Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200566.roa
File: AS200566.roa (raw, json)
Hash identifier: v6H9BYFLR0QrdZCNQw1Eqrg8poDH0lBvrEztCWRN2fA=
Subject key identifier: A9:B8:CF:79:63:1A:34:0E:9E:AE:1D:2F:F1:F4:F3:8A:F7:2A:5D:7B
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2F1F7DE9FE69FFD5F39A12E364709EAAB7398F62
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200566.roa
Signing time: Sat 24 Dec 2022 06:44:04 +0000
ROA not before: Sat 24 Dec 2022 06:39:04 +0000
ROA not after: Sat 23 Dec 2023 06:44:04 +0000
asID: 200566
IP address blocks: 2a06:a005:2690::/44 maxlen: 48
2a06:a005:28a0::/44 maxlen: 48
2a06:a005:28b0::/44 maxlen: 48
2a06:a005:28c0::/44 maxlen: 48
2a06:a005:28d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1f:7d:e9:fe:69:ff:d5:f3:9a:12:e3:64:70:9e:aa:b7:39:8f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 24 06:39:04 2022 GMT
Not After : Dec 23 06:44:04 2023 GMT
Subject: CN=A9B8CF79631A340E9EAE1D2FF1F4F38AF72A5D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:28:c6:65:bb:ca:02:82:53:60:d4:d5:27:
3b:2c:70:0f:db:a2:9b:b1:06:68:95:2e:d8:4c:a9:
47:a3:be:b0:a1:a6:c1:42:85:a6:ef:9e:f7:af:81:
18:07:74:9e:14:90:5a:fc:b5:97:a4:66:df:f6:fd:
30:7a:e9:3d:35:34:ea:c4:e1:f4:2d:ac:aa:78:b4:
f7:5b:7d:cd:7d:50:aa:ec:4b:db:c6:68:9f:f1:65:
02:b6:b4:e5:86:c6:2b:8b:68:ee:4d:ed:b1:cf:aa:
ab:23:5e:2d:9f:15:9a:6a:e3:48:6b:46:3b:a5:90:
49:39:4c:f6:7a:41:96:c5:f9:b5:7e:30:ad:d0:2a:
6f:b5:bb:3e:c2:dc:00:3d:4b:e2:81:8a:41:32:a7:
db:01:4f:c4:23:5a:4e:1c:52:7a:1a:92:4b:3f:f7:
38:25:99:90:a9:74:c5:3c:65:af:25:8e:bd:63:73:
84:92:11:7d:e7:e1:26:ca:75:7b:e8:c0:cd:ef:ed:
e7:07:f6:e9:d6:a2:e8:6e:19:f6:ba:31:cd:9f:c7:
a4:bf:88:c4:d8:89:43:91:fe:46:45:cd:fa:7d:7b:
47:e9:81:dd:78:e7:10:ab:f4:1b:08:ac:0e:11:40:
6e:77:d5:b9:66:13:78:2b:4d:4d:5f:b8:b7:55:00:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B8:CF:79:63:1A:34:0E:9E:AE:1D:2F:F1:F4:F3:8A:F7:2A:5D:7B
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2690::/44
2a06:a005:28a0::-2a06:a005:28df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
dd:94:f9:7a:72:f6:c4:a4:0e:26:01:e7:15:fa:44:09:3f:7f:
e1:7d:90:fc:10:ea:66:3e:4d:64:9d:08:62:d0:5b:bd:8f:43:
7d:ee:13:9a:05:00:67:bf:58:bb:23:bd:0e:29:98:70:6a:41:
79:33:04:74:98:05:9b:da:77:08:69:9e:fa:f0:c4:8c:3e:a9:
f4:17:1c:12:85:3b:ee:d3:53:70:91:1d:4a:98:4f:c6:8b:4e:
83:8e:86:b3:80:28:f8:a9:48:e9:4f:18:bc:69:b5:b1:7a:e8:
4c:17:48:9b:9f:90:43:d6:5f:8c:69:52:7d:d5:c7:b1:de:0d:
df:cb:4f:b6:68:f6:e6:71:35:bb:52:11:4d:8f:d1:c2:af:8f:
c0:5f:b1:05:a5:2b:22:78:cb:d4:7b:c4:b1:cb:51:63:77:3a:
db:ed:af:41:cf:a5:42:bd:df:68:72:a8:90:06:c9:37:82:af:
9e:52:3d:c0:b0:50:07:a8:57:b1:44:32:13:3e:74:5b:b6:58:
fd:2f:22:01:74:d0:d6:87:9e:fe:6c:c8:d4:9a:34:57:06:0c:
a2:70:23:f5:d5:a9:e6:48:a7:c3:90:7e:be:3d:4a:10:00:6f:
a3:f8:b2:1e:23:25:87:cc:b8:68:ab:29:d0:61:e0:39:ab:ac:
ee:61:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:26 2025 by rpki-client