Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200754.roa
File: AS200754.roa (raw, json)
Hash identifier: oLdk8fm331eCMAeXb+w2UaVDYeJRfqVHJLG7xjTuujM=
Subject key identifier: 23:52:CC:79:87:A4:FB:62:A0:DC:3A:B7:58:77:E1:57:49:68:45:A3
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3BFBD2CF96B9F46978E13EF18E7B7F8A61BC31B4
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200754.roa
Signing time: Wed 21 Dec 2022 16:56:47 +0000
ROA not before: Wed 21 Dec 2022 16:51:47 +0000
ROA not after: Wed 20 Dec 2023 16:56:47 +0000
asID: 200754
IP address blocks: 2a06:a005:1165::/48 maxlen: 48
2a06:a005:116d::/48 maxlen: 48
2a06:a005:116e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:fb:d2:cf:96:b9:f4:69:78:e1:3e:f1:8e:7b:7f:8a:61:bc:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:47 2022 GMT
Not After : Dec 20 16:56:47 2023 GMT
Subject: CN=2352CC7987A4FB62A0DC3AB75877E157496845A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:a8:b7:ec:14:53:29:24:10:c6:3a:dd:7c:
af:4e:7e:27:25:bf:e6:dd:2f:3a:b3:5e:d4:6c:9d:
e7:1c:05:f7:4b:ac:be:3e:1d:d2:0c:34:f2:eb:60:
f6:d8:f9:87:49:44:02:39:93:c9:0d:70:e1:89:6e:
69:0e:00:3f:20:75:8c:f9:9c:45:c5:ee:bc:11:43:
81:c0:19:aa:21:c2:2f:70:1b:dd:f4:3c:04:b0:1d:
7f:f4:d5:b2:a8:e4:23:04:99:36:b5:6f:9d:d4:09:
a1:3a:73:49:a0:02:e9:15:e2:bf:ed:c9:52:aa:53:
ef:e1:06:07:ff:c5:6e:55:df:ef:14:80:74:bf:94:
8d:66:17:d5:d7:44:f7:76:f7:5c:44:a5:65:b2:2b:
34:26:43:00:f3:e2:69:f3:a2:3e:a2:82:76:6b:a1:
68:30:b6:8a:6a:d6:33:97:80:ab:94:3c:ce:ff:3b:
d9:9c:de:32:0c:15:e6:59:6a:a3:96:9a:85:ae:b8:
ed:88:b7:0d:fa:d2:4b:6e:1e:e5:7f:43:e6:ab:80:
e2:9d:30:68:1b:76:e3:79:26:81:29:60:62:bb:09:
db:91:0f:ac:81:a7:15:fb:f5:f8:24:68:5b:6a:01:
71:b7:05:57:ac:a2:97:5f:af:a9:75:e4:27:3a:83:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:52:CC:79:87:A4:FB:62:A0:DC:3A:B7:58:77:E1:57:49:68:45:A3
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1165::/48
2a06:a005:116d::-2a06:a005:116e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:e1:77:d2:5e:b0:1b:6f:c9:9f:47:3e:ce:5e:29:93:99:aa:
53:61:9d:47:ea:23:62:49:94:3e:72:8b:5c:46:42:05:fa:f4:
1d:9e:34:10:f4:ed:f6:3e:cb:ab:46:e3:ca:4b:4a:75:a1:d1:
d5:95:93:00:33:aa:02:e6:94:73:e2:f4:bf:68:57:0e:46:9e:
4e:31:08:d3:b9:8d:b3:6c:07:0c:e3:d1:de:36:4e:70:92:87:
f2:c7:5b:fe:73:1b:67:46:f6:29:06:07:5f:d2:de:2f:4c:f6:
a0:93:ba:0f:ba:82:8c:e8:52:02:29:ad:dc:99:fb:cd:02:9f:
62:4e:1c:39:14:1a:6c:a7:96:a4:11:d5:72:42:33:03:0d:ed:
d7:a4:dc:fb:fc:26:5b:43:48:fe:6b:e7:36:b5:3e:ff:ef:26:
4f:14:2c:b9:1e:6d:08:be:d8:81:a0:a8:b7:38:a0:b4:eb:c8:
a5:55:af:05:61:d8:ce:0c:fe:90:0a:61:b8:86:30:aa:4c:bf:
f9:81:11:cd:d9:a7:e1:8a:e9:b3:27:a0:05:8c:b9:d9:cd:46:
27:f8:5d:02:71:f9:83:2c:c2:74:52:dd:78:af:1a:43:19:9e:
b7:64:4a:50:e4:81:2b:b7:7a:04:d1:31:b4:ec:91:81:76:c8:
1e:8f:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:27 2025 by rpki-client