Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141776.roa
File: AS141776.roa (raw, json)
Hash identifier: /MFuJp6gl+cYm1d6BQ6r6KaqWAdu+iMPYb0j+kYI+No=
Subject key identifier: 86:40:FA:D5:66:98:75:AE:55:A5:0C:33:32:EF:67:18:42:E8:21:74
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3A21F67E92C74F6808F7CF1244374BBA2D048B3B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141776.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 141776
IP address blocks: 2a06:a005:100::/44 maxlen: 48
2a06:a005:170::/44 maxlen: 48
2a06:a005:340::/44 maxlen: 48
2a06:a005:630::/44 maxlen: 48
2a06:a005:640::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:21:f6:7e:92:c7:4f:68:08:f7:cf:12:44:37:4b:ba:2d:04:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=8640FAD5669875AE55A50C3332EF671842E82174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:d0:dc:cb:33:e1:04:3e:7d:67:c1:d1:a7:
14:b2:c0:3a:d0:95:1b:28:70:1a:e9:09:3e:a0:3d:
56:81:1f:d2:13:ae:f9:4e:b4:f7:b1:db:8c:52:11:
13:03:ed:cc:c2:a2:b2:0f:5a:63:69:1b:01:0a:7b:
e5:36:cb:cb:f7:65:f6:0a:cc:54:c0:15:2e:7a:d4:
ca:9b:4a:0c:5b:81:82:5a:d3:ce:29:6a:59:15:66:
bc:47:06:1a:fd:7b:97:c1:7e:95:2c:ea:0d:61:32:
fe:73:f9:09:58:9a:a5:92:9b:05:04:5f:98:7f:8e:
fb:21:b3:10:ec:4b:b5:de:be:86:1b:97:a6:ee:7a:
7e:f6:f0:b4:8d:61:03:9d:8b:0c:59:66:20:40:fe:
5a:f1:a0:e3:17:ce:f2:23:c3:18:34:4f:bd:4b:e5:
1b:a9:5a:0d:7d:09:ce:55:00:71:c3:b4:eb:c5:80:
5b:99:7b:97:5a:35:50:5e:b0:c7:b4:e0:73:5b:6e:
15:37:cc:45:5b:7a:0b:85:63:41:22:40:58:21:67:
de:00:d4:cf:89:a6:05:d4:06:03:03:d8:59:f9:61:
be:fb:12:ff:d3:8a:7e:9e:23:a6:d2:7d:8a:33:6e:
3a:4e:28:6a:39:4b:74:b7:7c:ac:5a:af:dd:1d:56:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:FA:D5:66:98:75:AE:55:A5:0C:33:32:EF:67:18:42:E8:21:74
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS141776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:100::/44
2a06:a005:170::/44
2a06:a005:340::/44
2a06:a005:630::-2a06:a005:64f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:91:3c:bd:83:fa:ad:cb:3b:73:24:91:f0:fb:17:ee:c4:4f:
b5:47:47:51:ec:a9:94:55:08:f3:80:2a:f8:fc:ef:88:23:ea:
93:07:9e:f4:14:89:05:95:b8:d7:3e:cf:28:e1:d7:b6:df:26:
7a:67:cb:77:37:a8:2b:68:cd:2c:97:40:79:09:b0:ce:c6:93:
12:7b:e6:d4:28:d1:16:82:cb:6b:af:89:20:56:a7:e2:07:5b:
6a:21:bc:bd:ad:16:45:7e:13:06:26:78:36:d4:06:ee:7e:f9:
96:62:35:92:9d:8a:a9:8c:3d:01:83:da:a3:c0:aa:a8:1a:9b:
42:5d:28:5b:40:91:5d:41:88:09:45:ca:2f:21:d8:3f:2a:60:
9c:c5:40:14:85:51:90:51:3c:85:de:e8:f5:ec:1a:12:01:69:
5d:5b:c8:65:ef:a9:79:2b:85:b0:09:d4:69:2a:ee:c0:c3:e2:
97:7b:6e:27:64:b1:c8:2a:7e:0c:0a:df:91:48:ef:d0:e2:1e:
73:a2:be:95:1a:e0:53:8c:78:87:a0:c7:a3:15:51:2a:70:a0:
1d:a6:87:5f:59:82:1e:9c:8d:38:73:73:00:63:1c:8d:d3:ff:
b5:42:35:cb:89:53:97:74:ec:e3:9d:30:8e:e7:99:5a:ef:c3:
6d:7d:a8:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:06 2025 by rpki-client