Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150184.roa
File: AS150184.roa (raw, json)
Hash identifier: 569pFg0DlG8Tjzn84jpZ+M4a1FIvs6h2l+VOBvAqjkk=
Subject key identifier: 4D:2C:A9:53:64:F3:7E:EF:2E:3D:0B:A9:6F:46:08:76:19:69:AE:66
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1410F4190F7B37DA5E56C957BC81AB2D704DCD8F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150184.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 150184
IP address blocks: 2a06:a005:5f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:10:f4:19:0f:7b:37:da:5e:56:c9:57:bc:81:ab:2d:70:4d:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=4D2CA95364F37EEF2E3D0BA96F4608761969AE66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:bc:42:5b:6f:54:c6:d4:70:a4:fd:7c:c4:
5d:c2:aa:45:e2:36:09:65:3d:ed:a7:ee:3c:49:cc:
18:94:94:38:9b:40:e9:db:4e:b0:11:6c:0a:30:33:
a4:1c:73:99:f6:ed:4a:3c:56:1b:12:97:a2:3b:9e:
75:69:4d:91:88:03:bc:58:0d:6b:43:0d:d6:88:82:
de:e5:c4:89:9f:65:0e:c4:94:fe:a1:02:15:57:77:
b1:4e:e9:ca:aa:0e:c4:60:71:0e:d3:1f:2d:b1:2b:
8d:d6:55:0c:5c:ae:a9:73:34:c7:ac:ae:62:cd:97:
28:d1:57:92:3f:92:cf:7a:92:0c:8a:57:50:dd:2c:
24:c6:b7:3d:43:48:58:8f:7f:9f:42:3f:17:82:fe:
85:03:a5:dd:1a:10:89:88:ab:12:8b:9e:bd:83:3d:
aa:22:97:fc:5a:55:e7:7b:d5:4d:c7:6e:fc:68:1b:
bc:ff:9c:7e:ef:cb:b7:e9:b7:ba:a7:3f:85:f1:23:
37:ed:56:d0:fe:69:64:d7:12:bc:27:72:3c:a5:37:
44:66:9d:04:87:26:06:3d:63:59:6f:0e:32:9a:d8:
e5:7b:74:a0:1c:d0:80:72:d8:2b:06:45:b0:f8:70:
28:bc:ae:13:5a:98:d0:9d:85:44:85:7f:ff:8c:bb:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:A9:53:64:F3:7E:EF:2E:3D:0B:A9:6F:46:08:76:19:69:AE:66
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150184.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f4::/48
Signature Algorithm: sha256WithRSAEncryption
5e:ab:4b:ee:6d:46:b7:59:cb:88:c2:ca:e1:9f:2a:31:67:0a:
6f:c9:11:52:49:82:08:07:c4:9a:47:5e:f4:40:5b:2f:76:8f:
c3:39:b9:92:18:fd:d7:2c:03:ba:03:76:79:b7:9e:b4:d1:b2:
e6:0f:ca:e1:06:00:13:bb:ce:17:c8:7b:8b:8b:80:43:4d:32:
dc:4f:95:21:f5:25:f0:d9:f2:47:9b:6d:7f:88:a1:a9:c6:bc:
0e:ad:9c:2e:ac:f6:53:20:74:35:9e:23:58:ba:75:97:24:e3:
4e:fd:bb:6c:1e:ef:0e:c3:3f:0e:03:98:e3:a3:3a:db:ed:96:
09:18:b1:30:29:78:d7:a6:9d:fc:71:45:4c:49:af:1b:b6:83:
af:ed:66:05:53:3a:b9:d1:05:5d:57:2d:cd:b6:e7:81:ab:fa:
6c:ac:bb:53:0b:45:80:c0:8e:b5:a5:3a:48:63:2f:a0:ac:f0:
90:2a:d9:11:8f:46:c1:b3:18:19:ea:f6:bf:69:1a:22:fc:84:
8f:6e:ad:3c:8f:bd:6e:c3:4e:4c:4a:86:74:57:27:95:02:99:
7a:b9:73:d7:f8:6b:0d:b1:c9:aa:40:5a:f3:c2:e6:4f:13:06:
6a:5d:54:51:2a:34:25:76:5e:56:4e:ea:61:6b:dc:77:b3:dd:
78:b6:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:27 2025 by rpki-client