Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149296.roa
File: AS149296.roa (raw, json)
Hash identifier: OfxRX4zwaj8dfwXruPN8nzNg4nW+DHJ/Z872jgjbkjQ=
Subject key identifier: E3:F8:D4:FB:98:D3:20:01:9E:8B:51:04:6C:C8:11:85:6A:B4:F4:A9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 41F4AB44574467C3329A620E09609FAE5B8B8EFF
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149296.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 149296
IP address blocks: 2a06:a005:3c0::/44 maxlen: 48
2a06:a005:3d0::/44 maxlen: 48
2a06:a005:3e0::/44 maxlen: 48
2a06:a005:3f0::/44 maxlen: 48
2a06:a005:410::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f4:ab:44:57:44:67:c3:32:9a:62:0e:09:60:9f:ae:5b:8b:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=E3F8D4FB98D320019E8B51046CC811856AB4F4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:46:ac:f9:51:74:da:2e:c5:b1:80:8c:3d:
17:48:7c:9f:42:ca:0c:73:e7:17:07:5b:5d:66:a1:
e3:11:c9:5b:2f:81:7a:c5:ac:c9:7a:48:9e:3c:3b:
64:56:21:cc:83:51:3d:e7:4a:8f:fb:63:9e:c8:f8:
ac:c1:b4:4e:20:e0:91:eb:81:d2:0a:58:f0:ea:3a:
b1:6b:52:50:1a:74:ff:ed:04:83:68:2e:94:b0:4c:
9a:92:d6:15:85:0e:2f:7d:ea:86:4e:a1:f7:cd:77:
27:d9:4f:f0:1c:df:93:56:1b:93:1f:67:be:bc:3a:
0d:70:31:13:e9:64:46:a0:64:52:25:c1:65:e8:61:
5c:99:d5:6a:c6:5f:50:bb:13:c9:d6:f4:58:89:db:
b0:84:6f:4c:24:9c:6c:d3:99:6f:32:73:87:03:00:
ef:f8:56:e3:7a:47:73:c3:5d:ed:fb:ea:67:43:d6:
97:2c:4b:e7:1b:49:a9:5a:2a:41:61:ce:5c:6e:9b:
80:89:2c:1d:ce:bd:c2:2b:1b:32:4b:ae:cd:39:4a:
87:80:39:f3:80:2a:81:93:d7:cc:2c:ca:37:58:ab:
b3:7d:ad:5e:7f:b9:d0:d3:d0:7b:41:5b:fd:f7:ed:
a9:b0:2e:f8:d6:b4:63:ee:16:ce:37:0e:de:49:58:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:D4:FB:98:D3:20:01:9E:8B:51:04:6C:C8:11:85:6A:B4:F4:A9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:3c0::/42
2a06:a005:410::/44
Signature Algorithm: sha256WithRSAEncryption
1a:2a:b6:04:ed:1e:36:19:db:77:92:50:ce:b7:a8:9a:ac:cf:
61:10:99:06:30:5f:58:44:0e:2a:0d:dc:04:18:49:a1:7e:5f:
ac:9f:e2:d9:dd:de:37:d3:2a:a4:11:22:a2:eb:64:e7:cd:1c:
d8:21:a9:a5:f3:3c:72:fd:ac:78:ee:93:33:50:27:5b:3f:a7:
c8:d6:1d:b5:2f:2c:af:20:05:13:59:16:a8:0d:fd:11:d4:72:
6c:08:cf:ea:da:74:3f:f4:dc:ba:81:9d:66:52:b5:8c:c6:4e:
15:4a:aa:5d:2c:e5:90:92:1d:da:f7:6f:d1:b0:1a:96:c1:9b:
17:4a:ff:49:ba:a0:a1:36:69:a7:aa:57:e9:ce:66:60:10:af:
2d:fb:cb:cb:d5:37:44:b0:21:99:8a:c0:b8:d9:96:19:03:52:
90:ec:77:1e:81:e8:7c:58:90:42:01:51:42:21:13:fc:c6:3b:
49:74:92:38:99:5d:e8:aa:52:67:9f:39:0d:30:b8:ce:b7:38:
6f:5b:ee:c4:a7:79:43:bc:bb:07:a5:6d:74:bc:c8:2e:2f:29:
84:cd:01:97:fe:bd:c3:98:0f:93:f2:50:79:01:df:f2:8a:4a:
93:61:f5:4d:ed:16:c5:6f:d2:e2:29:8a:f1:0f:4f:e9:e8:c3:
3c:b2:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:58 2025 by rpki-client