Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200731.roa
File: AS200731.roa (raw, json)
Hash identifier: lLMXryqGsQbaHM1WNz2PulZ1ift2CvmnL2JD0NLIwlw=
Subject key identifier: D5:83:8E:05:4B:AA:78:D7:5A:C3:EB:EA:38:9E:3A:FB:B7:2E:58:BE
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 013F551C182CF3FB25A73BD490C2CE85C180B5DF
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200731.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 200731
IP address blocks: 2a06:a005:116c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3f:55:1c:18:2c:f3:fb:25:a7:3b:d4:90:c2:ce:85:c1:80:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=D5838E054BAA78D75AC3EBEA389E3AFBB72E58BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:a4:13:29:53:bf:90:b1:3a:0b:1b:87:4a:
24:b1:3f:ea:96:74:7e:04:30:3a:18:77:de:15:e0:
66:dd:a6:33:9a:93:04:ee:c2:83:9a:69:be:78:48:
f6:d0:78:2a:df:ac:f8:f9:22:a0:35:45:1a:d6:73:
81:67:c6:1c:80:95:ee:e7:71:ff:25:ab:f9:73:cb:
9b:97:e2:e0:7a:2b:a0:61:bc:64:a0:d4:d3:93:ad:
14:66:bb:c7:f1:02:1f:70:5d:df:9a:1e:3c:66:76:
93:cb:e3:e8:cf:e5:7e:2f:ea:9a:23:0e:6a:ed:2d:
38:b5:aa:f1:35:59:bd:b1:1c:98:2d:f8:24:7d:a9:
ab:6a:1c:14:35:1f:fa:54:32:99:eb:d3:55:77:ab:
4b:ca:98:48:8d:54:c5:b7:23:ed:73:7a:71:0c:87:
a8:1f:c9:43:f5:3a:23:7f:f2:27:9f:6f:03:ac:2c:
ba:f3:15:a1:17:64:f3:ed:9a:ef:12:2d:fb:cd:5f:
40:04:aa:78:a3:ea:ba:22:8c:83:dd:22:a9:44:97:
e7:46:19:0a:44:2f:5b:f9:03:2d:50:c3:ce:fb:2d:
a6:92:59:63:6b:35:ed:87:89:0a:db:2d:6d:55:9e:
7f:7a:6a:11:5b:5f:33:f4:71:ae:b8:88:93:b8:87:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:8E:05:4B:AA:78:D7:5A:C3:EB:EA:38:9E:3A:FB:B7:2E:58:BE
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:116c::/48
Signature Algorithm: sha256WithRSAEncryption
5a:40:ef:27:2f:13:23:7b:ba:b6:12:c5:7a:fa:7f:c7:25:8f:
51:fc:e9:4c:4f:89:02:90:29:06:f8:3b:da:84:d3:a2:9a:e6:
99:1d:b6:54:68:e6:4f:6d:ad:66:97:bf:57:2c:94:5f:ed:0a:
7e:7a:6a:9e:e2:80:42:c3:97:df:be:b8:5c:00:df:03:2f:3b:
f8:6e:41:bc:d9:74:c4:a5:4d:4c:b5:cc:76:17:0c:36:d8:b2:
ab:e4:a5:53:af:ba:ac:13:0a:b4:8f:7d:df:5b:67:ce:55:6a:
9a:25:a5:f5:3b:7d:f9:16:96:5b:32:48:74:df:e9:12:53:7b:
fa:4d:df:ae:79:05:2a:13:a1:6d:64:cb:fa:95:f7:c8:9f:8a:
f7:d8:61:92:b6:95:6f:c4:2d:f8:25:55:78:26:ea:6e:3e:10:
a7:70:72:0c:f9:5b:5d:b1:f2:83:5b:cb:b8:da:38:f9:83:d2:
45:a6:2f:5a:1d:aa:53:fd:ce:9e:7d:3e:29:4e:0f:18:37:07:
5d:ab:04:0d:27:a2:87:62:d6:79:29:ef:e3:d9:a3:12:0a:ba:
0e:4b:de:5a:d9:f2:58:71:0b:c0:af:47:35:82:2f:f1:58:c0:
2d:cc:ff:52:78:0a:c7:21:0b:09:06:4d:fb:e9:39:29:d0:c1:
b4:aa:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:12 2025 by rpki-client