Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200255.roa
File: AS200255.roa (raw, json)
Hash identifier: YGLgUtTcbi/r1Kj8bUxwkVJ4ixTsvqFew9dkMyeQybc=
Subject key identifier: 57:3F:5C:6A:0C:7A:FC:0E:FE:5E:13:7A:8D:04:F2:21:AF:7F:AD:9F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2C495C31482212AB92F2FBF53874B88400F822E5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200255.roa
Signing time: Sat 31 Dec 2022 04:17:25 +0000
ROA not before: Sat 31 Dec 2022 04:12:25 +0000
ROA not after: Sat 30 Dec 2023 04:17:25 +0000
asID: 200255
IP address blocks: 2a06:a005:a00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:49:5c:31:48:22:12:ab:92:f2:fb:f5:38:74:b8:84:00:f8:22:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 31 04:12:25 2022 GMT
Not After : Dec 30 04:17:25 2023 GMT
Subject: CN=573F5C6A0C7AFC0EFE5E137A8D04F221AF7FAD9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:36:25:b2:02:e5:30:71:ac:85:a6:27:ee:
58:36:2b:68:b9:86:c2:a9:f4:bb:92:47:12:31:ac:
dc:ec:47:35:a5:15:e7:33:8f:45:46:78:e6:6f:ba:
98:e1:4e:75:ac:ec:86:6b:57:e5:42:c3:73:42:64:
bd:ca:83:8c:1f:1f:d3:00:ee:f4:93:41:17:59:0e:
04:20:67:5f:d2:d8:27:7f:a2:aa:c5:66:b7:19:c1:
46:f3:d6:3a:2d:63:5a:26:5a:6d:7a:65:e6:bc:8f:
cb:4e:96:3d:52:84:78:bc:d5:8f:40:c4:0c:fe:52:
36:af:04:c6:26:1c:b4:a7:b2:f6:ae:64:a8:b7:35:
78:30:a7:7d:da:b3:36:43:07:03:b0:06:39:23:5d:
f0:ad:4a:97:d3:30:44:81:5d:ba:13:3d:e8:69:06:
74:11:ca:40:08:10:51:97:45:06:16:2e:d2:66:99:
8f:0c:33:3c:39:4b:4c:1b:cd:4e:11:5a:cb:0b:92:
90:2a:f0:4b:78:ff:30:41:30:16:9a:a1:bc:d4:25:
c8:f7:bc:b4:14:de:55:42:ea:0a:4e:80:e6:aa:68:
57:8b:0b:78:bf:5e:e5:98:b4:cc:8d:3d:e4:12:9a:
6c:27:ad:c5:7a:37:c1:2e:8c:01:be:6c:04:da:9a:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:5C:6A:0C:7A:FC:0E:FE:5E:13:7A:8D:04:F2:21:AF:7F:AD:9F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a00::/48
Signature Algorithm: sha256WithRSAEncryption
3c:5a:50:1e:65:40:96:9b:f0:b0:51:8d:ab:de:7c:eb:c9:a8:
6c:c2:4e:a9:d5:fb:d0:71:9f:38:fd:bb:28:5d:20:10:74:d4:
56:e5:f5:56:5c:3b:cc:88:17:8d:e5:0a:b0:e4:45:54:f5:6e:
27:60:27:3c:47:5d:c4:a3:e9:40:a9:d8:3b:6a:96:08:cb:99:
e1:67:c8:61:c4:c1:55:b4:86:3b:c6:86:60:e5:b8:ab:63:f6:
ac:d3:ed:d4:7d:13:f1:1d:73:9e:26:f4:83:b2:e0:06:3e:dc:
86:47:f1:a6:bc:16:c7:be:b6:7d:11:dc:8d:00:b0:f2:2d:4e:
aa:bc:2c:11:81:a7:21:fa:a0:d7:7f:da:5b:5a:81:1b:95:a7:
da:fe:4f:61:4d:c6:11:16:4f:23:81:43:6b:ba:3e:46:90:14:
0c:eb:fe:d9:60:aa:df:8e:61:fa:53:55:b2:4c:12:32:86:f3:
91:49:e6:f6:26:1c:cc:79:fb:3d:bb:6c:8f:67:d6:cd:a9:c0:
51:16:11:11:c8:27:f8:9c:44:cb:e0:5b:52:97:12:d4:54:bc:
5e:a8:08:cf:c9:51:83:9f:e8:c3:8c:2f:d8:ad:4c:ee:7f:ea:
ca:b9:f0:a5:f8:fd:3d:52:42:d1:f0:b0:d7:a6:c3:ac:46:1c:
81:c6:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:58 2025 by rpki-client