Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200581.roa
File: AS200581.roa (raw, json)
Hash identifier: 5uY5CrnjjuobrlC+wS2VJIWo2hl7f0xSBOdFGP3hdvM=
Subject key identifier: 35:81:80:E0:A0:D9:87:BB:82:D6:4B:CD:EE:07:49:4C:AA:A5:55:B8
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4DB37DCC0AAE39C3ABD32D3EA10A9C6028FAAB9B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200581.roa
Signing time: Wed 21 Dec 2022 16:56:56 +0000
ROA not before: Wed 21 Dec 2022 16:51:56 +0000
ROA not after: Wed 20 Dec 2023 16:56:56 +0000
asID: 200581
IP address blocks: 2a06:a005:2290::/44 maxlen: 48
2a06:a005:2790::/44 maxlen: 48
2a06:a005:27a0::/44 maxlen: 48
2a06:a005:27b0::/44 maxlen: 48
2a06:a005:27c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b3:7d:cc:0a:ae:39:c3:ab:d3:2d:3e:a1:0a:9c:60:28:fa:ab:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:56 2022 GMT
Not After : Dec 20 16:56:56 2023 GMT
Subject: CN=358180E0A0D987BB82D64BCDEE07494CAAA555B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:51:a1:6c:89:91:1a:70:4d:db:af:38:36:
5b:0a:02:e8:b5:1b:04:55:e9:d4:e1:e7:c1:b2:23:
c8:59:d4:76:b3:d6:c2:73:a2:90:8b:13:89:c9:93:
7a:20:11:7e:7f:83:2f:2f:54:eb:5a:af:05:c2:e3:
da:b9:8e:ac:93:b6:3b:58:d8:0d:f9:7a:ae:57:ff:
c3:a6:c7:c2:fb:11:f4:87:0f:3a:4a:29:c8:16:6c:
ed:c0:39:c3:82:82:3b:8a:ba:fa:da:f2:10:69:da:
b6:7f:21:94:ee:24:d2:b8:07:04:16:2f:9a:56:00:
5d:68:84:1b:da:c4:2a:26:58:d7:43:8f:cd:07:52:
7a:f2:c8:ab:27:5d:f2:76:38:e0:6f:8e:e7:79:ce:
c9:b3:14:d9:58:f8:0f:98:cf:e0:5b:cf:21:84:3c:
58:e4:d1:d8:08:63:8b:d2:d6:9b:3f:a4:f3:20:39:
37:a8:78:92:af:1f:81:1f:b3:0f:1e:51:ab:a3:84:
37:34:f6:33:bd:1c:39:db:f4:94:41:66:db:c9:0b:
09:c4:41:9a:0c:70:6d:72:fe:ef:ed:7a:16:e0:d8:
eb:16:d8:fb:53:f7:10:3b:fa:52:44:9b:f8:f1:d2:
2f:a5:3e:b4:2c:02:c6:c1:76:a6:6b:fa:00:3e:40:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:80:E0:A0:D9:87:BB:82:D6:4B:CD:EE:07:49:4C:AA:A5:55:B8
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2290::/44
2a06:a005:2790::-2a06:a005:27cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c6:68:ad:20:5c:51:db:b7:84:c8:ea:a4:0d:cd:e8:b4:e0:86:
3b:c4:f0:36:a8:dd:30:9d:25:b4:2d:d8:47:15:c9:09:d2:49:
4f:cd:75:b7:e0:65:20:5a:22:80:6d:fe:ea:18:04:87:a6:a3:
f8:1e:f3:50:54:32:6c:5e:ac:4e:da:af:9f:7f:70:a3:91:3e:
95:eb:86:8f:53:e3:fc:8e:e1:5d:73:f3:b1:48:80:f5:ec:10:
80:ec:39:d5:98:56:2d:ff:16:8b:2a:99:03:4b:27:08:9b:b8:
89:c9:17:4e:8b:22:9b:59:bc:f0:e1:a1:22:1f:cc:a2:5d:e0:
78:0d:e2:f2:0a:22:03:32:62:df:aa:20:87:94:66:42:6a:1e:
77:62:32:1e:12:81:fd:c7:ac:bd:59:c3:01:4b:58:f0:d1:d7:
a6:3f:7a:71:12:79:4a:10:a9:5b:31:b0:21:c6:e2:e9:8a:7d:
c2:2b:d4:ed:fc:ff:39:b0:e7:69:e7:ac:ba:65:e1:8b:94:9d:
be:0a:18:5f:b3:cb:ed:95:bb:9d:6c:58:e0:55:1a:54:ff:03:
91:72:1d:d7:82:3e:9e:89:10:9c:26:68:7c:2b:2e:40:3e:c4:
d1:b6:53:e9:91:9c:a9:ac:38:db:50:87:74:37:3b:da:f4:26:
a4:1a:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:34 2025 by rpki-client