Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS197561.roa
File: AS197561.roa (raw, json)
Hash identifier: hvJoCXODZ5hBWQP2TSIB18LopIaCUwi2pXdtCzlsXhI=
Subject key identifier: 9F:19:94:E7:D6:C2:CB:50:E0:E5:33:82:94:16:DD:14:D9:94:2C:47
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5F16F073C2228F915DABB35C89EA656FAEBF5B8F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS197561.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 197561
IP address blocks: 2a06:a005:1c7c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:16:f0:73:c2:22:8f:91:5d:ab:b3:5c:89:ea:65:6f:ae:bf:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=9F1994E7D6C2CB50E0E533829416DD14D9942C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:40:1c:83:bf:ac:52:4a:a6:c1:8f:55:33:
fe:e5:01:b9:70:b9:fb:34:ce:34:82:30:f8:2e:b0:
10:25:ec:6c:a6:a0:fc:19:f9:27:d8:62:cd:84:7b:
9a:08:18:ae:92:0f:cb:c7:a5:09:10:6e:b6:8c:1c:
98:c3:48:cb:13:1b:26:b8:da:93:94:d9:25:97:d3:
55:82:ee:b6:a3:4c:67:a2:97:d7:47:62:64:76:7e:
6a:47:d6:b8:1d:4d:77:3f:64:ac:f4:fd:ae:21:7b:
1a:6a:97:d4:9e:57:59:1b:89:76:3c:53:43:7b:f3:
97:c6:45:26:13:15:7e:35:46:63:72:ce:2e:01:06:
d8:ec:be:32:e4:d6:a8:33:fe:0e:ab:58:d8:27:ca:
2f:33:3f:55:4a:4b:34:4e:8c:e7:6b:24:c3:2d:fa:
d6:d8:fb:8c:1b:36:e8:39:c6:3d:3a:ef:f6:95:57:
99:2e:a1:c6:d2:80:05:1d:38:2b:f6:b9:09:c1:90:
a0:80:06:69:cb:be:47:5a:27:dd:f5:5a:0f:cf:ea:
e5:6a:94:20:b4:3d:70:20:68:17:36:c5:a7:07:30:
db:53:db:77:da:c8:6a:4c:da:99:a4:2b:4d:6b:36:
db:33:80:0b:c1:49:ae:1f:9e:bb:a2:67:13:4c:cf:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:94:E7:D6:C2:CB:50:E0:E5:33:82:94:16:DD:14:D9:94:2C:47
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS197561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b3:09:42:ab:a4:ce:64:dc:36:a7:db:84:77:c9:29:a7:1a:
ce:c0:df:cc:f1:cb:46:97:fe:c8:b4:bc:94:bc:44:b9:24:7b:
0e:3e:6a:50:7b:9a:14:be:21:1a:39:c8:e9:bf:17:bc:3c:13:
ae:21:1a:62:ba:6e:4a:32:33:5f:9b:dc:f5:b0:f4:72:7e:76:
82:ab:f6:34:36:53:fc:a7:f2:5f:75:e4:93:2e:e4:8c:bd:73:
cb:17:a7:f4:53:c5:a2:bc:f2:d6:de:96:f1:44:b4:ed:9b:df:
f9:56:fa:a8:cf:6c:75:fb:a7:1d:0b:81:db:dd:10:22:44:64:
e8:17:2c:87:73:1f:ce:94:05:bd:a2:85:b8:d1:46:9a:b7:69:
42:a8:ec:9b:ac:74:bb:19:d6:4c:69:b4:ff:4d:00:1b:07:c5:
27:1c:64:50:3a:69:77:53:ea:e3:c4:dc:f3:6d:72:50:6e:e9:
13:e2:62:50:c6:90:b6:5b:02:81:c9:68:cb:6b:7b:af:87:ab:
61:a8:fb:f0:34:6b:54:e9:96:c8:cb:1f:30:77:8b:a3:94:65:
ab:71:38:e6:5d:be:49:43:4f:76:63:0a:30:03:30:66:ff:e6:
f7:b2:c0:0c:e1:57:98:ed:09:63:0c:1b:fe:ba:80:62:b8:84:
02:5e:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:42 2025 by rpki-client