Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200447.roa
File: AS200447.roa (raw, json)
Hash identifier: n7vn3aTlRTqhnELXfcPoWgDxQM8SuPUPFyire4V27aA=
Subject key identifier: F2:E7:42:B2:89:3C:AD:B4:55:7F:CC:A4:70:B2:16:F9:0D:D1:AF:1D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4592BA72DC86ADDA85862CE84E0EB3FFA75F963D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200447.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 200447
IP address blocks: 2a06:a005:a16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:92:ba:72:dc:86:ad:da:85:86:2c:e8:4e:0e:b3:ff:a7:5f:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=F2E742B2893CADB4557FCCA470B216F90DD1AF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:0d:fc:dd:45:1f:86:a4:ff:d4:3a:00:33:
af:13:b3:bd:e9:9a:30:fa:4f:4c:08:44:40:e3:cf:
b6:15:89:92:d6:02:20:2c:6a:0e:6b:52:4e:cb:85:
76:6f:79:6f:49:39:a4:b3:16:84:6a:a2:c4:af:de:
80:4c:4d:53:2d:d8:ea:03:67:cb:f9:c5:83:3f:63:
99:61:34:84:20:9b:5a:ad:ae:e1:f8:15:c5:f8:4f:
4d:54:03:88:e1:fd:73:62:6e:78:92:f6:e0:fb:a0:
cd:9f:11:e3:f8:f2:92:5a:76:7f:5c:b4:5a:93:79:
75:4a:53:88:3c:f7:46:f5:04:dc:4c:db:80:f2:fe:
57:a1:ee:01:e2:9c:8f:73:05:dd:30:b8:9c:76:de:
59:13:40:d9:6c:d0:2a:2b:19:5d:c1:88:d6:06:e8:
71:22:a4:57:d2:b9:2f:d8:57:99:2e:55:46:3b:75:
34:46:ed:ef:aa:99:ec:fa:21:f6:1b:36:fd:d6:3e:
c3:c0:6e:ec:fc:65:27:e9:7d:c9:9e:62:e2:5e:d3:
ec:72:19:e0:ee:77:94:4f:0a:28:f0:29:7b:a8:a5:
59:ae:b1:94:77:e8:2d:34:1c:0e:ac:b0:7a:0b:ed:
17:2d:9a:6c:bd:ea:f1:d3:92:a6:8e:aa:76:0d:4c:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:42:B2:89:3C:AD:B4:55:7F:CC:A4:70:B2:16:F9:0D:D1:AF:1D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a16::/48
Signature Algorithm: sha256WithRSAEncryption
55:4d:3d:74:ef:6a:10:bf:5a:28:45:78:82:26:46:da:14:af:
1c:6a:1b:04:b0:c6:49:4d:b7:2c:9e:e1:9e:39:2f:e7:3f:fd:
56:07:f5:1d:8c:2d:cb:00:ef:59:de:51:12:79:a2:8b:ff:1b:
9c:b0:f9:1a:2f:51:01:35:97:03:06:0f:b3:f0:11:4c:67:ad:
77:01:95:ea:24:02:0c:51:96:40:92:28:d8:8d:57:f9:d6:71:
f5:16:a7:cf:2b:39:42:77:15:40:7e:4b:22:dc:46:da:81:76:
45:17:65:ae:28:c8:4e:1e:53:8a:3e:a3:49:cd:c7:9a:6a:68:
fe:c9:88:d6:cf:85:02:04:6d:af:30:50:9b:32:8c:69:13:83:
88:84:75:5b:d3:cf:a5:b6:23:6d:25:39:8c:15:e4:3a:5d:47:
9a:f6:83:bd:06:50:26:6c:1b:2f:2e:b8:d5:26:53:62:40:ae:
62:3d:40:d1:fc:e5:f0:81:82:64:32:53:2d:c5:2c:ac:b8:ef:
d8:29:5a:9a:5f:1b:f6:a8:9c:56:0c:49:1c:21:10:d4:43:1e:
92:7d:e8:8f:c1:96:69:1d:88:8d:01:99:33:06:be:f1:60:3a:
4f:4e:73:f7:d3:e1:88:b3:cc:14:ac:a0:be:8b:ca:b7:78:0e:
d2:45:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:32 2025 by rpki-client