Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200506.roa
File: AS200506.roa (raw, json)
Hash identifier: 9kW0sU3+iCehZLwy/1/S66acmwJV6pqXOhk1Y4al53Q=
Subject key identifier: 54:88:31:55:5F:0A:CD:98:CF:A9:98:66:70:A6:31:89:DC:8C:2E:B2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 5066D7091E86B5991A913BFE501B678E49EB077F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200506.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 200506
IP address blocks: 2a06:a005:2810::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:66:d7:09:1e:86:b5:99:1a:91:3b:fe:50:1b:67:8e:49:eb:07:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=548831555F0ACD98CFA9986670A63189DC8C2EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:6e:d9:07:7b:61:70:9d:49:5f:47:3b:1b:
de:bd:63:3e:83:c1:8b:bc:ae:16:6a:52:ff:e7:eb:
81:e6:52:bf:31:af:16:9f:cf:59:cf:8e:1b:e6:28:
24:9a:31:3a:9c:72:b5:ec:8e:d7:12:c8:2f:1d:b5:
ee:75:f1:83:c8:4e:26:a4:3d:77:05:af:b5:28:7f:
81:17:1c:63:28:ba:13:23:25:7d:94:47:36:e4:c9:
90:18:9f:bf:33:79:f1:da:ce:95:60:70:d7:c9:e4:
a8:ff:6b:48:7c:c8:75:88:77:50:86:81:6f:ff:cf:
32:02:db:c0:e9:95:6e:be:c1:04:62:db:4f:fc:fa:
4b:18:07:07:d5:8f:02:70:d1:ad:c5:db:45:7e:e5:
0d:f5:a3:c8:f2:65:be:1e:89:8d:55:c9:c2:36:12:
22:9c:e3:30:aa:26:05:0f:01:75:8c:4f:ea:aa:52:
c2:63:e2:f4:ac:d1:40:e5:0c:dc:bf:c8:ee:2c:ed:
36:1b:99:f3:8f:eb:1f:20:76:af:c8:2b:d8:01:b4:
44:e9:d3:bd:40:4d:37:79:5a:ab:49:c3:01:e3:72:
4f:5f:4c:25:bf:f5:30:c4:0b:03:35:80:b3:9e:c0:
6d:a2:0a:bf:36:b8:b5:f5:31:d8:e1:40:42:09:89:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:31:55:5F:0A:CD:98:CF:A9:98:66:70:A6:31:89:DC:8C:2E:B2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2810::/44
Signature Algorithm: sha256WithRSAEncryption
25:be:96:99:66:63:df:10:69:1f:77:61:1a:10:75:aa:be:88:
1e:b6:e9:f6:cd:21:3d:bf:71:1c:18:93:f7:e7:b8:ce:90:33:
52:5a:c2:89:7b:6c:36:10:8b:f3:86:8a:e8:86:dc:f2:fa:2f:
80:37:d6:d6:fe:4e:11:8c:53:96:41:13:ab:9b:32:03:37:64:
c9:c3:f5:86:89:9c:8a:ed:18:bc:dd:34:bb:98:12:72:b9:e9:
01:3a:f0:f8:a4:93:ed:c7:51:55:a4:9d:3a:7e:95:c6:ea:65:
e8:a1:da:64:59:43:d8:61:73:1e:f8:59:d8:fa:0c:57:02:09:
9a:ce:f8:0b:b0:03:0d:e6:2c:39:4b:28:3b:cb:f3:70:70:ca:
f3:6b:7c:b3:2c:3f:31:1e:4e:01:2b:ff:72:16:1b:73:c6:ba:
1c:c5:f4:c4:13:c6:76:a1:ed:25:9d:2e:87:04:57:66:4f:2c:
61:b5:70:d9:2f:37:a7:80:16:ad:d7:af:dd:e4:0e:2a:90:ef:
b3:32:5b:b9:f8:ce:86:87:d9:b7:5f:43:82:43:9f:01:c2:e3:
49:7f:fd:94:1b:34:05:d2:43:ce:d2:37:df:33:05:52:5e:db:
91:cb:16:fe:06:06:19:28:41:cf:81:c7:a2:55:41:03:92:71:
50:62:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:03 2025 by rpki-client