Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200840.roa
File: AS200840.roa (raw, json)
Hash identifier: 5vZktaE+hQh16Zq3Ol3a3Pg4Ak1XhjJ5CECw9F+s8iU=
Subject key identifier: 24:AB:E7:13:CB:D7:CD:07:5A:6A:F8:5C:66:DC:AB:5C:00:06:AF:07
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 318E60102C40CFDF6C0DD9E31CBB5C07AAF9EAFD
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200840.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 200840
IP address blocks: 2a06:a005:1dc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8e:60:10:2c:40:cf:df:6c:0d:d9:e3:1c:bb:5c:07:aa:f9:ea:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=24ABE713CBD7CD075A6AF85C66DCAB5C0006AF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:bc:5d:27:56:80:71:a2:ac:2d:51:1a:c3:
a1:77:2b:ac:fa:f8:32:27:9f:ff:1e:5e:01:e3:cd:
0d:ad:6d:59:58:a4:82:fe:20:19:ee:73:d4:74:70:
de:ff:72:9b:5b:92:2d:a7:e3:ef:d8:72:af:2e:f0:
2d:b2:0a:53:4d:85:db:f3:87:66:f0:44:cf:0e:91:
02:27:6f:68:b5:21:c5:54:e5:ee:c0:84:c7:50:a7:
83:b1:9e:54:b6:93:da:2c:97:c0:e2:dc:b7:1f:ac:
a3:3a:f7:b1:2f:17:e3:dc:e1:86:20:d8:86:08:31:
09:bb:87:e2:95:05:96:77:66:99:96:89:b1:00:1b:
9d:82:6d:47:23:e7:0d:77:76:32:fb:18:09:ed:83:
e4:0e:a1:bf:6a:42:79:57:b4:4b:7b:79:f7:fe:7b:
ed:61:c9:6e:46:f5:c4:1a:9c:7c:9b:e7:49:39:5e:
b7:2d:6c:03:e8:ba:58:45:1f:fa:98:48:0f:a5:cc:
f3:1c:17:77:2e:6c:07:84:52:25:2b:37:b5:10:fd:
e6:de:a3:33:94:e0:e5:ab:46:eb:ba:aa:39:ac:ba:
58:9d:a2:1b:f9:b4:f0:25:f4:c9:43:12:17:7c:25:
54:43:09:7c:40:6d:53:a7:5f:fa:61:60:1e:bc:38:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:E7:13:CB:D7:CD:07:5A:6A:F8:5C:66:DC:AB:5C:00:06:AF:07
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1dc0::/44
Signature Algorithm: sha256WithRSAEncryption
06:1d:48:29:e8:b5:e6:43:c6:1f:8e:2e:84:0d:b5:e1:03:64:
55:4a:aa:3f:36:7b:a5:2e:8e:4d:eb:91:78:45:92:62:c4:8e:
18:e0:e3:2f:96:b8:51:ad:42:1b:45:71:08:25:fc:71:2f:18:
70:07:5c:f5:70:39:5b:1b:0a:c5:38:2f:d2:06:51:e6:87:e6:
6b:02:c6:79:55:97:4e:6c:85:63:30:49:a1:88:90:5f:e8:cd:
e1:7b:a2:e5:e9:f7:a1:69:ec:08:e4:5e:f0:82:8f:c6:58:9a:
4b:65:e9:3b:6d:b1:bf:e5:4c:de:a6:3e:cb:2c:71:38:ab:96:
d7:2e:45:85:66:ea:bf:f2:9d:06:fa:0e:fe:50:89:89:b8:33:
12:65:71:c2:3d:4f:97:0f:41:d0:f6:82:67:b6:16:a1:bb:51:
a3:8d:d7:c5:d3:ee:ff:f5:e3:51:ba:b0:a3:1f:2f:d9:e8:be:
50:90:58:1e:08:80:de:f5:f9:6c:ec:c1:45:fd:5d:49:87:90:
a3:a6:72:5e:36:9f:42:d4:4f:4e:3d:84:f9:ef:79:56:b2:86:
48:84:3c:c0:88:90:e0:be:b5:c0:43:c8:19:7b:8a:74:3b:b1:
c2:92:bd:c4:9b:bc:74:23:45:2f:36:58:c8:26:ef:1d:c2:3b:
4d:f9:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:04 2025 by rpki-client