Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS18250.roa
File: AS18250.roa (raw, json)
Hash identifier: f/xVft0816dDutwM1T4m+vGaFJ3jK//4hl6klmcwfOU=
Subject key identifier: 74:58:E7:6B:47:94:73:35:35:32:A0:B6:97:16:2C:14:9A:22:AD:5A
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 6978E81CA596AF59F7FC88ABF889359BB06F2A92
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS18250.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 18250
IP address blocks: 2a06:a005:4e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:78:e8:1c:a5:96:af:59:f7:fc:88:ab:f8:89:35:9b:b0:6f:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=7458E76B479473353532A0B697162C149A22AD5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:24:59:bc:1c:02:61:0e:95:50:e7:e4:ac:
73:25:97:9f:0d:e7:dc:9a:cf:43:2e:67:e5:bc:a4:
da:1a:03:23:6a:44:29:c5:b0:92:a6:ed:80:da:75:
bc:63:f1:76:58:58:49:e3:4a:ca:74:77:6d:77:a1:
c4:51:09:28:e6:02:39:eb:f4:73:a8:e6:cf:86:27:
65:de:ba:b1:1b:5e:fb:56:d0:c9:88:bf:61:94:52:
f5:b1:3f:e6:dd:c1:3d:eb:67:2a:3c:31:04:91:b3:
48:f7:09:77:aa:bd:97:cc:34:c4:8b:19:9c:ad:44:
b7:c6:90:68:07:60:c7:87:de:28:d3:a0:ff:c9:fc:
19:70:20:11:6c:77:7d:9e:74:f9:c1:f2:01:66:da:
9d:62:d5:72:fe:b9:79:b7:b2:52:e5:e9:d3:a3:26:
91:fa:aa:38:d2:e2:4a:7c:9b:61:81:9d:89:f3:16:
96:96:1e:24:e1:59:ec:d3:d7:55:87:db:39:59:bb:
42:7b:f5:28:72:3a:2b:9e:39:dc:1e:2e:21:e4:11:
07:82:20:0e:fc:9e:d0:38:c9:98:ab:93:9d:57:ae:
4f:d7:0c:67:b1:82:df:1b:0e:ff:5f:fa:ec:63:b3:
8e:80:fd:16:ea:55:59:ee:94:02:17:39:d1:75:96:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:E7:6B:47:94:73:35:35:32:A0:B6:97:16:2C:14:9A:22:AD:5A
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS18250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4e0::/44
Signature Algorithm: sha256WithRSAEncryption
75:6a:99:c3:18:2f:46:00:a6:bc:c2:08:06:f9:38:da:f9:5b:
df:fd:0d:aa:71:2a:53:be:86:80:f5:06:b0:d3:54:0f:fc:45:
71:93:0b:5e:06:8f:75:a1:08:21:78:4f:13:d0:22:d6:1d:4b:
92:5c:86:0e:4a:22:01:73:40:b5:94:3e:11:d7:9b:59:36:16:
9d:b5:8b:87:c2:b7:f4:be:0e:72:e8:04:5f:5e:b5:f5:a3:1c:
13:fc:82:da:21:de:b5:27:85:37:9b:75:e4:91:51:66:cc:82:
77:df:14:af:be:59:37:6c:dd:70:df:4e:fe:a0:36:85:ce:da:
82:14:ed:a0:84:cc:6a:a2:7f:a3:f2:ca:27:fa:12:6a:d3:71:
fb:1f:e0:0c:ba:1d:1f:21:58:8c:39:8b:48:5b:29:20:2f:2e:
28:d3:34:0d:e7:f5:44:13:7b:16:d2:fd:45:03:00:7e:73:f3:
fb:89:d0:ee:d5:fc:a2:51:59:ab:03:6d:a2:7e:43:a6:8b:c9:
57:84:35:0f:05:d9:ab:4c:a9:2f:32:eb:fd:d0:7c:58:ff:d3:
f2:11:c8:76:21:cb:51:41:61:31:06:72:b9:1f:9b:ea:41:32:
7f:96:ba:a1:f7:aa:83:61:ba:ce:7e:5b:eb:5e:a8:76:38:61:
bd:e9:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:20 2025 by rpki-client