Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147016.roa
File: AS147016.roa (raw, json)
Hash identifier: nDPuUY8fE0y3fmc4DjmxEtmKxkFI/Xqwnquo0OWxP9c=
Subject key identifier: DB:5D:8E:49:E5:F2:2C:45:65:D2:6C:E6:69:42:81:81:5F:1D:80:16
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0A1FEDDA503D61EC219701C6148CA880F2951464
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147016.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 147016
IP address blocks: 2a06:a005:baa::/48 maxlen: 48
2a06:a005:bab::/48 maxlen: 48
2a06:a005:1502::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1f:ed:da:50:3d:61:ec:21:97:01:c6:14:8c:a8:80:f2:95:14:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=DB5D8E49E5F22C4565D26CE6694281815F1D8016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:90:77:ca:e5:82:04:95:18:aa:fd:0e:01:79:
03:c8:c8:ce:93:f6:ad:e1:8d:86:8f:4f:76:48:8d:
82:1d:5d:63:5d:07:6d:54:3e:f9:81:f3:19:aa:e2:
64:23:8c:eb:29:8e:a5:25:9d:c3:e6:b0:2c:95:a9:
18:f0:54:6e:fe:37:c5:33:17:90:0b:54:b3:a2:63:
f5:f9:a4:54:eb:ae:06:f7:46:f4:71:82:f3:36:92:
09:46:9e:5b:bd:f9:3a:3d:c6:b5:e4:2a:e0:88:ee:
68:b1:06:e9:9f:b2:59:77:cb:f9:80:2c:2d:cd:b6:
83:c6:ff:3f:92:2c:95:78:db:87:e3:16:24:a6:70:
f4:f6:f9:17:e1:86:24:11:68:95:b1:4d:a8:50:00:
e4:75:31:c0:fa:5d:16:ef:e4:ed:c6:8c:fa:d2:f5:
a8:ea:e9:b6:5c:d8:5b:24:e7:02:f8:22:76:7a:f0:
87:7e:b3:48:fc:57:43:97:dc:fb:5c:3d:48:7f:71:
58:03:56:4a:a3:fa:21:83:49:1d:b1:70:bc:1d:f9:
72:02:87:d2:da:4e:77:72:90:f7:5c:f9:71:fb:10:
0f:28:8d:ef:eb:87:9d:2c:7a:0c:ed:c3:95:37:0b:
7b:8e:b9:aa:d9:64:dc:40:f2:bb:9a:58:27:ca:a1:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:8E:49:E5:F2:2C:45:65:D2:6C:E6:69:42:81:81:5F:1D:80:16
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:baa::/47
2a06:a005:1502::/48
Signature Algorithm: sha256WithRSAEncryption
06:44:8e:18:c7:12:d9:58:8a:25:7d:71:5f:be:d7:58:21:17:
cd:d3:8e:69:50:be:f6:9e:bf:cc:26:67:a6:4b:8f:58:9d:17:
b0:26:48:61:47:aa:6e:bf:72:fa:94:5d:46:d7:d8:3e:44:34:
59:ff:f8:26:b2:15:e5:00:6b:da:61:63:24:5b:d3:6e:8c:e9:
25:6a:20:51:3d:35:77:8e:e6:27:0a:f9:6b:9a:7c:48:de:09:
11:9b:69:f0:98:9d:a1:33:d1:2d:99:d1:75:1b:08:df:ee:73:
c4:01:40:06:8e:f1:76:8c:8e:f6:87:29:cf:75:a2:75:5b:4b:
3b:ce:7f:94:e6:f4:70:16:12:72:aa:f4:94:06:dd:8d:76:cc:
ba:d7:3d:89:a3:f2:04:86:e9:f7:d2:ac:69:7f:5d:fc:12:d7:
cc:da:76:84:f0:47:2b:46:88:03:04:94:c3:91:61:9a:49:d4:
51:2e:3d:96:9c:f7:b5:39:19:52:64:c3:4b:e7:2d:44:ba:cf:
4d:48:64:8a:51:7d:7d:59:7a:64:a1:89:ca:41:85:7a:d0:7d:
ce:16:ff:18:50:82:46:09:4a:34:78:05:24:74:d0:bd:ff:61:
a1:81:15:49:6e:54:d2:2a:0c:f7:da:65:20:68:b9:a9:32:d2:
21:e7:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:59 2025 by rpki-client