Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200536.roa
File: AS200536.roa (raw, json)
Hash identifier: oIl3ICS7Z6YzkihSqLJQBaNf+ZawlDMuRGVj5xDCQJk=
Subject key identifier: EB:0A:A0:12:CC:FA:23:96:2C:30:6C:49:BA:EF:C8:A7:90:51:81:EF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 21709769DB1D6D62D76DBCB697CC27F160972A3F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200536.roa
Signing time: Mon 26 Dec 2022 19:21:16 +0000
ROA not before: Mon 26 Dec 2022 19:16:16 +0000
ROA not after: Mon 25 Dec 2023 19:21:16 +0000
asID: 200536
IP address blocks: 2a06:a005:f80::/44 maxlen: 48
2a06:a005:1700::/44 maxlen: 48
2a06:a005:28f0::/44 maxlen: 48
2a06:a005:2910::/44 maxlen: 48
2a06:a005:2920::/44 maxlen: 48
2a06:a005:2930::/44 maxlen: 48
2a06:a005:2940::/44 maxlen: 48
2a06:a005:2950::/44 maxlen: 48
2a06:a005:2960::/44 maxlen: 48
2a06:a005:2970::/44 maxlen: 48
2a06:a005:2980::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:70:97:69:db:1d:6d:62:d7:6d:bc:b6:97:cc:27:f1:60:97:2a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 26 19:16:16 2022 GMT
Not After : Dec 25 19:21:16 2023 GMT
Subject: CN=EB0AA012CCFA23962C306C49BAEFC8A7905181EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:47:ab:80:a3:e1:66:14:eb:53:12:e7:01:
2f:9a:fe:a2:f2:4d:eb:c2:13:97:0c:5e:4f:10:c5:
60:b9:a1:38:a0:59:68:1b:e1:b9:36:a7:35:5b:5e:
96:3e:2c:0e:3f:45:50:95:88:e1:b0:e1:11:c5:50:
fa:12:10:ed:77:7b:4f:b4:fc:08:07:be:e3:8f:73:
18:e4:77:94:25:17:81:2c:cd:f9:6a:74:cb:ff:e0:
56:0e:7a:3c:b3:04:91:41:02:89:db:4e:a7:11:7b:
bf:0a:56:04:c5:78:69:5b:b4:40:86:40:c0:c2:bc:
8e:95:44:df:63:08:2a:5d:a9:37:2b:d3:4d:a3:4e:
6a:6b:bd:be:f1:61:ff:bd:3a:ed:11:11:35:e3:13:
1c:7a:7e:e6:1d:18:56:f1:a6:fc:7c:14:a8:8b:00:
77:5f:52:5c:a1:04:05:66:0c:a5:de:fa:c6:e1:3a:
68:88:d9:7b:a6:05:b1:0f:21:d3:b3:8d:b5:14:62:
d5:06:83:dc:1a:90:71:27:6d:8a:60:da:fd:45:40:
55:75:7d:04:48:9b:47:c7:e5:dd:c6:60:88:92:aa:
5c:af:36:f6:8f:c8:14:90:15:12:7c:7f:9a:f2:2d:
e9:7e:b8:a7:5d:b1:64:d1:b6:c9:ed:ad:87:7d:83:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0A:A0:12:CC:FA:23:96:2C:30:6C:49:BA:EF:C8:A7:90:51:81:EF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f80::/44
2a06:a005:1700::/44
2a06:a005:28f0::/44
2a06:a005:2910::-2a06:a005:298f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:91:93:59:9d:07:de:1c:0e:36:52:f3:8b:94:7a:21:3e:19:
8a:fd:87:64:d4:59:ba:48:b9:a5:94:e0:8c:32:46:f2:43:4e:
f9:c7:ed:7f:aa:09:a0:30:15:6d:5e:89:90:b3:d6:7c:3d:fc:
cc:3a:63:e5:d7:7a:1f:81:ce:c4:31:d1:0a:5e:5f:b4:34:da:
b3:52:97:ad:18:e7:24:8a:2e:da:00:d5:9a:e6:56:b7:34:e3:
61:19:ca:35:5f:c3:c6:13:1f:08:81:1c:43:db:ec:2b:01:89:
8c:0d:fa:96:a2:87:20:6a:1e:83:4c:44:a1:e1:86:8c:b1:ad:
76:0a:d5:80:39:73:0b:9d:f5:e2:1e:de:55:80:1a:f7:0b:a6:
6c:60:01:bc:2e:7b:af:17:ef:50:30:09:fa:7e:fc:2a:04:dd:
79:a5:00:ff:95:a4:00:8b:37:4d:da:6a:59:00:78:8c:4a:1b:
13:5d:b7:c6:92:e5:dc:22:af:14:be:10:e2:f2:f4:e6:7f:24:
bf:59:a6:07:89:1d:94:85:ed:81:78:43:04:6b:1c:df:a0:3d:
42:19:4e:f9:98:f4:c2:09:79:e2:c2:0c:53:4e:ec:42:1e:85:
97:d9:6a:7c:d3:ef:75:21:d1:f8:76:3d:fe:ba:9b:8e:d9:a8:
2d:36:c0:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:02 2025 by rpki-client