Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150298.roa
File: AS150298.roa (raw, json)
Hash identifier: EalRVFChKUPPdgujm5DvYS83UwSxuzvgfhuaNKlQ5ec=
Subject key identifier: 72:7B:95:D5:9F:5C:AE:E1:8C:2B:E4:B4:0B:6F:15:1F:0D:76:B9:66
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 667ED6ADA1B8ED8B95A72AAB836C6B2E07EE61FC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150298.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 150298
IP address blocks: 2a06:a005:1278::/48 maxlen: 48
2a06:a005:1c50::/44 maxlen: 48
2a06:a005:1c60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7e:d6:ad:a1:b8:ed:8b:95:a7:2a:ab:83:6c:6b:2e:07:ee:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=727B95D59F5CAEE18C2BE4B40B6F151F0D76B966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:e2:38:8f:3d:4a:6d:f0:dc:a0:ef:00:86:
5c:7d:aa:17:36:2a:c7:a9:78:aa:d4:33:71:e7:b0:
c9:80:ca:e3:8d:61:f9:43:ca:c8:ea:18:07:34:88:
22:77:15:36:e3:fd:55:72:3c:e6:18:63:7b:fa:96:
88:b6:64:a6:ed:d9:a5:db:a2:c2:01:c6:64:93:4d:
4b:90:5f:5c:30:cd:e1:3e:b1:44:50:0f:f2:f0:63:
8c:05:b1:a6:4c:11:12:09:af:6b:db:15:20:59:14:
38:e7:ea:ba:d4:27:43:3a:ad:82:43:32:27:4a:36:
c4:c0:6f:78:77:fc:0d:1c:69:72:94:4c:9e:56:b9:
7e:e3:8d:44:b1:76:ad:a9:6c:2f:40:8e:00:1f:ca:
32:26:ca:bb:bb:4f:26:b9:a7:48:2d:29:2f:ec:c6:
06:5b:9a:e6:8f:18:9b:46:e1:d0:c6:9e:9c:6a:34:
cc:ec:39:ce:e3:36:a9:89:82:cf:f4:97:a6:df:48:
5f:21:7b:2f:de:e5:4f:cd:a6:68:2c:b1:19:43:5d:
6f:f8:6d:22:c7:58:0b:ec:30:af:17:aa:92:7e:c2:
16:03:aa:8d:9f:73:60:77:ce:f1:23:b8:88:88:22:
77:d2:47:e0:a2:2b:4d:b9:42:09:f6:ea:c1:4e:20:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:95:D5:9F:5C:AE:E1:8C:2B:E4:B4:0B:6F:15:1F:0D:76:B9:66
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1278::/48
2a06:a005:1c50::-2a06:a005:1c6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:97:6e:b1:dd:e1:5c:6c:87:74:1c:c2:44:7b:2f:db:5d:6a:
93:79:81:d8:63:2f:36:2a:77:fd:84:70:d9:53:5e:26:a7:60:
af:f4:f8:f7:77:d5:5b:57:bb:24:d9:58:c6:71:79:d4:9d:3b:
6c:14:b0:52:d9:f8:52:be:de:69:12:02:53:ff:35:41:05:14:
53:de:37:f2:8c:28:ca:e5:7b:03:5c:e3:df:73:c5:d6:f2:fb:
2e:ee:fc:73:a6:31:f1:2b:bb:76:2e:79:da:c6:ee:22:10:f2:
1d:26:49:63:3d:f6:95:3c:cd:3c:ce:51:a3:ff:ae:f7:93:82:
5d:ce:99:62:32:77:c4:16:76:70:9c:9a:03:22:b2:31:b8:63:
6c:ca:d5:d1:a1:f5:e8:7f:92:fe:39:47:6c:86:a4:3f:77:4a:
c0:4e:59:0d:14:58:f5:52:fe:68:c2:97:81:d1:26:e0:2e:f2:
b0:5c:eb:06:3a:d9:e4:ad:f3:c7:3d:7a:cd:2a:1b:9e:30:d4:
da:aa:03:9f:f2:b0:13:bc:55:79:7c:52:f7:18:81:c3:1e:e8:
4f:5d:ab:35:14:bd:c2:cd:2a:1a:b1:bc:ba:75:e6:95:e7:35:
16:f3:96:02:b2:a9:6f:5e:4b:63:a5:1c:e3:4b:0c:fb:5a:81:
5f:03:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:26 2025 by rpki-client