Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200262.roa
File: AS200262.roa (raw, json)
Hash identifier: xAnQYK6+kHcFMLWDW0XunbLNKQK2gdWq4O4PFVOqBwQ=
Subject key identifier: B1:66:54:2C:47:F2:76:9D:C6:DC:CB:A1:2F:3E:F8:0A:6F:FD:AA:3F
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 1734FD9702CDAE8A06E0E863503A6D2B5049C9B4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200262.roa
Signing time: Fri 30 Dec 2022 19:24:36 +0000
ROA not before: Fri 30 Dec 2022 19:19:36 +0000
ROA not after: Fri 29 Dec 2023 19:24:36 +0000
asID: 200262
IP address blocks: 2a06:a005:29a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:34:fd:97:02:cd:ae:8a:06:e0:e8:63:50:3a:6d:2b:50:49:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 30 19:19:36 2022 GMT
Not After : Dec 29 19:24:36 2023 GMT
Subject: CN=B166542C47F2769DC6DCCBA12F3EF80A6FFDAA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:05:e2:85:06:e1:01:a7:a1:4f:9a:b7:fd:
3b:16:9c:2d:f1:da:5e:70:9a:11:19:c2:2d:21:e8:
5f:35:5e:34:4d:ed:2b:02:ba:83:d2:61:68:cf:10:
4f:5d:2b:e7:ff:48:8c:3f:31:aa:da:74:ab:4c:8d:
45:14:ca:47:33:39:8c:ea:9e:41:5d:55:b0:9e:ff:
d9:2f:23:49:53:53:17:83:80:88:e2:5b:cc:5c:06:
43:58:6d:4e:bf:79:59:70:0e:1f:24:3d:dd:9e:15:
2c:66:63:7d:fe:0b:cb:57:31:f9:2f:2a:44:14:af:
eb:03:b2:e4:bc:21:5d:02:5e:42:57:dd:b5:22:ed:
e8:2f:e4:0f:2d:57:e6:43:35:d2:3b:88:77:72:ee:
5d:cd:e0:09:70:cf:3e:b2:44:04:5d:39:d4:99:43:
32:33:8c:a9:b7:24:3b:d6:cc:6f:d7:78:d7:42:f1:
f4:4b:fa:4d:da:63:17:d6:4f:3f:ff:43:ba:39:eb:
6a:5f:f9:2b:61:01:0b:11:10:71:d7:56:e6:97:8e:
45:04:c8:45:f4:a2:86:b0:ab:7a:44:3a:73:3d:20:
bd:d0:5c:4a:6a:c7:35:a5:91:e8:80:11:f2:7a:ae:
a3:47:80:eb:d1:f1:5e:6c:e9:87:5f:ab:ec:b2:29:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:54:2C:47:F2:76:9D:C6:DC:CB:A1:2F:3E:F8:0A:6F:FD:AA:3F
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:29a0::/44
Signature Algorithm: sha256WithRSAEncryption
84:68:04:42:18:40:89:f5:70:d1:93:7a:e4:52:55:6c:cd:30:
8e:eb:c4:0a:40:c5:6b:ea:5f:26:41:80:55:46:31:e4:e2:6f:
71:62:6f:12:d7:62:ec:19:76:fd:89:3b:15:2d:0f:72:d5:4d:
23:14:ed:46:5d:18:5d:9a:f2:fc:01:88:9d:45:51:b6:ea:0d:
d5:d2:13:7a:37:7b:fa:de:74:96:19:10:00:bc:eb:00:80:45:
46:f9:ca:1f:a7:1d:d6:b3:1e:38:cd:67:5c:82:14:4c:ee:02:
00:ca:2d:c9:8d:58:3f:c0:75:7d:2f:2f:71:17:aa:21:35:00:
e7:d3:a9:dc:65:30:78:47:7e:78:c4:7e:a1:ea:c7:6d:d7:0a:
cc:90:43:64:55:b0:55:25:e3:d3:50:a2:ec:d9:62:9e:b4:ef:
e2:50:01:08:53:2e:51:58:ab:d6:67:dc:f5:d5:8a:e4:63:41:
7f:de:36:de:59:15:a4:b9:c2:29:f1:06:ad:0d:ad:f0:42:cf:
d7:52:16:d3:ba:94:e9:1e:e9:04:01:ed:b6:66:a6:55:9e:85:
bd:a4:b5:47:00:21:5d:0d:1f:48:1e:69:e1:1a:3e:a5:74:1d:
a0:ce:fe:45:0e:5a:51:28:33:e4:4e:74:68:fc:20:6c:b9:6e:
29:ef:89:2b
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUFzT9lwLNrooG4OhjUDptK1BJybQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMzAxOTE5MzZaFw0yMzEyMjkxOTI0MzZaMDMxMTAvBgNV
BAMTKEIxNjY1NDJDNDdGMjc2OURDNkRDQ0JBMTJGM0VGODBBNkZGREFBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlfAXihQbhAaehT5q3/TsWnC3x
2l5wmhEZwi0h6F81XjRN7SsCuoPSYWjPEE9dK+f/SIw/MaradKtMjUUUykczOYzq
nkFdVbCe/9kvI0lTUxeDgIjiW8xcBkNYbU6/eVlwDh8kPd2eFSxmY33+C8tXMfkv
KkQUr+sDsuS8IV0CXkJX3bUi7egv5A8tV+ZDNdI7iHdy7l3N4Alwzz6yRARdOdSZ
QzIzjKm3JDvWzG/XeNdC8fRL+k3aYxfWTz//Q7o562pf+SthAQsREHHXVuaXjkUE
yEX0ooawq3pEOnM9IL3QXEpqxzWlkeiAEfJ6rqNHgOvR8V5s6Ydfq+yyKX8pAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUsWZULEfydp3G3MuhLz74Cm/9qj8wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAw
MjYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBSmgMA0GCSqGSIb3DQEBCwUAA4IBAQCEaARCGECJ
9XDRk3rkUlVszTCO68QKQMVr6l8mQYBVRjHk4m9xYm8S12LsGXb9iTsVLQ9y1U0j
FO1GXRhdmvL8AYidRVG26g3V0hN6N3v63nSWGRAAvOsAgEVG+cofpx3Wsx44zWdc
ghRM7gIAyi3JjVg/wHV9Ly9xF6ohNQDn06ncZTB4R354xH6h6sdt1wrMkENkVbBV
JePTUKLs2WKetO/iUAEIUy5RWKvWZ9z11YrkY0F/3jbeWRWkucIp8QatDa3wQs/X
UhbTupTpHukEAe22ZqZVnoW9pLVHACFdDR9IHmnhGj6ldB2gzv5FDlpRKDPkTnRo
/CBsuW4p74kr
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:49 2025 by rpki-client