Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS19625.roa
File: AS19625.roa (raw, json)
Hash identifier: Im3hx7OxJKbIalfhvdLQuJld1DYbvnMtYyoskD+CeA4=
Subject key identifier: EB:52:4E:DA:7D:36:F6:46:FB:AE:EC:14:F5:FE:C7:D4:35:EF:30:51
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4EADA6256B0D34166120AC83EE575DD0269ED7FA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS19625.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 19625
IP address blocks: 2a06:a005:1530::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ad:a6:25:6b:0d:34:16:61:20:ac:83:ee:57:5d:d0:26:9e:d7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=EB524EDA7D36F646FBAEEC14F5FEC7D435EF3051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:82:8c:d4:a6:95:d1:bc:c5:4e:bf:9d:6e:
e5:18:45:26:c0:21:a1:23:b5:cd:3b:e3:2f:e9:70:
83:4e:e2:46:5d:2d:03:b0:c3:99:45:7c:f8:26:2d:
80:49:5a:61:f0:a1:ca:1f:f4:31:38:e4:2d:20:aa:
5e:4b:07:9e:e9:e3:84:ae:30:a5:f7:3d:2f:c6:1e:
60:fe:1e:04:09:57:3e:77:25:19:b2:20:4c:fa:2c:
ce:df:d5:7b:bd:c6:1c:54:0d:a7:7c:05:bc:1c:27:
0b:d7:e8:02:8c:66:8b:43:5f:ab:b5:fc:be:e4:98:
9a:2a:1f:77:b0:df:82:be:7c:c9:01:8c:85:a3:40:
44:b2:94:57:92:6b:58:d2:e9:fb:80:e5:56:c7:af:
8c:45:8b:75:60:40:02:8a:06:7d:7f:0d:fe:6e:4d:
82:c3:8a:f0:0e:ff:26:24:ef:c2:9c:a0:a8:aa:b1:
3c:f8:1a:e4:30:aa:10:27:bf:96:af:40:c7:d5:fe:
2c:22:a7:b3:ac:d3:9d:ab:7a:fd:bf:87:cc:71:89:
b4:9b:a4:d2:76:1b:15:3f:ad:f6:4e:ee:f1:87:04:
08:cc:c6:f3:0b:be:9b:04:b8:07:81:75:7f:11:83:
9e:81:ce:67:b6:97:e0:7e:33:9b:2e:cd:88:5a:40:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:52:4E:DA:7D:36:F6:46:FB:AE:EC:14:F5:FE:C7:D4:35:EF:30:51
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS19625.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1530::/44
Signature Algorithm: sha256WithRSAEncryption
33:72:d7:a0:ff:ed:df:a4:15:6b:e8:68:95:f8:e4:ff:d8:47:
ee:7d:60:42:24:38:91:81:b9:54:e6:8f:09:e5:f3:a3:15:6a:
4c:9b:ae:d8:d0:3f:1e:b1:8a:d5:89:f4:8e:fa:95:2a:4e:8b:
b2:9c:87:e7:66:3d:e1:ee:3b:85:18:4e:3f:84:ca:5b:5a:a1:
6e:8e:d4:e3:05:49:aa:e8:dd:15:e9:04:f9:3e:38:ac:55:e4:
59:11:ce:23:b5:56:d0:00:db:d1:39:09:cd:9b:c6:ba:54:85:
ff:1a:ef:e0:6a:50:bb:22:05:fd:e0:fc:93:21:04:fb:2f:01:
6a:74:aa:02:1c:b0:a1:5f:ab:47:47:32:58:67:66:d0:fd:a6:
ce:89:02:e8:79:d5:33:6e:a9:a4:87:10:cb:08:a4:9a:46:1e:
13:eb:65:ba:b8:c4:1b:a0:7e:80:e7:5a:4a:9e:e9:1b:c3:1f:
2d:f7:c2:ef:42:12:62:d8:fc:13:67:c7:d9:74:73:2b:65:5a:
2c:89:e7:7c:7c:b4:13:f5:20:c7:7f:fb:9d:c2:5a:c7:f8:03:
aa:01:29:65:f2:25:62:08:c8:27:54:f8:8e:f2:90:c7:0e:56:
03:32:ce:61:70:c5:18:6b:c3:2f:58:25:b4:d3:0c:18:e0:3c:
15:4e:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:36 2025 by rpki-client