Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149835.roa
File: AS149835.roa (raw, json)
Hash identifier: l+hW/a6fOzqGCXAdfwJQQvXyA4ANiFARoBJDuacd4Qo=
Subject key identifier: F4:AE:72:A0:E8:92:C9:5F:E3:6A:65:AF:43:89:FB:66:FB:D1:C7:B8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0BD702634CCF77256B9A1E0FD605CF01C3A8398D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149835.roa
Signing time: Wed 21 Dec 2022 23:58:13 +0000
ROA not before: Wed 21 Dec 2022 23:53:13 +0000
ROA not after: Wed 20 Dec 2023 23:58:13 +0000
asID: 149835
IP address blocks: 2a06:a005:10a0::/44 maxlen: 48
2a06:a005:2850::/44 maxlen: 48
2a06:a005:2860::/44 maxlen: 48
2a06:a005:2870::/44 maxlen: 48
2a06:a005:2880::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d7:02:63:4c:cf:77:25:6b:9a:1e:0f:d6:05:cf:01:c3:a8:39:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 23:53:13 2022 GMT
Not After : Dec 20 23:58:13 2023 GMT
Subject: CN=F4AE72A0E892C95FE36A65AF4389FB66FBD1C7B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:02:df:bd:a8:48:48:dc:70:5a:2c:1c:25:
90:0e:a4:97:9b:2c:60:da:a3:71:e4:89:17:ee:a6:
c0:c0:81:b8:ba:45:07:e6:83:b5:b6:0f:57:ef:f1:
f7:a9:87:c6:89:af:51:94:16:2e:2b:a7:a4:23:40:
60:ee:5b:8c:8b:87:2c:a3:a0:a5:4b:b2:73:2f:a4:
c6:73:52:25:d7:1f:45:b9:b9:12:bc:27:4e:11:ff:
d2:87:96:e3:6a:18:46:ec:57:e3:26:eb:fc:38:62:
80:e7:f7:2f:ef:25:d8:47:62:50:45:17:0e:ca:d6:
39:15:79:f8:00:e1:ce:85:f8:26:8a:4e:1a:25:de:
a0:2f:18:6d:7e:fb:1d:36:24:03:4c:f8:9c:0b:33:
e1:45:b5:bf:cf:00:a6:60:d6:9e:c0:08:28:7d:74:
2b:3b:df:a8:17:1d:d6:ba:b7:ea:fb:87:9f:b9:d4:
de:c2:0b:fe:41:7d:dc:e9:0f:9d:db:ed:6d:d6:4a:
9a:c3:02:98:38:a6:71:3e:6a:0a:1f:a7:c1:6c:d6:
5c:54:d2:46:6e:60:4c:56:6c:2c:3f:2d:6a:94:46:
c4:44:eb:af:49:b6:63:2f:c4:52:ba:a9:0f:52:48:
fa:8e:a0:82:65:f7:a0:d4:aa:66:99:89:b4:01:4f:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:72:A0:E8:92:C9:5F:E3:6A:65:AF:43:89:FB:66:FB:D1:C7:B8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10a0::/44
2a06:a005:2850::-2a06:a005:288f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:86:93:23:a3:d6:ab:69:bb:3e:ed:91:9d:44:a2:ac:e2:3a:
22:a6:7d:a0:4c:61:1b:d6:3e:a9:d5:be:d0:cf:d1:c8:f2:04:
e2:a3:99:b0:06:6f:2d:5d:2c:b7:bf:1b:72:44:18:88:a9:12:
9f:a2:c1:f7:65:d0:e5:0a:aa:91:cf:03:54:57:b7:68:41:55:
a0:11:b7:54:54:ca:7d:c4:00:10:f3:78:1b:52:3b:38:55:16:
85:27:b2:b6:4e:5b:3b:70:ff:25:47:76:8d:b0:38:44:74:75:
84:14:6f:3a:a6:2e:ce:93:a2:5a:b6:7b:fb:55:93:76:cc:f8:
b0:11:6f:cf:c9:ae:7c:7c:99:c4:d2:e1:f6:e8:be:83:57:3c:
82:f3:f0:cd:f7:3d:41:cd:63:0d:33:a5:e2:2a:62:63:f1:69:
7a:73:91:60:35:6f:b6:d7:ae:5c:80:c2:c0:21:90:eb:bc:c5:
87:0e:35:94:80:d1:74:82:65:06:02:2e:de:98:d3:22:e4:26:
f2:f6:63:49:77:a3:b7:2d:0b:ee:8d:1a:6c:33:9a:d0:00:52:
1a:9a:e4:60:b5:79:04:76:47:d7:c1:79:d9:e1:4f:98:1b:5c:
ea:46:58:c0:8b:1f:e3:0b:4f:c4:ef:1f:9c:8c:a5:29:04:a2:
71:9c:71:93
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUC9cCY0zPdyVrmh4P1gXPAcOoOY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjEyMzUzMTNaFw0yMzEyMjAyMzU4MTNaMDMxMTAvBgNV
BAMTKEY0QUU3MkEwRTg5MkM5NUZFMzZBNjVBRjQzODlGQjY2RkJEMUM3QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6QLfvahISNxwWiwcJZAOpJeb
LGDao3HkiRfupsDAgbi6RQfmg7W2D1fv8feph8aJr1GUFi4rp6QjQGDuW4yLhyyj
oKVLsnMvpMZzUiXXH0W5uRK8J04R/9KHluNqGEbsV+Mm6/w4YoDn9y/vJdhHYlBF
Fw7K1jkVefgA4c6F+CaKThol3qAvGG1++x02JANM+JwLM+FFtb/PAKZg1p7ACCh9
dCs736gXHda6t+r7h5+51N7CC/5BfdzpD53b7W3WSprDApg4pnE+agofp8Fs1lxU
0kZuYExWbCw/LWqURsRE669JtmMvxFK6qQ9SSPqOoIJl96DUqmaZibQBT+wFAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQU9K5yoOiSyV/jamWvQ4n7ZvvRx7gwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTQ5
ODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/
BCcwJTAjBAIAAjAdAwcEKgagBRCgMBIDBwQqBqAFKFADBwQqBqAFKIAwDQYJKoZI
hvcNAQELBQADggEBABuGkyOj1qtpuz7tkZ1EoqziOiKmfaBMYRvWPqnVvtDP0cjy
BOKjmbAGby1dLLe/G3JEGIipEp+iwfdl0OUKqpHPA1RXt2hBVaARt1RUyn3EABDz
eBtSOzhVFoUnsrZOWztw/yVHdo2wOER0dYQUbzqmLs6Tolq2e/tVk3bM+LARb8/J
rnx8mcTS4fbovoNXPILz8M33PUHNYw0zpeIqYmPxaXpzkWA1b7bXrlyAwsAhkOu8
xYcONZSA0XSCZQYCLt6Y0yLkJvL2Y0l3o7ctC+6NGmwzmtAAUhqa5GC1eQR2R9fB
ednhT5gbXOpGWMCLH+MLT8TvH5yMpSkEonGccZM=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:00 2025 by rpki-client