Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147018.roa
File: AS147018.roa (raw, json)
Hash identifier: CsYNX99flocXGrzZXYxRWtv3HttYoeBJcvT6W7YMQtQ=
Subject key identifier: 37:70:27:51:01:A6:3F:5E:32:13:0D:98:7A:84:FF:22:90:D9:C8:70
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 596E91AE4AF49110B1DA2C5831860F4910232468
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147018.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 147018
IP address blocks: 2a06:a005:a06::/48 maxlen: 48
2a06:a005:fc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6e:91:ae:4a:f4:91:10:b1:da:2c:58:31:86:0f:49:10:23:24:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=3770275101A63F5E32130D987A84FF2290D9C870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:84:98:bd:1f:42:c9:dd:8e:4c:ed:d9:1e:
d0:bb:3f:30:6a:da:60:82:55:5e:33:2e:1d:0c:51:
24:23:75:e5:4e:04:db:fa:6f:10:47:2f:e3:d7:f2:
f6:cc:ed:b5:38:84:ad:b5:3e:82:65:b8:45:8b:c4:
60:20:f3:64:e5:9d:51:63:ee:ce:c8:0b:12:ac:83:
7f:ab:f9:d6:5e:a3:27:89:61:85:36:40:fd:7c:af:
f4:4a:db:69:7e:a8:f0:c8:0b:dc:de:0a:1c:28:b1:
f4:cf:17:25:16:75:86:dd:00:e1:54:d8:c0:db:f4:
e8:e6:d4:20:d3:d9:66:ac:10:5a:df:4e:61:40:46:
4e:cd:c5:be:d3:ff:c9:86:77:72:d2:27:31:a9:9a:
7e:66:27:ea:81:a7:93:8f:75:96:37:47:fd:61:4a:
c4:36:4c:d0:8f:64:25:f1:f6:e4:c9:bc:d2:e2:89:
80:34:ef:1d:1f:11:74:9c:e2:a7:2f:ca:44:0e:f8:
e6:b2:0f:7c:91:74:98:f7:8a:d2:a9:b6:2c:c1:e8:
8c:b2:c5:35:9f:f6:1e:2d:1b:c7:52:8a:04:04:79:
65:b6:15:8e:5f:d2:34:07:8b:e3:c0:91:26:39:28:
4d:0b:e8:3f:ba:e0:27:61:ff:c6:bb:7e:42:af:6d:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:27:51:01:A6:3F:5E:32:13:0D:98:7A:84:FF:22:90:D9:C8:70
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a06::/48
2a06:a005:fc0::/44
Signature Algorithm: sha256WithRSAEncryption
ac:66:58:0a:b1:56:d0:57:89:df:2f:1b:bc:95:1c:75:f0:39:
1e:30:42:79:c0:85:19:f3:04:b0:48:5e:f3:c4:6f:18:65:a9:
f8:7a:cd:2b:0b:15:72:22:47:57:60:53:13:0f:60:0f:e6:f9:
3b:54:ba:7f:71:0a:d0:35:77:32:95:cd:ca:39:3a:3b:97:d1:
06:38:be:22:d2:14:ff:a2:ba:1e:68:f2:33:7f:bd:e8:da:97:
c8:5b:93:13:0a:dc:af:ab:85:ff:8f:c7:f5:c6:14:af:99:13:
e3:ad:ac:e6:e1:21:c2:fc:de:3e:0c:9e:1f:3c:7c:ff:2a:19:
30:90:6d:15:21:b0:b0:6d:ce:b3:89:6a:7c:74:19:f7:91:04:
20:8e:25:d5:34:4c:6d:44:35:74:13:40:47:ed:5e:1a:b9:57:
c6:21:c2:32:eb:8e:3b:11:36:b6:24:df:83:7c:89:9d:36:c9:
c7:34:0b:e9:01:97:f2:3b:2b:a8:01:0d:ee:c4:45:23:3c:f7:
78:38:89:61:4f:b4:89:c2:51:02:c7:42:f2:fa:18:5e:e5:71:
16:6c:bc:cd:10:45:01:02:3e:93:50:12:b8:69:32:66:c0:32:
59:5c:8f:ad:71:60:b4:46:5c:3b:6d:d2:70:e4:f7:3c:ef:29:
f3:4a:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:04 2025 by rpki-client