96:52:09:6b:1b:
5b:a1:0a:3e:d1:74:ff:ca:12:68:c5:13:bd:5a:60:
30:46:e4:9b:fc:38:57:b0:7b:29:91:b7:78:e2:58:
13:50:4f:1c:ea:0d:35:20:9f:66:9e:47:4c:fc:98:
cc:9a:62:60:21:28:54:1d:b7:d0:3c:c0:77:a3:73:
37:1b:80:af:2b:96:59:15:25:df:7b:33:ab:1b:e0:
2f:e4:35:69:46:0e:2f:4a:29:04:06:05:99:2f:90:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:3C:2E:B8:3A:24:86:21:4D:8D:8D:0D:E4:35:31:C9:BF:68:56
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS140506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d70::/44
2a06:a005:e60::/44
Signature Algorithm: sha256WithRSAEncryption
aa:dc:47:e6:0c:4a:79:fb:04:79:85:3c:68:1b:fc:a8:d7:ec:
1e:8e:8c:03:77:62:82:08:3c:c7:78:d4:ae:8b:b5:e9:e7:be:
4c:e7:bf:37:c1:bd:66:15:6e:3c:72:d8:83:30:f6:93:cf:b3:
11:ef:8d:ba:1a:92:3c:94:7c:0a:df:9d:ff:86:63:40:6f:54:
98:50:06:95:48:bb:26:03:c3:de:50:dd:26:9e:30:b6:a4:84:
22:af:b3:4c:f9:b7:e2:4c:b9:a6:8d:35:9f:d2:e6:65:bb:43:
c3:e7:5f:ff:09:73:87:f4:ed:82:f7:49:50:bf:e0:91:34:f4:
b4:66:58:67:2e:55:de:3b:15:6c:4c:ab:d9:db:a1:eb:05:23:
2e:73:f7:a2:1a:ac:8d:d8:f5:1d:fa:b4:46:15:8f:a0:e2:dc:
db:f0:af:6e:58:1f:d8:3b:43:45:1a:9b:3a:b1:c5:42:43:d7:
1e:be:a5:c9:1f:aa:12:de:46:44:e8:4b:d6:ed:e5:45:1c:ae:
bf:43:45:38:15:17:84:fd:d0:46:cb:f0:30:fc:18:a3:ff:6f:
dd:a5:9d:24:9f:b7:7c:6b:95:1d:fe:f2:48:67:2d:46:82:db:
20:e5:b1:3f:a7:be:2b:93:b3:05:a5:71:52:e0:d2:ee:c3:80:
ee:dc:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:07 2025 by rpki-client