Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142594.roa
File: AS142594.roa (raw, json)
Hash identifier: zgZFwWKJ+zFoIGpdbNVDAKtV6hs1+68w0zUz4IWZXn4=
Subject key identifier: 01:15:8F:3D:78:F3:A5:E8:67:54:1A:4F:18:21:82:91:C7:65:3F:1E
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7BBA9D3069049175C634A700171A7388D72089AC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142594.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 142594
IP address blocks: 2a06:a005:108c::/48 maxlen: 48
2a06:a005:16d0::/44 maxlen: 48
2a06:a005:16e0::/44 maxlen: 48
2a06:a005:1730::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ba:9d:30:69:04:91:75:c6:34:a7:00:17:1a:73:88:d7:20:89:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=01158F3D78F3A5E867541A4F18218291C7653F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:81:f0:79:a7:54:97:b0:78:1f:5d:db:1f:
32:26:3c:cb:4d:6a:81:21:6a:7c:a6:d0:df:16:e6:
65:e5:52:19:49:56:dc:08:7d:0c:84:34:bc:1c:13:
9d:20:c2:01:7e:96:d7:02:fa:fa:21:14:ee:77:86:
dd:2b:94:0b:54:3f:88:17:e3:93:1e:c5:f8:d5:b0:
be:ae:9d:02:b8:2f:07:f5:d6:16:22:57:10:94:5e:
d9:e2:c3:09:e7:82:6e:c0:56:69:9f:db:c2:0f:72:
d7:7b:8d:ba:18:aa:4d:c9:d4:68:29:3f:4c:30:e1:
9f:5c:ae:8c:cf:0e:0e:ef:44:33:b5:fb:d6:e6:28:
ee:74:3a:14:7b:35:a2:11:13:ef:45:b3:bb:41:b3:
3a:c5:7b:29:81:31:c4:47:e6:20:b9:d3:9e:cd:ce:
a0:9d:87:50:6d:72:6f:ef:10:df:76:a6:24:9f:70:
e4:d3:43:da:c0:9e:d5:25:e0:2a:47:21:c5:28:4a:
ec:6a:4e:2f:20:0b:81:d9:f6:a1:a1:2d:e4:d2:42:
c6:ed:43:22:5e:42:ea:0b:e1:ba:32:9e:6a:d7:df:
96:33:f0:44:39:13:6a:0d:fb:9b:c2:e3:16:2f:ab:
d5:a2:39:74:a1:5e:fc:76:5a:58:fc:d5:b4:4d:a1:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:8F:3D:78:F3:A5:E8:67:54:1A:4F:18:21:82:91:C7:65:3F:1E
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS142594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108c::/48
2a06:a005:16d0::-2a06:a005:16ef:ffff:ffff:ffff:ffff:ffff
2a06:a005:1730::/44
Signature Algorithm: sha256WithRSAEncryption
7b:cd:56:ae:17:03:aa:4e:75:ff:01:a3:3d:32:6c:67:76:27:
a3:a3:9b:51:c9:6d:20:b5:5b:67:e3:3d:8c:a9:3c:fc:4a:a1:
ac:08:c3:a9:cf:4f:e5:1b:d6:ed:10:f9:fa:c5:b5:f3:c4:5b:
5a:c0:52:62:9c:2a:57:23:08:0c:74:63:9d:ee:bf:bf:9d:ba:
12:6c:80:1b:5a:2a:1f:43:2b:93:fc:97:8d:ca:c3:71:7b:f0:
f3:5b:77:af:6e:e8:a4:10:17:27:13:06:8a:31:06:16:de:1b:
aa:6f:30:ee:91:c0:85:5a:58:01:98:46:7b:7a:65:7c:74:c4:
bb:fa:34:2f:ec:43:c8:d5:9f:33:89:75:c9:26:ec:65:79:7d:
0e:21:49:f0:27:29:90:f2:62:93:ed:1e:94:0e:ac:bd:3a:e9:
ec:21:2c:a1:14:eb:26:01:b0:fe:f5:46:f5:b5:d5:b1:d7:a6:
8c:01:ad:11:82:d4:9c:77:ee:ce:72:aa:4a:2b:02:8c:20:5b:
17:8e:15:e6:f3:57:50:b0:a5:1e:b5:ee:de:b5:2b:5a:9b:0a:
ec:e8:c3:39:e2:25:e3:2b:b7:be:0a:a0:95:17:a9:c8:6e:23:
eb:53:e7:9a:a6:91:56:34:fc:c8:ae:1f:cc:f8:c1:87:fe:3b:
da:8a:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:09 2025 by rpki-client