Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149795.roa
File: AS149795.roa (raw, json)
Hash identifier: wm+w6TTcw16SnoHsOnPljsggbSj6Y1kdW0Nl80kF0qE=
Subject key identifier: 7B:99:7D:1F:57:4E:C6:8D:98:6C:70:8C:71:C9:57:32:DF:32:7C:8B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5129E75F2C24117A579B137F28B64A3764621F8D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149795.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 149795
IP address blocks: 2a06:a005:6e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:29:e7:5f:2c:24:11:7a:57:9b:13:7f:28:b6:4a:37:64:62:1f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=7B997D1F574EC68D986C708C71C95732DF327C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:eb:72:7f:18:3e:dd:ea:2d:38:a2:89:27:
6b:e4:58:6f:11:55:2b:a6:31:f2:a3:79:4d:49:a7:
fc:e5:5d:1d:a8:61:07:26:3e:35:fc:a5:ea:71:16:
94:ea:93:b0:e6:a1:24:11:18:23:1b:a7:c7:7b:d2:
b1:58:bc:5c:21:b9:fb:7e:65:32:36:9f:10:a7:ee:
f5:20:4f:93:56:59:37:53:97:35:4b:9c:35:f9:4b:
c7:b2:a0:c3:47:aa:d1:c4:64:46:c5:34:cb:71:79:
ec:99:70:e7:35:11:e9:6d:e9:a7:76:e8:22:16:36:
c6:13:0d:30:9c:d9:0e:f3:08:c0:e5:9d:6d:8d:ed:
ce:07:55:61:b6:e0:1c:21:04:3f:46:9b:65:d4:93:
f4:bd:84:da:6f:3e:e1:d3:b5:b9:d4:1a:2c:d1:d9:
ba:2a:17:33:18:a0:d1:75:b4:6d:7f:b6:2c:6a:0d:
4b:38:e5:fb:ce:28:d9:8f:1c:2b:f6:ea:f5:f1:33:
71:f1:a7:37:f9:77:d1:ca:ef:4c:7d:d4:f4:3d:da:
77:93:d5:a0:92:29:2a:d4:e7:c4:bb:c9:90:1c:b7:
3f:81:13:e1:59:c2:4c:b1:ad:c2:a1:c5:d8:35:35:
3a:75:b4:f7:f1:c3:64:aa:0b:c7:8e:55:f9:69:34:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:7D:1F:57:4E:C6:8D:98:6C:70:8C:71:C9:57:32:DF:32:7C:8B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149795.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6e0::/44
Signature Algorithm: sha256WithRSAEncryption
34:f5:ca:4e:66:4f:8c:f9:5c:e7:12:ae:c1:ec:72:b3:5c:04:
57:d5:d3:de:25:74:3b:e8:4d:2a:29:cd:b0:0e:29:45:8b:24:
8d:86:a4:1e:da:13:3c:f8:a9:25:85:6e:e4:bf:eb:31:32:39:
a9:eb:92:47:be:c9:c0:51:62:b7:39:2e:5c:af:70:01:0c:f1:
f7:e4:3c:92:24:09:ad:a6:b6:34:f7:84:94:5b:a8:29:fd:42:
46:c9:20:a9:02:a1:38:72:58:f7:2a:49:42:cb:6c:90:0b:1f:
ef:83:51:59:12:22:3f:3f:f1:64:6c:62:ea:4a:cd:8f:ed:74:
8a:14:47:0c:72:31:99:11:60:4b:e8:b8:69:fe:4e:dd:b4:b2:
9f:0f:fb:32:33:cf:22:1b:c0:a9:20:0f:89:3d:79:19:50:6f:
2e:e1:39:8e:ee:4e:3a:78:89:e8:96:52:dc:4b:4d:a9:98:5e:
5a:be:03:fd:33:41:65:ff:ce:cd:76:26:a1:99:49:d0:44:0b:
7f:de:8e:d7:49:14:02:67:52:47:6c:a1:b4:95:70:a4:4d:5f:
33:a1:1a:ea:00:7b:8f:52:ab:8e:41:f9:4e:71:9b:f4:68:16:
25:c5:1c:e6:82:08:e4:5a:b6:39:ac:af:2e:39:52:49:8f:77:
e1:b7:bf:04
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUUSnnXywkEXpXmxN/KLZKN2RiH40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDhaFw0yMzEyMjAxNjU2NDhaMDMxMTAvBgNV
BAMTKDdCOTk3RDFGNTc0RUM2OEQ5ODZDNzA4QzcxQzk1NzMyREYzMjdDOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtutyfxg+3eotOKKJJ2vkWG8R
VSumMfKjeU1Jp/zlXR2oYQcmPjX8pepxFpTqk7DmoSQRGCMbp8d70rFYvFwhuft+
ZTI2nxCn7vUgT5NWWTdTlzVLnDX5S8eyoMNHqtHEZEbFNMtxeeyZcOc1Eelt6ad2
6CIWNsYTDTCc2Q7zCMDlnW2N7c4HVWG24BwhBD9Gm2XUk/S9hNpvPuHTtbnUGizR
2boqFzMYoNF1tG1/tixqDUs45fvOKNmPHCv26vXxM3Hxpzf5d9HK70x91PQ92neT
1aCSKSrU58S7yZActz+BE+FZwkyxrcKhxdg1NTp1tPfxw2SqC8eOVflpNKEfAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUe5l9H1dOxo2YbHCMcclXMt8yfIswHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTQ5
Nzk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBQbgMA0GCSqGSIb3DQEBCwUAA4IBAQA09cpOZk+M
+VznEq7B7HKzXARX1dPeJXQ76E0qKc2wDilFiySNhqQe2hM8+KklhW7kv+sxMjmp
65JHvsnAUWK3OS5cr3ABDPH35DySJAmtprY094SUW6gp/UJGySCpAqE4clj3KklC
y2yQCx/vg1FZEiI/P/FkbGLqSs2P7XSKFEcMcjGZEWBL6Lhp/k7dtLKfD/syM88i
G8CpIA+JPXkZUG8u4TmO7k46eInollLcS02pmF5avgP9M0Fl/87NdiahmUnQRAt/
3o7XSRQCZ1JHbKG0lXCkTV8zoRrqAHuPUquOQflOcZv0aBYlxRzmggjkWrY5rK8u
OVJJj3fht78E
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:19 2025 by rpki-client