Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200853.roa
File: AS200853.roa (raw, json)
Hash identifier: hpmnAvFDD0nU6PsBw/8ELA4MrCdSIhDVjAGbVq2SZjc=
Subject key identifier: 94:1D:BD:F7:69:06:0E:F6:06:48:A6:E4:AD:35:E1:9B:74:51:B3:0B
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 7BC2820DF3AF1AC34B287376D9E526E3DB575051
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200853.roa
Signing time: Fri 09 Dec 2022 07:58:41 +0000
ROA not before: Fri 09 Dec 2022 07:53:41 +0000
ROA not after: Fri 08 Dec 2023 07:58:41 +0000
asID: 200853
IP address blocks: 2a0a:6040:e02::/48 maxlen: 48
2a0a:6040:c601::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c2:82:0d:f3:af:1a:c3:4b:28:73:76:d9:e5:26:e3:db:57:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 07:53:41 2022 GMT
Not After : Dec 8 07:58:41 2023 GMT
Subject: CN=941DBDF769060EF60648A6E4AD35E19B7451B30B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:dd:70:d6:53:a9:0c:28:30:31:8a:03:16:
92:ce:1c:f4:7d:74:e5:5e:24:51:7c:de:e8:50:ba:
1b:d5:ff:15:fd:fc:0f:f2:aa:92:27:a0:52:42:3f:
a2:ef:6f:a6:64:23:4d:16:70:76:94:13:29:1d:7d:
ab:5b:35:69:b1:5b:a2:5e:a0:a6:0d:19:15:f9:38:
7f:9f:3a:0a:ae:68:8d:ad:3f:51:33:c5:b1:08:6e:
39:69:d1:95:1b:e7:fd:c0:db:a0:d5:06:3f:24:cf:
dc:87:8b:a4:73:83:79:05:a3:2c:85:93:08:93:c4:
92:b1:98:45:11:36:f5:8a:7f:23:67:22:75:60:9a:
71:96:3a:22:2a:ab:cd:27:92:03:e2:39:4e:bf:9b:
d8:3b:55:a5:46:ad:cf:13:91:5f:f4:88:6d:71:c1:
59:90:1e:cb:e1:78:bd:07:02:64:96:65:a3:57:a4:
2e:69:62:59:c8:5f:5a:9a:1e:45:6b:6d:71:f2:06:
ed:47:b0:f7:6c:17:28:35:96:d8:09:3a:de:22:ee:
d4:f8:45:bd:7f:82:91:0f:1a:e8:2e:4e:50:c3:cc:
76:73:b9:87:83:a1:ac:2a:d9:83:0c:e0:1b:4d:a2:
5b:91:70:f7:23:6f:1b:2a:07:47:23:b9:44:df:b4:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:BD:F7:69:06:0E:F6:06:48:A6:E4:AD:35:E1:9B:74:51:B3:0B
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:e02::/48
2a0a:6040:c601::/48
Signature Algorithm: sha256WithRSAEncryption
0c:4c:e7:af:90:d3:23:10:7b:03:12:a6:58:eb:bc:23:3d:2b:
5a:f6:a7:8a:51:e0:e1:90:52:89:ac:c9:56:3d:6a:99:fd:79:
f0:8c:6d:04:e2:f3:ee:93:25:fe:c1:a9:4f:10:ce:ca:56:4c:
b9:48:bd:8d:bb:30:9f:aa:df:a0:32:fb:b9:41:5b:fa:83:36:
e9:b1:eb:5b:1d:2b:b1:54:21:50:b1:d5:24:7c:7c:d8:d2:42:
14:39:b1:fc:5b:0b:81:98:b4:fd:aa:ea:c9:06:e6:be:ac:c1:
04:a5:53:66:04:50:44:80:e0:71:3f:05:18:7b:76:66:0e:c3:
1c:d9:6f:86:d7:d1:84:8f:0a:c2:e4:70:1b:07:da:14:85:40:
5a:bb:8d:f2:42:55:ba:f8:f8:df:26:f6:85:11:50:cf:29:58:
78:54:bb:ee:58:52:3b:b4:49:b9:f3:45:64:e9:dc:60:a7:84:
6b:65:a7:e7:9c:e2:dc:18:32:06:93:28:3a:b8:60:98:34:18:
bf:68:01:c4:1c:cc:2a:86:ff:94:71:2e:c3:df:fa:d3:23:1b:
d8:83:6c:73:93:af:ad:88:ec:17:18:94:54:40:13:36:13:7f:
7e:14:6a:11:9b:de:f1:24:8e:b1:33:58:16:2e:09:ea:03:21:
46:f9:d7:63
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUe8KCDfOvGsNLKHN22eUm49tXUFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNzUzNDFaFw0yMzEyMDgwNzU4NDFaMDMxMTAvBgNV
BAMTKDk0MURCREY3NjkwNjBFRjYwNjQ4QTZFNEFEMzVFMTlCNzQ1MUIzMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkd1w1lOpDCgwMYoDFpLOHPR9
dOVeJFF83uhQuhvV/xX9/A/yqpInoFJCP6Lvb6ZkI00WcHaUEykdfatbNWmxW6Je
oKYNGRX5OH+fOgquaI2tP1EzxbEIbjlp0ZUb5/3A26DVBj8kz9yHi6Rzg3kFoyyF
kwiTxJKxmEURNvWKfyNnInVgmnGWOiIqq80nkgPiOU6/m9g7VaVGrc8TkV/0iG1x
wVmQHsvheL0HAmSWZaNXpC5pYlnIX1qaHkVrbXHyBu1HsPdsFyg1ltgJOt4i7tT4
Rb1/gpEPGuguTlDDzHZzuYeDoawq2YMM4BtNoluRcPcjbxsqB0cjuUTftMGPAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUlB2992kGDvYGSKbkrTXhm3RRswswHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAw
ODUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAAjASAwcAKgpgQA4CAwcAKgpgQMYBMA0GCSqGSIb3DQEBCwUAA4IB
AQAMTOevkNMjEHsDEqZY67wjPSta9qeKUeDhkFKJrMlWPWqZ/XnwjG0E4vPukyX+
walPEM7KVky5SL2NuzCfqt+gMvu5QVv6gzbpsetbHSuxVCFQsdUkfHzY0kIUObH8
WwuBmLT9qurJBua+rMEEpVNmBFBEgOBxPwUYe3ZmDsMc2W+G19GEjwrC5HAbB9oU
hUBau43yQlW6+PjfJvaFEVDPKVh4VLvuWFI7tEm580Vk6dxgp4RrZafnnOLcGDIG
kyg6uGCYNBi/aAHEHMwqhv+UcS7D3/rTIxvYg2xzk6+tiOwXGJRUQBM2E39+FGoR
m97xJI6xM1gWLgnqAyFG+ddj
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:01 2025 by rpki-client