Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS198408.roa
File: AS198408.roa (raw, json)
Hash identifier: YpvGtTvuX2X1SnCiTYtK92oR8T4Lq0JLJPp+UiOMf0g=
Subject key identifier: B0:AD:C8:B9:26:3A:70:5F:5D:FB:79:BC:D4:D9:CB:6E:73:06:93:0D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 65BAA0B61BC9D2DB865AC4161DF8E67AE5DBD54F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS198408.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 198408
IP address blocks: 2a06:a005:858::/46 maxlen: 48
2a06:a005:1190::/44 maxlen: 48
2a06:a005:26c4::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ba:a0:b6:1b:c9:d2:db:86:5a:c4:16:1d:f8:e6:7a:e5:db:d5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=B0ADC8B9263A705F5DFB79BCD4D9CB6E7306930D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:b2:4a:04:30:4b:fd:ad:ca:8e:43:3c:82:
10:67:82:58:38:eb:0b:25:b1:75:1e:54:22:4f:8f:
7f:de:4f:f5:7a:25:fb:df:65:f6:64:e4:a1:d6:20:
b2:28:65:b5:c3:21:92:be:e5:23:5d:e4:dd:7e:cc:
f2:d9:06:fc:7a:84:5d:f9:8f:09:a4:73:8d:b5:c1:
70:e1:bc:8b:ae:f0:de:93:2e:96:89:a2:78:d0:c6:
96:ed:ce:3a:96:29:d1:f1:d1:82:c2:88:f3:40:49:
32:82:ac:80:a0:6f:66:3a:7a:5a:ec:91:88:0d:d8:
5b:c9:93:68:be:e9:fb:a2:64:d3:c4:29:a4:4e:ad:
39:0d:a0:55:4d:3f:3f:ea:b9:4f:19:17:1b:d3:cd:
66:d6:27:24:1f:e5:2c:18:ff:d0:dc:77:5b:08:b1:
62:48:fa:04:4d:31:85:86:35:de:2d:dd:83:59:55:
48:f8:e6:4b:5a:ff:26:1b:cd:e0:a9:9e:cc:8b:63:
6a:33:8b:99:14:4f:0e:ee:f1:30:fc:fc:9e:46:66:
2c:3f:5f:f8:72:a0:51:9e:fb:3b:89:1f:f4:72:d3:
7c:8d:b2:ac:e1:13:90:03:fe:99:5b:4e:81:6b:32:
61:a6:6c:e4:aa:21:a6:c2:b6:da:5d:7d:d5:8c:55:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:C8:B9:26:3A:70:5F:5D:FB:79:BC:D4:D9:CB:6E:73:06:93:0D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS198408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:858::/46
2a06:a005:1190::/44
2a06:a005:26c4::/46
Signature Algorithm: sha256WithRSAEncryption
1c:c8:a1:03:28:4c:1a:ca:2e:40:2c:62:d0:05:bf:cd:3d:d2:
98:2e:1a:70:da:89:77:40:6b:56:cd:e1:86:5d:d9:a5:5b:0e:
23:a3:85:25:6c:3b:cd:42:2e:59:2f:a6:1a:2c:f6:d2:9b:df:
56:75:ae:67:ee:25:eb:2f:81:f6:a0:39:22:38:8f:7e:31:6d:
d3:4a:da:af:84:c3:83:68:10:ec:96:1c:23:93:fc:46:af:7b:
d5:35:82:c5:33:48:ef:57:ce:5a:17:90:a8:67:b0:4c:b8:0c:
55:6b:b9:6f:b7:01:d7:4e:bc:1b:4e:a8:7b:41:fd:5e:a6:ae:
4a:a1:fa:21:68:37:63:29:0b:cf:61:df:d0:66:ad:fa:6c:9d:
31:fc:26:a2:d5:7a:dd:1d:a9:39:84:7e:8b:3b:b6:87:34:22:
ed:c3:50:59:ee:6f:9e:19:3e:52:cd:61:5c:d9:37:61:02:f2:
e5:d0:24:55:06:f1:9a:88:ef:86:c9:d7:cc:db:5a:04:90:66:
d9:6b:8a:d9:3b:31:14:7a:b1:7f:73:1a:37:74:72:69:00:56:
12:37:13:fc:f4:47:59:cc:8d:aa:a1:b9:94:22:71:10:32:4b:
7c:38:00:b2:00:56:e2:07:85:ef:3c:fb:71:12:7c:22:62:5b:
14:d1:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:27 2025 by rpki-client