Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS17138.roa
File: AS17138.roa (raw, json)
Hash identifier: dK6v4Pk014u9xXxEwXyAIke300trjQYllR10FRdTpwk=
Subject key identifier: 85:CD:53:B5:0C:94:02:B9:FE:AC:9F:99:64:3C:E8:89:9B:82:78:56
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7BE84108C6DED60271AEE1F36416AA8A02736591
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS17138.roa
Signing time: Wed 21 Dec 2022 16:56:49 +0000
ROA not before: Wed 21 Dec 2022 16:51:49 +0000
ROA not after: Wed 20 Dec 2023 16:56:49 +0000
asID: 17138
IP address blocks: 2a06:a005:b10::/44 maxlen: 48
2a06:a005:b20::/44 maxlen: 48
2a06:a005:b30::/44 maxlen: 48
2a06:a005:b40::/44 maxlen: 48
2a06:a005:b50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e8:41:08:c6:de:d6:02:71:ae:e1:f3:64:16:aa:8a:02:73:65:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:49 2022 GMT
Not After : Dec 20 16:56:49 2023 GMT
Subject: CN=85CD53B50C9402B9FEAC9F99643CE8899B827856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:9e:40:de:4f:3a:cc:10:79:7b:e2:39:3f:
81:6b:1f:aa:c1:52:bd:e8:ab:71:6b:e1:26:f4:86:
43:18:97:b6:fa:5c:09:32:16:7b:9c:54:b1:af:b0:
99:58:f3:e3:ef:35:6d:28:51:22:78:70:77:3a:3f:
a2:90:54:de:b7:60:eb:86:9b:92:28:d6:8a:65:fb:
79:74:28:bf:ad:b0:74:41:eb:e6:3b:a7:12:f3:2f:
43:d7:d3:f7:96:d7:92:2a:9d:ba:35:09:bb:77:5f:
3b:30:9f:0f:30:7e:eb:e0:60:b3:dd:ce:e6:3b:36:
4e:ab:4e:c9:ac:99:f9:25:63:4b:d9:ed:20:5d:b6:
8c:88:8f:87:b0:9f:6f:4e:7f:9d:21:0e:fb:28:ad:
8d:f2:32:f7:1a:c2:c8:5b:3b:4e:b8:35:e8:98:a6:
55:dc:d2:58:ed:e5:5f:59:64:31:36:10:ea:09:9e:
ca:00:ef:94:90:f4:a7:9c:c0:ca:d5:e4:5d:59:0d:
8d:7a:15:4f:97:7c:95:bd:48:e5:2c:b3:41:b7:49:
01:d5:c2:d2:21:f9:85:19:82:ff:75:1d:a8:ff:9e:
11:92:2e:e0:68:c3:b8:30:05:fe:e6:df:29:d4:b3:
62:39:12:09:08:a7:b0:89:10:64:a5:ed:10:25:b5:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CD:53:B5:0C:94:02:B9:FE:AC:9F:99:64:3C:E8:89:9B:82:78:56
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS17138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b10::-2a06:a005:b5f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c4:db:8a:ef:d7:c3:b3:8c:48:6d:45:c8:30:5f:b6:fc:3a:c5:
bd:e0:8a:70:de:90:8f:d9:a4:b8:16:f4:95:11:1a:31:9e:43:
c5:a1:b5:f6:84:24:96:84:45:bf:ad:75:cd:19:19:8b:96:23:
c4:ec:f6:71:0d:4c:f8:22:ed:88:06:35:79:cb:04:c3:b1:83:
34:75:0f:58:31:97:58:9a:cd:5e:79:f4:37:b1:a6:00:22:8a:
53:20:ea:78:e5:c7:b5:68:fe:f8:ff:69:1f:ec:fe:10:67:c9:
91:83:c4:75:3a:e8:72:da:e1:87:7b:d5:2c:7b:4c:7a:7e:53:
5d:79:f1:fd:db:96:4e:f3:e7:0a:28:73:a6:89:bc:4a:7e:c6:
ee:b7:52:84:e9:8c:43:85:1c:d1:20:70:dc:39:9a:7e:7f:41:
ff:72:b9:d2:72:a7:e6:1e:24:9d:4f:76:89:ce:32:92:12:93:
1a:e8:a1:71:d0:99:6e:15:a1:dc:2c:f2:2a:a4:e3:c3:d3:04:
58:0b:62:58:6c:04:3c:ef:9d:36:59:06:33:7e:97:19:8b:2f:
4d:2c:f1:5d:8d:f3:7c:75:d6:22:1d:8f:5d:43:aa:19:ad:91:
a9:93:66:74:4d:68:98:a4:80:2a:94:08:f4:9f:a4:7d:75:b3:
7f:28:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:03 2025 by rpki-client