Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147297.roa
File: AS147297.roa (raw, json)
Hash identifier: 06DIMkpjXjHcQoWBSD+aTsyD7dGw1vLnxkeSoCSHRzA=
Subject key identifier: FE:26:EC:33:D3:05:83:51:2F:71:8E:7D:48:6B:25:5F:05:31:1C:46
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5B6267D3E43928C3B4355591BD78DBCF656C1197
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147297.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 147297
IP address blocks: 2a06:a005:48c::/48 maxlen: 48
2a06:a005:48d::/48 maxlen: 48
2a06:a005:48e::/48 maxlen: 48
2a06:a005:48f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:62:67:d3:e4:39:28:c3:b4:35:55:91:bd:78:db:cf:65:6c:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=FE26EC33D30583512F718E7D486B255F05311C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:0b:dc:36:07:9b:c2:7c:18:20:c1:a1:f9:
4e:a7:7c:58:ee:32:19:d8:99:da:0b:09:3e:9b:d0:
aa:ee:7f:7a:8e:7b:b5:49:61:00:3c:76:91:72:e7:
cb:f7:c9:d8:b4:34:45:c7:2a:bf:d0:64:e7:e3:fe:
dd:71:53:c5:23:14:f1:41:5c:86:35:da:82:f7:4c:
3e:dc:74:09:40:f5:4f:ca:da:0a:9d:6c:5d:e1:4b:
73:a5:e9:e8:b2:b7:af:71:47:31:a6:05:fd:51:a3:
ca:39:c4:7e:88:1c:1a:3c:14:7c:dd:3b:59:c1:15:
db:45:4b:9f:d0:4f:d3:ef:bc:2a:6c:68:23:f1:5e:
63:70:6b:94:4c:ba:6d:ac:22:f2:a7:ac:cd:f7:37:
6c:c8:82:3a:ab:ce:f2:ef:73:d2:e9:d9:95:0a:39:
e8:f6:27:88:07:7a:38:65:27:bd:4e:39:4c:fb:47:
cf:f8:61:a7:24:61:b4:4f:86:af:27:1c:a8:c9:09:
11:75:73:21:1e:83:8f:37:72:10:62:0d:a5:76:97:
c6:38:51:3d:70:1f:f8:0e:2d:80:fd:a3:07:15:61:
23:1e:7e:73:75:0c:51:fb:d5:e3:9d:79:2c:2c:e5:
3f:11:6c:0d:0b:69:1c:c3:75:91:5e:a5:b6:0b:d7:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:26:EC:33:D3:05:83:51:2F:71:8E:7D:48:6B:25:5F:05:31:1C:46
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS147297.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:48c::/46
Signature Algorithm: sha256WithRSAEncryption
18:10:95:97:39:5f:fe:89:35:3c:1a:f1:3c:6c:a7:25:cb:91:
fb:52:89:f1:1b:af:57:18:b5:e6:ae:55:d5:58:e3:ba:09:10:
9e:ba:14:89:a3:96:ce:eb:84:65:80:5f:15:a6:03:fc:c9:ac:
33:ed:0e:05:89:30:ef:6a:bb:b9:cd:92:37:ca:f5:02:c2:0e:
b0:d4:98:c6:db:2a:83:2b:f1:89:b9:d4:01:28:03:e7:8f:32:
7d:b7:16:0d:a6:df:02:73:04:0d:0c:1e:e3:0c:f0:55:9a:93:
9e:9e:0a:2f:05:f5:e3:b9:49:84:87:c0:69:53:82:f5:89:4c:
54:75:5e:17:4e:63:20:f4:58:6a:d6:21:50:22:89:3d:b3:4f:
a6:78:8c:7b:72:96:53:56:0b:35:ba:1f:c8:dd:56:7e:fd:2f:
78:d1:ca:cc:0b:4e:33:a0:c6:fc:e1:0a:a4:77:da:07:e1:5e:
b6:d4:fb:12:2b:74:6a:cf:53:73:6c:43:7c:6d:ef:0e:99:dc:
22:a3:0e:1f:67:ad:cf:17:b8:69:ec:08:df:14:cf:19:6a:9d:
84:10:48:af:02:e5:32:c0:ba:3c:6d:48:a0:81:94:1b:41:d0:
b2:be:1a:d0:2d:16:18:bb:cf:b8:23:52:c1:11:06:cc:77:22:
09:b8:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:40 2025 by rpki-client