Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS148971.roa
File: AS148971.roa (raw, json)
Hash identifier: XIIPa4Gk1EAxtPMjHxmaeLhtCkbouJNEv3h7bqmKKmk=
Subject key identifier: B7:B1:7C:56:69:28:A5:0D:69:C6:2B:24:5D:09:63:C4:A4:50:86:FF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 77D7887BD44DA9468FA1D615D89AD67BBAEDDD21
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS148971.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 148971
IP address blocks: 2a06:a005:25a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d7:88:7b:d4:4d:a9:46:8f:a1:d6:15:d8:9a:d6:7b:ba:ed:dd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=B7B17C566928A50D69C62B245D0963C4A45086FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:05:0a:1a:c4:b1:3f:03:aa:d3:ed:69:76:
35:72:b0:fa:79:24:0c:e3:d0:de:89:07:d1:5f:10:
24:db:09:a2:92:ea:70:f6:62:64:e8:a8:1b:ca:44:
ea:52:77:49:00:80:c6:64:04:9e:ba:e8:cd:b6:64:
1f:47:22:0e:ec:29:1f:e8:9c:fd:a0:9b:b0:cd:01:
cf:98:cd:60:6f:fe:0a:07:86:cd:15:95:c1:3d:49:
04:d8:39:63:b3:3f:c2:f8:f7:f3:3d:d9:35:bc:4a:
d6:58:b0:02:59:da:6a:d3:f8:26:d6:57:79:56:4e:
35:b0:56:c6:9d:b7:55:8c:2d:fa:11:d4:e3:fb:7a:
f0:f5:9f:d9:e8:c3:1a:a0:d2:36:9e:d1:99:83:73:
c4:5f:ee:e2:f9:78:65:74:f6:a1:d3:ec:04:f1:f1:
bb:f0:20:93:3a:6c:04:58:63:0d:e0:c7:4a:0a:12:
db:a5:41:f5:ef:a7:f1:0c:16:ce:57:e9:2b:0f:64:
12:5f:4b:37:08:db:d6:47:e4:9a:e8:1a:69:76:7e:
ac:f4:f6:1e:8e:44:5d:d3:fb:d8:a3:98:12:1b:3e:
f9:97:42:c2:36:91:86:64:25:35:e0:99:a7:7d:0f:
c7:af:8e:f8:30:b1:38:e4:27:dd:18:37:8b:f8:53:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:7C:56:69:28:A5:0D:69:C6:2B:24:5D:09:63:C4:A4:50:86:FF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS148971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:25a0::/44
Signature Algorithm: sha256WithRSAEncryption
91:14:0a:ea:cc:82:6e:52:ef:9b:64:b0:c0:bc:b3:2e:f6:b7:
20:61:52:7e:51:15:a4:3e:80:98:83:4f:51:6c:48:91:50:08:
7a:4a:d6:9f:9d:26:16:9d:8d:b2:bb:3d:2b:ee:f1:fb:c5:6d:
70:c9:04:81:0a:e7:86:6d:10:3a:94:8c:a3:7f:08:5d:7e:29:
15:bc:85:a6:45:4e:c1:18:d7:b4:0b:a2:eb:50:b4:3e:bd:d8:
e1:68:cb:5a:cf:58:90:11:dc:38:53:8b:eb:d1:2d:50:d5:e4:
77:35:2b:6b:20:8f:3e:44:0c:46:0e:94:c2:9f:c2:0f:a3:84:
d0:6b:eb:15:4f:f7:a6:bd:5c:bc:3d:7b:52:d0:11:85:44:16:
5c:e3:16:ef:12:28:b6:92:b3:f7:62:dc:89:64:8f:7f:38:99:
f5:67:48:77:bd:54:d2:81:f7:75:b0:2f:af:35:3d:55:e1:85:
e7:90:4d:7e:a2:37:d6:3f:bc:ec:04:6b:5f:01:64:94:61:ad:
a6:91:85:2c:5b:ce:c1:1b:5d:99:d0:4c:f2:8c:13:a3:62:30:
f3:3d:25:e2:e9:a1:fe:e8:8d:49:f3:04:53:2c:64:e5:e0:49:
b5:ac:1c:2c:46:11:a3:7f:0e:9a:65:93:8c:03:c3:ea:69:bb:
dc:71:70:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:05 2025 by rpki-client