Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149953.roa
File: AS149953.roa (raw, json)
Hash identifier: cqZkfvtElAUE83kFXShNqc+SnWuHs2RIqpEc9W+QZ6w=
Subject key identifier: FC:47:0F:05:20:20:87:6A:51:BE:94:91:89:04:8C:3A:35:D6:FB:00
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0C4C593A1C542E26FE783BB2A6F1E4E7D70E1344
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149953.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 149953
IP address blocks: 2a06:a005:d2e::/48 maxlen: 48
2a06:a005:1081::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:4c:59:3a:1c:54:2e:26:fe:78:3b:b2:a6:f1:e4:e7:d7:0e:13:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=FC470F052020876A51BE949189048C3A35D6FB00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:9c:9d:78:1d:61:16:f8:4f:1c:14:0f:49:98:
aa:14:b4:4c:28:3a:e5:b8:c2:3a:28:c5:cb:14:17:
9c:38:07:a5:54:c5:a0:c9:80:ef:d6:80:d7:df:b8:
53:11:d0:c8:97:00:af:ea:3a:38:94:9e:38:cb:e3:
ee:fe:c7:cc:60:45:87:02:32:d5:f0:f7:0b:06:e1:
ef:94:3b:c2:88:9d:98:2e:c6:1f:fc:18:85:e4:c3:
8d:09:93:ff:e3:be:0b:6a:35:21:c0:4b:ae:ab:2e:
a3:bc:aa:bd:e0:2d:8c:db:a5:fb:c5:f7:65:1a:25:
54:dc:e7:a3:3f:2a:a8:4d:ce:c2:f3:32:f6:f9:20:
df:5a:58:2b:e3:5d:69:e6:f8:45:76:db:fe:ae:cd:
24:ee:79:d0:df:7b:8e:9d:35:a7:9e:ef:d5:de:b7:
9c:46:ef:bc:8b:a2:65:86:cd:48:32:dc:10:b7:8c:
68:ae:1f:67:86:0c:94:c0:24:fe:d5:97:2a:95:84:
53:c3:20:c6:6f:8a:1d:6b:f9:da:5f:ad:8c:0f:f6:
ac:af:6a:8c:89:97:6f:db:30:1f:1f:74:db:cb:57:
b6:6e:22:6a:35:8e:24:02:9a:f5:e0:df:49:b3:49:
c7:84:96:60:1c:a6:f6:d7:52:85:36:29:86:9b:9f:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:0F:05:20:20:87:6A:51:BE:94:91:89:04:8C:3A:35:D6:FB:00
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS149953.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2e::/48
2a06:a005:1081::/48
Signature Algorithm: sha256WithRSAEncryption
32:49:38:f7:c7:65:16:50:14:c6:48:01:d9:c5:29:36:da:33:
b5:5d:b2:38:32:a1:87:47:c4:23:4c:34:c0:86:d8:83:4f:18:
99:df:d6:85:92:7a:20:24:c1:95:21:b1:bb:9a:5b:70:fe:bd:
e6:68:7e:67:0c:92:fb:dc:b6:76:5d:67:57:77:fb:66:b9:f1:
ed:a6:32:94:d8:66:57:29:4f:f6:a1:75:77:73:67:ba:21:f3:
a9:68:4c:5e:de:66:8a:8d:0f:64:50:02:2d:34:f1:b5:74:36:
88:6e:52:94:42:57:be:e8:b9:0e:b4:fe:ce:b9:40:bf:30:28:
94:e2:9b:b8:bd:e4:2e:4b:c6:06:71:08:df:7e:28:c3:47:6a:
9c:0d:99:c2:ae:b6:d5:fa:f2:f7:14:69:75:6f:2c:c8:a4:0b:
1a:e0:a7:e4:e8:f8:88:92:17:2f:1d:a8:22:8b:b8:21:ad:f3:
e5:36:8b:1a:3e:6d:55:b5:72:0b:18:68:a6:5d:f0:bb:fd:dd:
61:69:66:ab:8d:e6:91:35:b9:66:13:61:73:1f:f1:ea:e0:66:
19:78:c5:48:77:fd:4a:74:94:39:e8:12:3b:d0:b3:26:6a:49:
20:be:01:80:76:42:f2:f5:5b:4e:e5:71:5f:a8:0f:a2:50:d4:
91:47:dc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:31 2025 by rpki-client