Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200732.roa
File: AS200732.roa (raw, json)
Hash identifier: RjHMdF1h2n8Zw1aMqwt5Jmy8HtzSTWNYUNC7pygkQHQ=
Subject key identifier: 68:F3:22:6C:90:FB:E7:5E:3F:9E:C4:D7:4B:49:62:56:5C:70:05:73
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0E6B13D6E0A5B0D9DBDC0FFD758F4EF999EF5E99
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200732.roa
Signing time: Wed 21 Dec 2022 16:56:46 +0000
ROA not before: Wed 21 Dec 2022 16:51:46 +0000
ROA not after: Wed 20 Dec 2023 16:56:46 +0000
asID: 200732
IP address blocks: 2a06:a005:d26::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6b:13:d6:e0:a5:b0:d9:db:dc:0f:fd:75:8f:4e:f9:99:ef:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:46 2022 GMT
Not After : Dec 20 16:56:46 2023 GMT
Subject: CN=68F3226C90FBE75E3F9EC4D74B4962565C700573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:9d:b6:ce:3f:af:66:b0:f4:ff:b5:c5:e3:
20:45:36:6d:67:a5:b8:78:eb:92:ec:30:dd:10:dc:
bb:ee:c4:f0:22:05:ae:2e:53:00:66:5a:03:50:2a:
99:c0:25:3e:6f:32:7d:9a:d6:69:6f:da:19:47:1e:
08:e8:6e:ec:33:d7:58:76:57:90:d4:50:b5:8a:12:
bb:f3:a4:09:6e:c7:78:24:04:3f:c4:06:5d:e6:df:
3c:5f:59:a1:24:9a:a2:08:3d:bb:5f:8c:24:d8:02:
fd:e3:42:2b:11:e9:31:46:b3:eb:a1:7b:76:48:7d:
ee:ec:5b:6e:c0:24:9e:49:ad:11:0d:3f:ae:00:f2:
c3:db:fd:5f:c6:b5:25:1f:f9:23:1e:22:77:0f:dc:
11:05:99:27:fc:cb:50:3b:9f:c9:24:17:bb:10:7d:
90:13:8d:5e:f9:2f:9b:c0:57:10:c2:24:16:cc:61:
bb:1e:09:84:97:9f:68:e5:64:84:9c:f2:1b:d6:c5:
30:06:fb:e4:2d:b0:e5:0e:24:77:cb:43:90:49:1a:
7b:fd:4d:3a:26:9c:4b:75:bf:76:23:1f:04:58:be:
51:ca:96:e2:84:fc:4a:f9:c9:a0:fc:77:02:07:f5:
9d:c1:d2:59:90:b6:2b:63:60:f6:20:6a:a7:22:75:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:22:6C:90:FB:E7:5E:3F:9E:C4:D7:4B:49:62:56:5C:70:05:73
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d26::/48
Signature Algorithm: sha256WithRSAEncryption
7b:97:44:be:c7:a4:44:df:d2:d5:ee:87:3c:a1:17:4a:c7:bc:
4a:4f:ab:fa:9e:11:db:f6:0f:db:99:75:a5:96:7e:52:e7:ad:
86:c6:15:8b:9e:56:fe:72:52:a3:8b:cd:98:d8:1e:4d:c5:8e:
b8:fe:ec:04:76:e0:a3:ea:34:cf:23:73:df:14:8e:ff:58:72:
e1:0c:e0:8c:c0:d0:f9:0b:00:83:a1:31:25:d3:21:d2:68:c7:
a3:18:52:1e:07:ff:04:18:4d:57:31:f3:92:e1:e1:a5:ce:8b:
af:e5:34:76:27:fb:42:8b:27:eb:d6:ed:64:11:9d:ae:3e:03:
1d:da:7d:af:23:70:89:90:2a:22:72:83:d2:f7:78:ff:98:0f:
ca:22:fa:34:be:5d:ce:7f:10:07:76:04:86:7b:29:cc:b2:90:
d2:53:a4:10:49:73:8d:4b:ea:bd:01:7e:13:81:ab:bb:c2:4d:
d3:0e:02:87:e4:84:42:19:b7:ac:72:a2:2f:97:ab:60:ba:f4:
ba:a7:31:55:ad:62:cf:83:83:ba:5a:48:22:7b:cc:3f:7e:78:
04:e5:2c:cd:00:ee:dc:7d:30:e0:ab:b8:dd:4a:70:76:40:64:
0a:ee:5d:99:56:4f:15:52:42:f4:69:96:4b:ab:7d:8a:47:4e:
74:1f:14:d0
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUDmsT1uClsNnb3A/9dY9O+ZnvXpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDZaFw0yMzEyMjAxNjU2NDZaMDMxMTAvBgNV
BAMTKDY4RjMyMjZDOTBGQkU3NUUzRjlFQzRENzRCNDk2MjU2NUM3MDA1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPZ22zj+vZrD0/7XF4yBFNm1n
pbh465LsMN0Q3LvuxPAiBa4uUwBmWgNQKpnAJT5vMn2a1mlv2hlHHgjobuwz11h2
V5DUULWKErvzpAlux3gkBD/EBl3m3zxfWaEkmqIIPbtfjCTYAv3jQisR6TFGs+uh
e3ZIfe7sW27AJJ5JrRENP64A8sPb/V/GtSUf+SMeIncP3BEFmSf8y1A7n8kkF7sQ
fZATjV75L5vAVxDCJBbMYbseCYSXn2jlZISc8hvWxTAG++QtsOUOJHfLQ5BJGnv9
TTomnEt1v3YjHwRYvlHKluKE/Er5yaD8dwIH9Z3B0lmQtitjYPYgaqcidVzxAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUaPMibJD7514/nsTXS0liVlxwBXMwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAw
NzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBQ0mMA0GCSqGSIb3DQEBCwUAA4IBAQB7l0S+x6RE
39LV7oc8oRdKx7xKT6v6nhHb9g/bmXWlln5S562GxhWLnlb+clKji82Y2B5NxY64
/uwEduCj6jTPI3PfFI7/WHLhDOCMwND5CwCDoTEl0yHSaMejGFIeB/8EGE1XMfOS
4eGlzouv5TR2J/tCiyfr1u1kEZ2uPgMd2n2vI3CJkCoicoPS93j/mA/KIvo0vl3O
fxAHdgSGeynMspDSU6QQSXONS+q9AX4Tgau7wk3TDgKH5IRCGbescqIvl6tguvS6
pzFVrWLPg4O6Wkgie8w/fngE5SzNAO7cfTDgq7jdSnB2QGQK7l2ZVk8VUkL0aZZL
q32KR050HxTQ
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:19:46 2025 by rpki-client