Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS18526.roa
File: AS18526.roa (raw, json)
Hash identifier: 94G59CHQnBX1B/CCTxTDSCiFhAZmvXJ3RM5Kp57pNBQ=
Subject key identifier: E9:1A:3A:0B:C8:07:F7:EA:86:57:D9:8C:C9:E8:F5:31:BD:59:F0:39
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7CB52E1681DA9B7BBADF5E8570B272900F7DD5F9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS18526.roa
Signing time: Wed 21 Dec 2022 16:56:40 +0000
ROA not before: Wed 21 Dec 2022 16:51:40 +0000
ROA not after: Wed 20 Dec 2023 16:56:40 +0000
asID: 18526
IP address blocks: 2a06:a005:5b0::/48 maxlen: 48
2a06:a005:5b1::/48 maxlen: 48
2a06:a005:5b2::/48 maxlen: 48
2a06:a005:5b3::/48 maxlen: 48
2a06:a005:5b6::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b5:2e:16:81:da:9b:7b:ba:df:5e:85:70:b2:72:90:0f:7d:d5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:40 2022 GMT
Not After : Dec 20 16:56:40 2023 GMT
Subject: CN=E91A3A0BC807F7EA8657D98CC9E8F531BD59F039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:27:26:92:21:78:5b:0f:b7:a4:14:95:d2:
db:5e:fb:7a:90:c4:bb:0f:23:20:24:b3:cb:07:af:
39:0a:a7:13:55:ff:97:47:97:08:b5:ec:ad:db:72:
1b:06:ff:3b:04:22:4c:2d:93:80:d0:8b:c5:cb:aa:
1c:92:0e:30:72:29:d3:c3:b4:ce:ac:b7:b4:6f:9a:
83:ae:d4:d1:99:fa:d9:34:21:36:48:a8:d0:8d:c8:
d7:5b:44:ea:cc:ec:54:db:ff:ed:2c:3c:a1:61:72:
17:8e:63:dc:5b:fd:bd:b7:32:a6:82:be:5d:5c:2d:
91:f7:f2:c3:a1:a3:fa:69:15:98:59:8c:8f:49:8e:
ca:40:d5:2a:ea:64:01:5a:e6:27:9c:de:bd:9b:fc:
9f:aa:de:94:a3:a0:06:8f:87:fa:89:ce:7c:06:4e:
08:4c:bd:38:22:52:2e:b8:e2:8e:ca:ab:9d:21:84:
3c:ae:1a:2f:b7:c5:70:c9:e7:57:f2:c0:7c:a8:fe:
e4:55:01:55:a1:ee:cf:05:38:25:3d:97:88:85:4f:
44:b3:cd:52:f8:db:8f:6d:25:f3:f1:47:bb:03:42:
a5:9c:59:c7:69:fd:13:08:fd:a7:8d:4c:49:4e:3d:
8f:5a:1b:40:7d:28:6d:13:7f:23:0a:b9:54:88:53:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1A:3A:0B:C8:07:F7:EA:86:57:D9:8C:C9:E8:F5:31:BD:59:F0:39
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS18526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b0::/46
2a06:a005:5b6::/47
Signature Algorithm: sha256WithRSAEncryption
69:73:52:13:f3:0b:17:ca:70:c7:e1:ff:b6:e7:cb:b6:a5:82:
2c:b7:8e:bf:6f:09:e0:5b:d9:0a:f7:4d:3f:6e:43:f5:60:19:
e3:49:dd:1a:2c:5d:96:0c:df:34:41:b9:59:30:40:41:c9:b6:
58:87:23:c1:51:6b:a7:41:ba:d9:48:27:fa:e0:cc:f0:d7:cf:
c8:91:4a:0b:78:e7:b3:4b:9b:6c:78:e3:82:a5:5e:f0:b8:4a:
65:5f:1c:07:b1:18:c6:d7:15:3f:04:cb:01:c9:3d:a2:7a:75:
c3:33:b2:da:e0:e1:93:be:d1:23:87:0f:78:41:3d:13:37:2f:
91:c9:e3:40:d9:0d:75:d3:92:17:6b:d7:73:e5:aa:e5:e7:11:
75:1b:b8:3c:ba:1b:fe:a4:82:7f:c8:7e:3d:d0:b6:a7:92:e8:
2e:27:58:55:12:ed:3d:79:c9:81:84:56:6e:3d:07:34:bb:d8:
77:8b:75:29:6a:c1:1b:8c:5d:02:30:c9:8d:a9:05:0f:eb:49:
5a:e0:89:11:bc:f8:6e:54:44:b2:7f:73:c6:5b:f8:bb:b9:46:
73:1a:02:c9:44:e7:d2:94:1f:a9:5a:65:2d:11:a6:c9:60:46:
aa:72:2f:7d:d3:4a:54:2f:80:c5:74:f1:28:1c:f5:ed:9a:9a:
b0:ba:e0:e0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUfLUuFoHam3u6316FcLJykA991fkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDBaFw0yMzEyMjAxNjU2NDBaMDMxMTAvBgNV
BAMTKEU5MUEzQTBCQzgwN0Y3RUE4NjU3RDk4Q0M5RThGNTMxQkQ1OUYwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WScmkiF4Ww+3pBSV0tte+3qQ
xLsPIyAks8sHrzkKpxNV/5dHlwi17K3bchsG/zsEIkwtk4DQi8XLqhySDjByKdPD
tM6st7RvmoOu1NGZ+tk0ITZIqNCNyNdbROrM7FTb/+0sPKFhcheOY9xb/b23MqaC
vl1cLZH38sOho/ppFZhZjI9JjspA1SrqZAFa5iec3r2b/J+q3pSjoAaPh/qJznwG
TghMvTgiUi644o7Kq50hhDyuGi+3xXDJ51fywHyo/uRVAVWh7s8FOCU9l4iFT0Sz
zVL4249tJfPxR7sDQqWcWcdp/RMI/aeNTElOPY9aG0B9KG0TfyMKuVSIU/WHAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQU6Ro6C8gH9+qGV9mMyej1Mb1Z8DkwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVgYIKwYBBQUHAQsESjBIMEYGCCsGAQUFBzALhjpyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMTg1
MjYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwIqBqAFBbADBwEqBqAFBbYwDQYJKoZIhvcNAQELBQADggEB
AGlzUhPzCxfKcMfh/7bny7algiy3jr9vCeBb2Qr3TT9uQ/VgGeNJ3RosXZYM3zRB
uVkwQEHJtliHI8FRa6dButlIJ/rgzPDXz8iRSgt457NLm2x444KlXvC4SmVfHAex
GMbXFT8EywHJPaJ6dcMzstrg4ZO+0SOHD3hBPRM3L5HJ40DZDXXTkhdr13PlquXn
EXUbuDy6G/6kgn/Ifj3QtqeS6C4nWFUS7T15yYGEVm49BzS72HeLdSlqwRuMXQIw
yY2pBQ/rSVrgiRG8+G5URLJ/c8Zb+Lu5RnMaAslE59KUH6laZS0RpslgRqpyL33T
SlQvgMV08Sgc9e2amrC64OA=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:48 2025 by rpki-client