Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150325.roa
File: AS150325.roa (raw, json)
Hash identifier: JTxI1JS3xzHIdcV3+9mHIRJDhQTR4SiYb7m8k7HZ+LU=
Subject key identifier: 91:01:13:D3:9B:FE:C6:EE:87:25:51:4B:5C:70:41:1C:86:B9:24:7B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 397CD9B119DA8E6210A793361130AA56F0D3707C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150325.roa
Signing time: Wed 21 Dec 2022 16:56:45 +0000
ROA not before: Wed 21 Dec 2022 16:51:45 +0000
ROA not after: Wed 20 Dec 2023 16:56:45 +0000
asID: 150325
IP address blocks: 2a06:a005:3::/48 maxlen: 48
2a06:a005:16c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:7c:d9:b1:19:da:8e:62:10:a7:93:36:11:30:aa:56:f0:d3:70:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:45 2022 GMT
Not After : Dec 20 16:56:45 2023 GMT
Subject: CN=910113D39BFEC6EE8725514B5C70411C86B9247B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:7b:a5:54:fc:95:13:4e:50:34:89:87:aa:
2e:7d:db:56:cf:2e:bb:d8:05:bf:d4:48:c0:c2:d7:
bd:79:ce:c6:70:ea:37:db:10:8d:76:66:79:30:1c:
cd:41:28:15:0e:d5:87:7c:3a:d5:f2:e1:eb:0e:f9:
bd:30:71:85:d1:d6:be:d7:a0:89:7c:4e:a9:f8:48:
77:2a:66:20:6e:7e:be:f5:bf:7c:46:b2:2b:1e:31:
91:2a:bc:71:83:da:1f:5f:7b:7f:44:26:58:8d:ab:
9c:43:8f:7f:28:cf:c3:4d:0d:c6:df:b0:a5:07:22:
85:70:e1:d4:e8:79:39:91:14:ca:b4:09:04:47:e4:
ba:7a:ec:b4:2b:61:f3:7b:c6:5f:6e:77:1d:a0:4b:
ce:a6:0f:09:2e:db:0d:e4:b1:8a:9d:2d:39:4e:a1:
7a:a2:db:85:5a:cf:fe:70:c8:02:df:5d:64:43:e4:
34:13:71:92:ea:4d:44:2a:d3:92:9f:b4:3c:12:04:
02:28:6e:c9:f6:48:80:4f:67:37:07:b2:2f:22:5c:
02:b2:30:67:28:36:f5:06:ea:64:aa:65:f3:4a:81:
5b:47:48:3f:cc:14:5c:51:f4:9e:6d:20:2e:ee:29:
1d:1f:ac:74:b8:4b:89:9e:ba:80:b1:32:21:7f:24:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:13:D3:9B:FE:C6:EE:87:25:51:4B:5C:70:41:1C:86:B9:24:7B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS150325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:3::/48
2a06:a005:16c0::/44
Signature Algorithm: sha256WithRSAEncryption
bb:32:0c:a7:54:f4:b7:ad:68:fd:53:d0:68:13:6e:49:1d:6c:
cb:bd:92:5c:1b:9c:38:b7:0f:7b:80:41:4a:2e:7d:f4:b1:ef:
f8:33:f7:e1:d9:c1:c1:fd:0a:5a:73:99:ec:6c:d8:7c:ef:17:
9e:8e:3f:77:2e:0d:74:24:a2:6d:2b:89:37:3d:a2:a5:e1:52:
14:98:43:ca:8f:d7:c5:59:a0:bb:3f:5d:d9:e0:3b:4b:0b:cf:
42:12:81:3d:52:ba:fc:54:21:54:02:b1:2a:15:26:5c:7f:fe:
1c:ca:57:c5:6d:bb:fb:ad:56:a9:6e:fe:83:92:b3:07:34:ff:
f5:b2:c4:7e:e5:fb:20:e7:d0:d2:7f:6d:67:0a:88:7e:73:99:
76:c6:e5:70:6a:5b:8b:b9:95:04:6a:34:d0:9a:3c:21:4d:3e:
02:3c:85:1b:10:fd:fa:63:74:04:f4:57:85:58:86:17:4e:c7:
5b:2a:e0:d3:89:81:b6:78:9b:0b:d7:e6:ab:c6:e0:32:e0:35:
7d:10:d0:aa:5d:ee:20:ba:3f:fc:c4:23:5f:b8:f7:22:f5:cb:
42:5e:67:2d:3b:5e:13:de:6b:4b:db:a6:67:e6:31:5a:e2:d1:
2a:d4:5a:d9:63:41:08:08:d6:bb:92:fe:bc:7b:5b:6e:22:d6:
8f:8f:d5:a6
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUOXzZsRnajmIQp5M2ETCqVvDTcHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDVaFw0yMzEyMjAxNjU2NDVaMDMxMTAvBgNV
BAMTKDkxMDExM0QzOUJGRUM2RUU4NzI1NTE0QjVDNzA0MTFDODZCOTI0N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54nulVPyVE05QNImHqi5921bP
LrvYBb/USMDC1715zsZw6jfbEI12ZnkwHM1BKBUO1Yd8OtXy4esO+b0wcYXR1r7X
oIl8Tqn4SHcqZiBufr71v3xGsiseMZEqvHGD2h9fe39EJliNq5xDj38oz8NNDcbf
sKUHIoVw4dToeTmRFMq0CQRH5Lp67LQrYfN7xl9udx2gS86mDwku2w3ksYqdLTlO
oXqi24Vaz/5wyALfXWRD5DQTcZLqTUQq05KftDwSBAIobsn2SIBPZzcHsi8iXAKy
MGcoNvUG6mSqZfNKgVtHSD/MFFxR9J5tIC7uKR0frHS4S4meuoCxMiF/JLWRAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUkQET05v+xu6HJVFLXHBBHIa5JHswHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTUw
MzI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcAKgagBQADAwcEKgagBRbAMA0GCSqGSIb3DQEBCwUAA4IB
AQC7MgynVPS3rWj9U9BoE25JHWzLvZJcG5w4tw97gEFKLn30se/4M/fh2cHB/Qpa
c5nsbNh87xeejj93Lg10JKJtK4k3PaKl4VIUmEPKj9fFWaC7P13Z4DtLC89CEoE9
Urr8VCFUArEqFSZcf/4cylfFbbv7rVapbv6DkrMHNP/1ssR+5fsg59DSf21nCoh+
c5l2xuVwaluLuZUEajTQmjwhTT4CPIUbEP36Y3QE9FeFWIYXTsdbKuDTiYG2eJsL
1+arxuAy4DV9ENCqXe4guj/8xCNfuPci9ctCXmctO14T3mtL26Zn5jFa4tEq1FrZ
Y0EICNa7kv68e1tuItaPj9Wm
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:13 2025 by rpki-client