Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200306.roa
File: AS200306.roa (raw, json)
Hash identifier: A8mLRi5PBfwJG6bjUvCrA126+kK12vuVzDzUZHQtSwk=
Subject key identifier: 20:A7:66:2A:ED:19:8B:90:EA:B0:ED:4E:41:FE:C6:BD:43:C5:80:D4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3FF666D8C63F5E963119890C0C05AD1FBF196FE0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200306.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 200306
IP address blocks: 2a06:a005:af0::/44 maxlen: 48
2a06:a005:b00::/44 maxlen: 48
2a06:a005:c00::/44 maxlen: 48
2a06:a005:c10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f6:66:d8:c6:3f:5e:96:31:19:89:0c:0c:05:ad:1f:bf:19:6f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=20A7662AED198B90EAB0ED4E41FEC6BD43C580D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:55:ad:85:67:c6:bb:59:49:a8:6d:2f:ff:
7f:85:27:10:0c:48:9c:21:ae:19:d5:e7:eb:e8:52:
3a:1c:3a:d6:52:da:ac:3f:e5:89:64:32:de:a0:ad:
ba:63:fc:23:4f:ea:a9:aa:03:c1:3d:8e:b2:57:74:
fd:98:0e:c8:9f:1b:99:11:7f:2b:15:2c:9b:f4:15:
ad:fa:17:bd:07:3a:09:ca:9c:63:b5:c6:bc:b5:25:
c4:39:bd:3a:ca:b6:37:7c:0a:13:20:b4:81:c4:4a:
aa:02:fc:24:e6:ed:22:1f:86:69:20:3d:2c:d9:39:
40:72:74:32:1d:71:d3:fd:55:c8:6a:0f:ba:78:c0:
c3:7b:f9:5f:5e:e1:bf:01:1d:a1:ac:bc:6a:a1:16:
4e:8a:01:ae:d6:b6:84:85:46:d0:34:a3:49:d9:c2:
be:30:77:e0:b0:1d:f1:d5:26:f6:6b:3a:99:02:17:
ef:fe:82:20:cc:9b:dc:65:72:3d:ad:3d:78:0b:97:
66:4d:c1:00:9e:bd:3e:d8:0d:5b:f1:32:2f:ab:1a:
da:a8:e6:db:68:f1:73:76:db:d1:bd:c6:03:87:8f:
dd:37:d6:af:67:94:d3:f9:93:b9:26:b0:5c:e5:0c:
c8:a2:73:9b:60:f3:f6:7e:bd:9b:da:9f:36:3b:14:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A7:66:2A:ED:19:8B:90:EA:B0:ED:4E:41:FE:C6:BD:43:C5:80:D4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:af0::-2a06:a005:b0f:ffff:ffff:ffff:ffff:ffff
2a06:a005:c00::/43
Signature Algorithm: sha256WithRSAEncryption
a1:76:ae:11:ca:f8:ae:20:c0:68:89:1b:d5:14:ff:9b:51:eb:
bd:65:ae:e0:2d:dc:19:1d:bb:2d:d9:7e:36:e3:64:77:29:60:
54:d9:ac:43:e6:e6:6b:a8:97:fc:ad:a2:aa:61:41:7b:09:e6:
89:60:64:47:63:70:47:38:b9:f2:d7:ed:40:25:7b:f7:30:85:
9f:bc:94:fd:6f:4b:b1:b8:68:4f:f3:95:b9:71:a2:4f:f2:61:
f3:b1:71:03:9f:42:4a:0e:30:22:cd:2a:da:34:2d:1b:7f:d7:
1c:b6:d6:e5:fa:ac:5c:34:8c:54:7e:0f:fb:54:49:03:a4:5b:
e1:46:cb:7d:2a:47:a5:10:05:f4:ec:24:a6:51:fa:2b:c2:6e:
26:89:ae:4e:3d:f0:05:b1:9a:5a:ec:80:45:a8:cd:53:dc:48:
b9:0c:b7:94:47:c1:1a:b8:29:77:f2:f6:73:be:ff:c6:57:78:
06:d1:1f:91:69:be:49:50:a0:6f:af:84:0c:2a:d9:bd:2f:33:
ca:ff:6d:5e:01:9e:d7:2a:d1:09:ee:8c:6d:04:bc:3a:13:d1:
45:1b:8c:fe:96:75:d6:30:7e:21:51:0c:db:26:6a:a0:c6:82:
52:93:f5:42:83:72:08:c2:fe:57:b7:5a:b1:8a:3e:a4:10:a5:
e2:87:02:fb
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUP/Zm2MY/XpYxGYkMDAWtH78Zb+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTJaFw0yMzEyMjAxNjU2NTJaMDMxMTAvBgNV
BAMTKDIwQTc2NjJBRUQxOThCOTBFQUIwRUQ0RTQxRkVDNkJENDNDNTgwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXEVWthWfGu1lJqG0v/3+FJxAM
SJwhrhnV5+voUjocOtZS2qw/5YlkMt6grbpj/CNP6qmqA8E9jrJXdP2YDsifG5kR
fysVLJv0Fa36F70HOgnKnGO1xry1JcQ5vTrKtjd8ChMgtIHESqoC/CTm7SIfhmkg
PSzZOUBydDIdcdP9VchqD7p4wMN7+V9e4b8BHaGsvGqhFk6KAa7WtoSFRtA0o0nZ
wr4wd+CwHfHVJvZrOpkCF+/+giDMm9xlcj2tPXgLl2ZNwQCevT7YDVvxMi+rGtqo
5tto8XN229G9xgOHj9031q9nlNP5k7kmsFzlDMiic5tg8/Z+vZvanzY7FACbAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUIKdmKu0Zi5DqsO1OQf7GvUPFgNQwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAw
MzA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/
BCcwJTAjBAIAAjAdMBIDBwQqBqAFCvADBwQqBqAFCwADBwUqBqAFDAAwDQYJKoZI
hvcNAQELBQADggEBAKF2rhHK+K4gwGiJG9UU/5tR671lruAt3Bkduy3ZfjbjZHcp
YFTZrEPm5muol/ytoqphQXsJ5olgZEdjcEc4ufLX7UAle/cwhZ+8lP1vS7G4aE/z
lblxok/yYfOxcQOfQkoOMCLNKto0LRt/1xy21uX6rFw0jFR+D/tUSQOkW+FGy30q
R6UQBfTsJKZR+ivCbiaJrk498AWxmlrsgEWozVPcSLkMt5RHwRq4KXfy9nO+/8ZX
eAbRH5FpvklQoG+vhAwq2b0vM8r/bV4Bntcq0QnujG0EvDoT0UUbjP6WddYwfiFR
DNsmaqDGglKT9UKDcgjC/le3WrGKPqQQpeKHAvs=
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:51 2025 by rpki-client