Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141749.roa
File: AS141749.roa (raw, json)
Hash identifier: 2DabGHl+vQXeHZ/Yu9VgzPrE9YEZTucAxyX0XRmjdJo=
Subject key identifier: 0F:8C:D8:79:A6:76:F6:15:F6:4D:D4:2A:06:2E:CE:02:F2:6E:E7:F6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4761CA157BE54790A27B493D616D625A1CCA2B1B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141749.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 141749
IP address blocks: 2a06:a005:26a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:61:ca:15:7b:e5:47:90:a2:7b:49:3d:61:6d:62:5a:1c:ca:2b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=0F8CD879A676F615F64DD42A062ECE02F26EE7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:07:44:fc:97:14:8e:57:88:e6:60:2f:19:
b1:4f:9d:3c:82:92:27:93:ca:b0:ce:fe:4a:3a:21:
85:c1:e9:86:f8:db:54:f0:0b:0b:a8:c0:5c:97:f1:
3f:7b:3e:4d:f5:ad:a3:16:e5:b8:cb:5f:0e:5b:ef:
8a:14:ac:22:94:4c:83:07:30:df:0d:7d:de:03:e4:
e2:9c:f9:52:5d:58:e9:e0:70:9f:35:7a:38:ff:d7:
3b:34:1d:82:34:f9:55:d5:27:81:b3:11:ee:de:13:
0f:4b:44:c9:21:56:67:3d:a2:d6:58:84:6e:53:44:
2e:99:1c:ae:0a:a2:90:6c:1c:c1:7d:2c:21:3d:24:
e6:b5:9f:c4:04:68:38:a2:ff:b2:3b:28:1c:1b:03:
9a:70:38:f9:62:b0:9e:0e:bd:c6:18:26:f2:c4:5e:
bf:55:a5:dd:c5:ad:a7:5e:db:ba:7f:ab:e0:30:4a:
8b:28:d2:0e:4a:67:80:db:0e:be:39:90:8b:e9:31:
0a:71:ec:d1:b4:ab:78:bb:13:02:fd:40:9d:8c:5d:
96:c8:4d:2c:7e:39:13:05:5d:55:fd:f8:5d:a4:df:
0d:b3:3e:4a:de:13:28:bd:28:6c:19:de:30:c1:cb:
8b:ab:ba:76:9f:ae:cc:86:ca:3b:ac:5a:3a:ec:cd:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:D8:79:A6:76:F6:15:F6:4D:D4:2A:06:2E:CE:02:F2:6E:E7:F6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26a0::/44
Signature Algorithm: sha256WithRSAEncryption
df:0a:5b:d5:2e:b3:d6:94:ae:95:96:a1:30:a6:8f:d2:b0:f1:
ce:c0:4f:dc:41:11:67:f8:64:9f:4d:fd:64:9b:c1:27:ad:fd:
5d:53:fe:9c:2b:dd:2b:7b:3c:93:4f:15:c7:41:d5:d2:be:0c:
d7:72:e3:28:3b:a1:9d:c8:99:f2:90:b4:5d:18:0e:45:8b:28:
4f:cc:d1:20:44:95:1c:de:04:32:b8:40:b9:e8:d6:f6:e8:e1:
7c:b1:a0:af:5d:8e:45:6f:fe:c3:98:ba:5d:be:30:54:b8:14:
d4:f4:2b:26:87:fe:46:aa:11:e4:63:3a:bc:17:57:e8:99:f4:
34:6c:2a:e3:3d:16:cc:97:dc:c2:ba:5e:ef:c3:b9:fd:c9:7f:
1f:47:6d:8a:7f:6a:15:ff:e7:75:7e:db:5e:b4:70:20:bc:4b:
e1:99:a9:4c:2a:4c:76:4a:46:ad:0e:be:ef:0f:9d:61:d7:36:
47:ba:b5:23:20:06:b0:3c:bc:2a:7b:10:1d:4d:59:24:7a:6a:
f5:70:b1:d4:dc:26:b1:84:7d:c9:64:20:a4:cd:15:0b:a3:c5:
54:f4:9e:a6:0a:67:57:ec:59:39:11:fa:89:7f:71:33:0f:91:
9b:d6:05:c3:6f:39:53:f5:ab:68:bc:b0:ad:24:2a:10:00:1f:
b4:38:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:28 2025 by rpki-client