Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141694.roa
File: AS141694.roa (raw, json)
Hash identifier: 7Q8Kodm/MPerLF4nwKtYmemJkwlmqt6kbf8cILm7Msg=
Subject key identifier: 3F:17:01:D3:27:5A:8E:42:83:05:6F:FA:C9:3C:40:DB:4E:9B:15:D4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 46EAC361BA7910710EEE825F16CB5E37E7048C38
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141694.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 141694
IP address blocks: 2a06:a005:f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ea:c3:61:ba:79:10:71:0e:ee:82:5f:16:cb:5e:37:e7:04:8c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=3F1701D3275A8E4283056FFAC93C40DB4E9B15D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:b9:10:13:24:b1:84:c4:b5:47:da:96:59:
d2:54:65:a9:36:4a:12:1e:eb:bc:9b:5d:91:33:93:
d3:58:71:6b:38:27:64:57:77:26:9c:6a:2c:e2:5a:
13:82:f4:f6:f7:77:88:36:4f:6d:3f:2b:74:fa:e3:
66:46:0d:0c:76:2a:48:54:c5:8f:0c:5c:b8:99:1d:
74:5e:94:b5:1c:db:cd:5a:64:19:df:3f:50:d5:3d:
4f:92:e3:b0:ff:03:e5:86:11:86:fa:09:00:91:9a:
c0:73:f6:b9:b6:d3:96:31:a9:29:d4:6a:e2:cd:1d:
8f:96:24:a6:fa:53:c7:b8:7f:8a:4c:55:c0:95:40:
d6:2e:65:80:99:92:74:77:44:ad:b7:d6:76:cc:17:
55:22:09:59:b4:0b:cc:90:2a:2d:e5:82:8e:2d:39:
d2:73:e1:85:26:da:e9:6b:31:25:79:46:c7:0f:bf:
5d:ea:21:09:30:62:fe:15:b3:ef:97:5e:22:13:87:
74:a3:d9:99:f1:a4:3e:06:c0:32:f7:33:01:23:b1:
bc:09:6c:47:c6:de:4c:b1:05:cf:27:43:65:36:ee:
27:e4:7b:20:db:57:70:fc:f4:74:3a:98:ec:46:69:
e8:f8:a3:03:1d:7a:99:3e:9b:50:8f:f4:0e:46:a1:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:01:D3:27:5A:8E:42:83:05:6F:FA:C9:3C:40:DB:4E:9B:15:D4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141694.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f0::/44
Signature Algorithm: sha256WithRSAEncryption
76:22:9b:91:4c:3d:3c:f0:41:fd:69:df:e6:b9:19:7b:31:1c:
cc:61:2b:3d:51:fb:c7:f6:c5:57:a5:c3:d4:b4:be:e1:b9:08:
f8:bd:9f:8f:56:ef:33:75:0a:ec:66:ab:2b:9f:39:3a:ee:b1:
00:2e:97:1a:60:21:ce:29:e0:67:fd:55:0f:d5:c5:0a:21:da:
b6:13:b1:72:31:8c:89:f0:eb:c1:11:f2:90:05:6f:75:d5:c1:
44:a4:32:95:6a:e2:b6:cf:e5:64:62:6c:02:4f:c7:de:1c:4b:
9f:20:c8:b3:ff:d5:02:85:b6:4b:2d:5c:8b:d5:51:a1:39:27:
fb:af:12:82:94:f7:e0:26:91:0a:3a:28:00:e6:e8:15:fd:97:
e3:36:8a:fc:08:28:22:40:22:86:2c:6f:24:bc:19:5e:c4:8f:
74:3e:f6:31:13:a3:83:ef:dd:c2:6d:c7:a3:6e:cf:b5:09:aa:
7b:db:b9:5c:da:12:dc:a1:a1:cb:a1:08:44:6e:6e:81:ac:37:
d3:96:9b:27:04:2a:16:bb:f7:87:09:87:ce:23:13:f0:dd:a9:
ae:71:54:cd:f2:c8:de:f6:30:cd:5c:ea:ca:73:42:c1:51:cd:
c6:97:fb:f6:2b:0c:73:6d:e7:bd:44:b6:95:6f:93:4c:a1:e8:
6b:51:8f:3f
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIURurDYbp5EHEO7oJfFsteN+cEjDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDVaFw0yMzEyMjAxNjU2NDVaMDMxMTAvBgNV
BAMTKDNGMTcwMUQzMjc1QThFNDI4MzA1NkZGQUM5M0M0MERCNEU5QjE1RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZLkQEySxhMS1R9qWWdJUZak2
ShIe67ybXZEzk9NYcWs4J2RXdyacaiziWhOC9Pb3d4g2T20/K3T642ZGDQx2KkhU
xY8MXLiZHXRelLUc281aZBnfP1DVPU+S47D/A+WGEYb6CQCRmsBz9rm205YxqSnU
auLNHY+WJKb6U8e4f4pMVcCVQNYuZYCZknR3RK231nbMF1UiCVm0C8yQKi3lgo4t
OdJz4YUm2ulrMSV5RscPv13qIQkwYv4Vs++XXiITh3Sj2ZnxpD4GwDL3MwEjsbwJ
bEfG3kyxBc8nQ2U27ifkeyDbV3D89HQ6mOxGaej4owMdepk+m1CP9A5GoREpAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUPxcB0ydajkKDBW/6yTxA206bFdQwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTQx
Njk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQDwMA0GCSqGSIb3DQEBCwUAA4IBAQB2IpuRTD08
8EH9ad/muRl7MRzMYSs9UfvH9sVXpcPUtL7huQj4vZ+PVu8zdQrsZqsrnzk67rEA
LpcaYCHOKeBn/VUP1cUKIdq2E7FyMYyJ8OvBEfKQBW911cFEpDKVauK2z+VkYmwC
T8feHEufIMiz/9UChbZLLVyL1VGhOSf7rxKClPfgJpEKOigA5ugV/ZfjNor8CCgi
QCKGLG8kvBlexI90PvYxE6OD793Cbcejbs+1Cap727lc2hLcoaHLoQhEbm6BrDfT
lpsnBCoWu/eHCYfOIxPw3amucVTN8sje9jDNXOrKc0LBUc3Gl/v2Kwxzbee9RLaV
b5NMoehrUY8/
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:05 2025 by rpki-client