Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142553.roa
File: AS142553.roa (raw, json)
Hash identifier: /tfKKgqOYCfrFns4YqsM4U1/4wEMjsG8FcEMs09WInA=
Subject key identifier: BF:7A:BF:81:9D:B8:23:2A:F6:36:E7:BB:F7:65:69:1F:25:F4:BC:F0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3BD8FC66DBD5C87367F56862A24F7C297601CC20
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142553.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 142553
IP address blocks: 2a06:a005:560::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d8:fc:66:db:d5:c8:73:67:f5:68:62:a2:4f:7c:29:76:01:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=BF7ABF819DB8232AF636E7BBF765691F25F4BCF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:49:b3:00:0e:67:20:54:47:f0:49:cb:f9:
65:a7:83:00:49:69:e8:f6:23:6a:a1:38:3f:ad:ef:
0f:ab:1e:49:03:7a:1d:a2:3f:47:5d:73:9f:eb:b3:
a7:5e:6d:56:80:0c:12:b5:4b:79:fc:3f:09:fd:01:
53:2b:be:58:34:f5:af:85:da:6c:94:d6:0a:b8:a1:
20:bf:a1:4f:6b:ed:24:56:de:ff:a4:0d:13:8c:03:
a9:a6:cc:02:66:34:ea:34:92:65:75:5c:cf:dc:06:
d5:58:18:07:62:09:b5:9c:12:82:c7:08:60:0f:42:
28:33:a0:1a:fa:0b:42:0c:9d:2c:77:68:b6:4a:b2:
ac:1c:ac:35:12:c3:e1:0e:af:a7:82:b8:05:ac:d8:
1e:8f:4d:b9:c7:02:fd:2a:ff:59:36:cb:3f:c3:3b:
62:d6:55:5c:9c:76:0c:6d:bc:79:49:96:7f:5f:5c:
88:c3:ee:a8:87:b8:2c:be:fc:51:11:78:79:c9:99:
2f:a7:9b:9d:7b:b3:1b:e4:a1:eb:9d:3e:23:ee:ac:
2e:af:f5:72:1b:74:88:e4:f6:c1:71:03:f8:8a:9e:
f5:6d:69:16:61:16:c8:fb:b6:fa:72:20:78:d1:2c:
c8:43:21:f9:6b:50:f4:8e:de:20:99:bb:3a:6f:5d:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:BF:81:9D:B8:23:2A:F6:36:E7:BB:F7:65:69:1F:25:F4:BC:F0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142553.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:560::/44
Signature Algorithm: sha256WithRSAEncryption
d1:71:0b:d3:22:f4:56:58:2f:44:31:cf:9e:a3:dd:c6:84:51:
f2:bb:de:74:cd:e5:2c:da:75:84:46:fa:66:64:22:d9:ff:b1:
55:59:79:f5:24:63:5b:e9:df:79:ed:69:e1:07:31:69:8b:c2:
e6:d6:15:ca:f9:f8:e1:b0:6a:34:10:4e:eb:1d:7c:4f:95:48:
5e:e4:e7:c2:8c:46:a2:b2:1c:a3:fa:2d:cd:24:c1:7a:ae:8c:
cc:45:1d:35:96:1e:3c:45:ce:a5:54:0c:b1:16:0c:2a:34:7e:
ea:44:50:e1:cd:77:3c:ac:fd:93:95:6b:11:90:f6:a2:4f:9f:
e9:9b:ea:5e:e7:ec:29:74:9f:b5:96:c3:d0:8e:b0:bf:dc:30:
8f:2b:4e:4f:11:29:48:1b:00:58:66:92:b0:31:5e:6a:94:e0:
71:6c:6d:d6:ec:15:60:24:b5:19:43:37:3d:89:64:50:bd:5f:
2d:e5:bc:b5:45:a0:14:11:c0:80:b1:e3:e0:b5:49:08:64:ab:
7d:b1:3e:39:26:f6:78:a9:be:e0:4f:89:7d:aa:4f:3c:c7:72:
56:de:88:34:b6:16:71:17:94:0c:0b:bd:a5:39:c9:ec:e6:99:
24:b8:b3:fc:f3:6d:77:7f:72:f4:23:11:cc:e9:0b:b1:68:1e:
ed:e1:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:10 2025 by rpki-client