Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200351.roa
File: AS200351.roa (raw, json)
Hash identifier: vaNKxjeAhSyL1LhzfvW1B2vAd38FG2hnj6sflCZw0kA=
Subject key identifier: 0B:09:91:39:C9:9C:B0:17:1A:F9:AD:6D:04:F2:17:7A:71:AE:B1:05
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0ABF08580CA08015BC03A9CA8270428729735327
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200351.roa
Signing time: Fri 23 Dec 2022 05:01:40 +0000
ROA not before: Fri 23 Dec 2022 04:56:40 +0000
ROA not after: Fri 22 Dec 2023 05:01:40 +0000
asID: 200351
IP address blocks: 2a06:a005:26c8::/46 maxlen: 48
2a06:a005:2720::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:bf:08:58:0c:a0:80:15:bc:03:a9:ca:82:70:42:87:29:73:53:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 23 04:56:40 2022 GMT
Not After : Dec 22 05:01:40 2023 GMT
Subject: CN=0B099139C99CB0171AF9AD6D04F2177A71AEB105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:5a:25:75:38:e7:a6:3c:29:96:f0:60:23:
1b:2a:d2:8c:77:7e:2d:6b:80:85:c8:12:12:49:a6:
7c:4f:4e:86:f8:f5:74:f8:38:79:e2:77:e4:eb:89:
b9:c2:a7:0d:e5:b6:bc:e6:3e:69:8a:9e:de:6a:04:
41:3d:78:9a:5e:bb:63:1d:dc:c6:5e:43:68:63:69:
11:9e:3e:40:59:63:3e:96:20:ea:af:b6:7a:f6:c8:
7d:2e:9a:ed:4b:4e:d2:be:86:c7:fd:a2:36:62:16:
14:ae:4e:8a:62:1b:5b:3d:46:8b:33:68:60:b1:ab:
5a:19:60:d9:e8:49:c7:9c:a6:75:a2:56:61:87:9b:
ec:e1:11:f9:8e:26:9e:96:32:23:29:39:eb:58:f2:
97:b7:64:58:0c:ca:cd:d4:11:ff:e5:1a:a0:f7:bc:
0c:df:6a:18:eb:a2:38:f9:fa:4d:6f:6c:2d:5e:ca:
f3:29:48:64:48:b9:c7:19:d7:38:fe:3e:a0:17:d8:
3f:27:8a:83:14:7c:68:08:c8:bb:6f:38:68:ac:9e:
69:7b:ce:5e:7d:2f:5a:86:73:26:33:36:2e:1e:d5:
9d:c8:57:30:cd:11:ac:98:bb:67:1a:26:d1:97:cd:
db:62:c1:f2:1a:05:13:7c:7c:4f:9d:30:bc:24:3d:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:91:39:C9:9C:B0:17:1A:F9:AD:6D:04:F2:17:7A:71:AE:B1:05
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26c8::/46
2a06:a005:2720::/44
Signature Algorithm: sha256WithRSAEncryption
5a:2f:10:d4:cf:ea:94:fb:87:2c:56:50:41:30:85:de:2c:99:
5f:92:9d:5b:75:c5:a9:7e:f3:10:59:03:2c:04:25:84:8f:1b:
1d:7e:75:d8:4d:1b:d5:8f:6f:7e:5e:f4:a3:ef:45:9c:e1:70:
42:0e:78:61:8c:a4:c3:0d:57:e3:7a:39:7e:a3:d4:02:d6:1b:
1f:3b:6c:22:fb:00:61:da:47:79:4c:27:f5:f9:5c:f3:7b:8b:
f9:d8:0e:be:83:0d:7f:29:76:e4:5b:22:94:91:0e:f0:1d:b3:
ed:e4:04:0e:91:19:02:de:7b:08:1b:23:d9:c8:c0:04:8b:75:
1e:90:1f:12:0a:6a:76:1b:51:c9:5d:b7:99:46:6a:78:de:26:
c3:03:a9:04:2d:66:0a:d5:7f:ae:5b:64:2b:b1:b4:c1:87:19:
64:61:2b:d1:19:e9:e4:9e:04:0b:7f:67:d4:98:e0:14:ac:fe:
c8:35:c1:76:90:70:7b:51:98:79:10:48:42:bc:c5:66:c4:c0:
5c:2c:44:c2:29:83:1c:e2:39:17:c2:42:82:d1:cc:bc:6a:91:
28:8b:93:e5:4f:1a:96:90:fe:79:3d:e9:1f:9e:94:b1:97:46:
30:05:c9:45:39:b9:e6:ce:76:c4:65:64:ff:65:3a:ef:6a:c6:
02:ab:ce:d3
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUCr8IWAyggBW8A6nKgnBChylzUycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjMwNDU2NDBaFw0yMzEyMjIwNTAxNDBaMDMxMTAvBgNV
BAMTKDBCMDk5MTM5Qzk5Q0IwMTcxQUY5QUQ2RDA0RjIxNzdBNzFBRUIxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zVoldTjnpjwplvBgIxsq0ox3
fi1rgIXIEhJJpnxPTob49XT4OHnid+TribnCpw3ltrzmPmmKnt5qBEE9eJpeu2Md
3MZeQ2hjaRGePkBZYz6WIOqvtnr2yH0umu1LTtK+hsf9ojZiFhSuTopiG1s9Rosz
aGCxq1oZYNnoScecpnWiVmGHm+zhEfmOJp6WMiMpOetY8pe3ZFgMys3UEf/lGqD3
vAzfahjrojj5+k1vbC1eyvMpSGRIuccZ1zj+PqAX2D8nioMUfGgIyLtvOGisnml7
zl59L1qGcyYzNi4e1Z3IVzDNEayYu2caJtGXzdtiwfIaBRN8fE+dMLwkPepPAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUCwmROcmcsBca+a1tBPIXenGusQUwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAw
MzUxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcCKgagBSbIAwcEKgagBScgMA0GCSqGSIb3DQEBCwUAA4IB
AQBaLxDUz+qU+4csVlBBMIXeLJlfkp1bdcWpfvMQWQMsBCWEjxsdfnXYTRvVj29+
XvSj70Wc4XBCDnhhjKTDDVfjejl+o9QC1hsfO2wi+wBh2kd5TCf1+Vzze4v52A6+
gw1/KXbkWyKUkQ7wHbPt5AQOkRkC3nsIGyPZyMAEi3UekB8SCmp2G1HJXbeZRmp4
3ibDA6kELWYK1X+uW2QrsbTBhxlkYSvRGenkngQLf2fUmOAUrP7INcF2kHB7UZh5
EEhCvMVmxMBcLETCKYMc4jkXwkKC0cy8apEoi5PlTxqWkP55PekfnpSxl0YwBclF
ObnmznbEZWT/ZTrvasYCq87T
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:06 2025 by rpki-client