Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS15780.roa
File: AS15780.roa (raw, json)
Hash identifier: MAxLVjZY8xk9jjZ9bjo1JGj+o1wyz9ruJlXTthG6y9Y=
Subject key identifier: 47:D1:C1:B3:28:33:27:F3:D8:AA:B3:4D:E0:31:9B:CE:BB:38:0E:B7
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 231031C58BFFD906D598613E842FF906019E0D94
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS15780.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 15780
IP address blocks: 2a06:a005:dd0::/44 maxlen: 48
2a06:a005:de0::/44 maxlen: 48
2a06:a005:df0::/44 maxlen: 48
2a06:a005:e00::/44 maxlen: 48
2a06:a005:e10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:10:31:c5:8b:ff:d9:06:d5:98:61:3e:84:2f:f9:06:01:9e:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=47D1C1B3283327F3D8AAB34DE0319BCEBB380EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:6d:ef:6e:f1:a3:7d:f6:a3:1f:b1:00:69:
d8:77:a9:2c:d8:32:d3:4d:43:82:aa:03:5d:25:bd:
2c:8c:5c:49:40:d4:92:8b:12:5b:98:b9:61:07:df:
27:11:00:fd:22:13:99:9d:49:dd:85:9e:20:bb:81:
d4:a2:c2:de:88:5a:b2:ec:ef:72:7c:04:11:a0:ad:
86:fa:f7:4d:f7:40:dc:91:a3:9a:f9:20:bd:8a:5d:
69:42:86:eb:79:fa:0a:5f:96:2c:93:00:67:ca:f0:
dc:f8:74:4b:22:98:b5:f6:8a:a6:7b:d9:b8:8b:53:
d8:7b:97:e1:88:b1:02:70:4e:d3:4d:25:29:b5:3b:
80:6b:3e:5c:99:e6:e1:2d:1c:20:73:8d:de:8d:7b:
08:b8:6b:c6:bb:86:d4:33:ba:dd:5c:71:f6:7f:dc:
c3:70:82:7a:62:88:5b:b9:c0:fe:4f:8e:bb:1c:0b:
fd:3c:08:33:40:f0:c0:08:b5:9b:de:c8:ec:75:1f:
c4:6f:4a:9d:36:bd:05:56:e2:55:bd:ec:1c:0a:07:
0d:13:bd:92:5c:4e:e5:d6:28:e6:c8:39:35:ad:51:
44:74:e8:80:a2:5f:46:62:4b:42:87:58:22:45:ee:
6f:8e:3f:f2:60:2b:71:7f:10:11:2c:17:15:f4:db:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D1:C1:B3:28:33:27:F3:D8:AA:B3:4D:E0:31:9B:CE:BB:38:0E:B7
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS15780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:dd0::-2a06:a005:e1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:b5:30:fb:ab:c7:b0:3f:be:46:bb:f0:2c:02:f7:02:88:8c:
3f:7c:d4:76:7e:10:68:2c:c4:aa:e4:c1:0d:70:07:4a:b7:8f:
5d:fc:52:43:ec:fd:86:43:d6:cc:15:66:95:7e:f3:85:2d:c7:
7e:f2:03:0d:bb:6c:a2:b5:8f:5c:83:db:71:3d:54:ec:0e:af:
f3:f5:bc:57:2d:17:b5:ff:a9:7d:77:f2:a7:68:79:d3:ff:a4:
07:67:8a:08:52:69:54:4d:c5:a5:8e:67:78:73:db:1a:0e:1b:
ce:fa:b6:f3:81:9b:f6:7d:de:f8:9f:8e:82:8b:d0:3d:0e:e9:
21:d2:07:7a:c8:2c:45:43:76:03:df:e4:1b:91:a1:43:f4:26:
1a:4f:2f:ae:66:fc:bf:48:ec:5e:79:79:9a:fa:73:79:6b:ab:
b0:66:bf:63:76:fd:d2:bb:8a:38:d4:62:e6:96:30:d1:7d:f2:
e9:46:d3:c3:e9:5f:db:ab:95:7a:cf:6d:ea:41:5e:9d:46:b0:
7a:b9:ce:70:5b:68:6d:ce:1f:05:83:c1:01:fc:35:a1:bb:df:
f9:dd:0b:19:d0:94:55:2b:c9:c8:15:10:e7:c2:29:51:35:db:
41:0e:45:7d:ba:84:10:9b:6e:29:6a:fe:b9:0b:3b:0d:21:7e:
8a:d5:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:34 2025 by rpki-client