Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200676.roa
File: AS200676.roa (raw, json)
Hash identifier: DBFLpZ6C1tJCAbrY7tIeuFVyySArFNxpYdeyukUcgcE=
Subject key identifier: BA:10:58:19:28:B2:DD:53:66:A4:A0:FC:C1:31:6B:90:A9:51:AD:02
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7026A26EB9C13DF993A7872352F31F08461FAB96
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200676.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 200676
IP address blocks: 2a06:a005:2680::/44 maxlen: 48
2a06:a005:2730::/44 maxlen: 48
2a06:a005:27e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:26:a2:6e:b9:c1:3d:f9:93:a7:87:23:52:f3:1f:08:46:1f:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=BA10581928B2DD5366A4A0FCC1316B90A951AD02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:57:78:3f:97:30:b7:3c:dc:a4:a2:93:68:
f7:9d:48:15:af:f5:c1:93:ce:f4:d3:e6:47:dd:6f:
ab:6e:59:69:21:72:91:9d:2e:f9:c7:44:ec:f7:58:
0d:4c:82:95:ac:15:e5:47:a2:08:e8:ab:61:b7:76:
42:88:eb:25:7e:bb:a6:78:2b:de:2f:2f:8b:4a:e0:
b9:16:73:01:4d:a0:d4:26:34:2c:27:34:72:70:b9:
92:81:01:3b:38:c5:4c:87:0f:18:09:07:07:0c:8c:
73:e0:3a:53:74:fc:e8:ef:ca:6d:0e:62:cd:3f:ac:
ae:cf:16:ba:a1:60:69:0f:f8:6b:78:21:66:01:a7:
3d:0b:df:37:c5:fd:a5:53:ac:a0:49:41:fe:5a:e1:
af:77:67:14:0e:d3:d2:53:76:11:9a:ae:7c:37:aa:
45:b4:36:98:37:d6:85:3b:ce:3d:29:2c:08:8f:fd:
96:15:43:2f:e4:0c:b4:15:d9:11:85:e6:d4:47:7d:
23:b7:b5:62:dc:cc:b5:0f:ce:f9:71:f3:10:aa:5f:
30:b7:e5:d8:9e:62:70:1f:85:4c:a0:75:62:aa:7b:
0d:67:45:53:0f:e6:47:6f:f0:5d:f5:df:3d:2f:89:
fa:d5:0f:a7:b1:8c:96:cf:1b:94:88:70:4b:3e:ef:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:58:19:28:B2:DD:53:66:A4:A0:FC:C1:31:6B:90:A9:51:AD:02
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2680::/44
2a06:a005:2730::/44
2a06:a005:27e0::/44
Signature Algorithm: sha256WithRSAEncryption
dc:1e:25:39:b4:0d:c6:a2:f3:83:00:8d:e5:0a:2d:ec:0b:4c:
e1:78:e0:ad:99:23:ce:93:5d:a9:7d:4d:73:08:6a:48:98:f7:
c4:65:24:e9:1a:89:c6:51:c0:a3:7b:de:d8:6a:1e:2c:8c:c9:
98:09:64:1c:e8:0a:e3:fa:37:79:f3:84:91:4c:c1:4a:07:27:
69:70:12:28:6e:7b:2b:fc:8e:e6:a2:1e:a4:04:ee:81:f2:5b:
76:15:e8:46:80:fe:ce:51:ab:9b:49:1b:86:7f:95:64:2f:f7:
f2:4a:01:bb:5e:0a:13:9a:e4:1c:1d:4e:2e:7e:ec:28:92:50:
24:84:9f:19:1d:53:dd:66:80:34:bf:7e:08:98:d7:88:d8:c8:
8d:73:3b:40:07:48:8f:ff:9d:87:19:9b:3a:86:b0:df:6f:a1:
06:c9:b1:73:03:ae:86:46:fd:e9:d4:6a:ed:1b:14:12:18:c9:
45:fe:b3:2c:7a:34:0a:67:aa:4a:f9:85:f4:48:95:12:4a:28:
46:20:ab:12:58:68:ab:b7:7e:22:25:cb:a2:a8:88:f2:8b:8b:
ce:0a:d6:df:13:70:10:b6:9c:7d:03:15:77:18:b7:93:e5:76:
e7:a6:14:8d:a7:44:f3:8e:84:6d:cc:6e:78:fe:ad:aa:61:e6:
c4:25:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:20 2025 by rpki-client