Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142164.roa
File: AS142164.roa (raw, json)
Hash identifier: p4bPmyayJAPj3rpL54TwvwDD5epDCUcJOFyazPY6Nak=
Subject key identifier: 9B:C1:D7:59:8C:75:1C:C3:34:05:37:08:80:B3:92:71:DE:8C:36:DD
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5A73BDE2B129946DEA3DC5343B55B78CBFC7B84D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142164.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 142164
IP address blocks: 2a06:a005:e80::/44 maxlen: 48
2a06:a005:e90::/44 maxlen: 48
2a06:a005:ea0::/44 maxlen: 48
2a06:a005:eb0::/44 maxlen: 48
2a06:a005:ec0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:73:bd:e2:b1:29:94:6d:ea:3d:c5:34:3b:55:b7:8c:bf:c7:b8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=9BC1D7598C751CC33405370880B39271DE8C36DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:74:3f:23:5b:9c:07:2a:93:16:0a:93:a1:
0b:bf:1f:6c:c3:63:24:02:d5:39:35:f0:37:21:26:
16:d1:ef:90:d2:88:24:0c:8f:25:60:e9:83:8b:77:
db:f2:ee:2b:61:ec:51:64:12:7a:bd:a3:29:93:a2:
b4:b8:62:30:3b:f3:d6:3a:7c:5c:19:0e:d7:6b:aa:
44:d8:10:67:55:53:5b:5e:4a:8b:1e:a6:1c:cd:68:
05:77:c7:fe:58:75:b3:51:b1:ec:93:5f:c5:39:36:
5e:da:cd:ad:a0:08:4a:e5:7d:75:83:ef:12:04:04:
31:0e:92:5d:c0:d0:ee:95:fb:ce:15:cf:d5:7b:d7:
c9:ae:ea:33:02:d8:0e:f1:5e:34:ce:e4:0c:8c:5e:
57:00:01:54:39:77:63:a4:d7:69:e6:2d:26:94:cf:
47:bc:dc:e2:37:01:e9:b3:7f:90:50:0e:d6:75:e6:
20:64:41:c6:ac:a4:67:98:62:27:f5:67:5b:fc:c2:
92:44:33:19:cc:50:01:64:89:d3:64:4f:b9:b9:26:
bb:de:ef:a9:13:67:5f:4c:a1:50:77:f4:3a:39:7e:
d1:a4:eb:a1:d1:b5:78:ab:5e:e2:f3:f8:97:d0:93:
ab:7f:bd:9a:18:2c:ae:d2:15:ad:20:7f:bb:6f:73:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C1:D7:59:8C:75:1C:C3:34:05:37:08:80:B3:92:71:DE:8C:36:DD
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e80::-2a06:a005:ecf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
be:33:4b:58:89:52:33:8c:da:65:e4:7b:5c:40:38:78:cb:3a:
b6:30:a2:68:42:c5:b7:b7:13:81:d4:a9:22:a5:ed:7b:4b:ca:
dd:66:ac:7f:f2:a4:ee:36:86:39:5b:de:45:b3:aa:f3:f7:14:
9a:22:f0:59:4e:bc:37:cf:5c:48:fb:03:c0:6a:a2:15:65:b4:
1c:c3:c6:22:32:48:45:4a:41:52:c4:02:ce:0f:f1:ae:a8:26:
e9:b7:0a:d0:be:54:49:83:c6:33:07:b4:7e:9d:85:5f:15:cc:
0f:50:d1:04:01:32:8c:98:71:10:5c:fb:9f:08:6d:20:a6:af:
50:8c:5b:db:3a:96:09:32:9a:1b:0a:8b:1f:a3:e9:42:1b:96:
f7:ec:1e:44:23:88:9b:32:5a:19:f1:d6:2c:a7:16:59:85:e0:
33:36:96:40:f9:0d:c3:d8:01:60:07:85:ea:c1:da:63:08:45:
1e:7e:35:51:6f:2d:24:99:ca:4d:c5:0d:16:bf:d4:62:a1:21:
19:2b:20:71:20:dd:35:7c:f5:6d:ce:d9:63:22:db:ae:35:40:
ad:ba:07:40:7f:a4:fd:d4:34:bd:a4:b4:7b:71:bb:e6:54:3b:
ce:d5:a9:aa:dd:99:23:32:f8:b0:c6:28:c3:8e:f4:ae:7c:8e:
82:90:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:16 2025 by rpki-client