Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200872.roa
File: AS200872.roa (raw, json)
Hash identifier: tzXsdp3SXgZ9PNuP4SUHJ4fEar//hnl+Rk8sdXzCvNc=
Subject key identifier: C0:DB:91:B3:3D:1B:61:84:EA:55:4B:05:93:F7:DE:F8:57:A4:5A:77
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3DD754F17D58167610CDB430FDE24EC74B7C910F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200872.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 200872
IP address blocks: 2a06:a005:24f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d7:54:f1:7d:58:16:76:10:cd:b4:30:fd:e2:4e:c7:4b:7c:91:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=C0DB91B33D1B6184EA554B0593F7DEF857A45A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:c5:c5:ce:63:9b:f0:8e:92:fd:a6:31:b6:
99:37:96:ed:67:4b:f7:05:b3:11:af:96:d3:01:1c:
9e:95:26:f8:0d:97:1d:de:b3:1e:46:28:c7:c4:62:
42:1b:83:c4:5e:7e:9b:4d:37:5a:2d:eb:53:03:57:
f3:d2:4a:b6:1d:e7:73:14:82:a9:49:96:a0:e7:4e:
a2:47:5d:7a:80:0e:e1:8a:75:89:01:ee:b0:51:bd:
d7:29:0e:c2:0c:49:ef:c3:e3:bd:eb:e6:5a:33:36:
eb:f7:90:e9:a8:fd:eb:ea:a0:0e:6c:41:76:43:33:
f7:87:db:f5:a8:b8:aa:a6:33:5e:9b:2d:f3:b2:f3:
0d:71:06:5d:3c:98:96:6f:ef:8e:47:eb:5a:a3:c6:
bb:20:24:a9:e9:a6:56:97:96:48:53:2a:d9:b1:3e:
0c:dc:43:31:ba:70:0a:8b:ae:f1:47:54:5c:eb:da:
8e:50:e7:fe:7b:4a:d5:8f:e8:b3:4f:30:6a:c6:cb:
8c:4b:ac:e6:6a:81:fc:8c:ff:5b:46:bb:af:77:0d:
11:dd:b8:3e:9f:f5:34:41:48:ea:f2:34:b9:f2:4e:
b4:5f:5d:c0:ad:48:90:38:7c:09:e8:22:9a:df:0c:
e7:2e:05:a8:07:c9:12:38:15:8e:4f:f4:6b:d5:ca:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:91:B3:3D:1B:61:84:EA:55:4B:05:93:F7:DE:F8:57:A4:5A:77
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24f0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:23:ef:65:51:72:41:77:02:22:a6:34:9d:68:91:0f:96:ac:
2c:b8:39:99:95:73:ab:31:45:26:c8:d7:b0:1e:ae:fc:57:1e:
16:da:6e:3f:6c:95:89:5c:21:14:3f:45:82:b9:45:af:45:34:
99:b1:e3:7e:17:8a:03:8e:9c:ed:cf:b8:6e:3d:85:69:69:dd:
6e:97:f7:77:a4:d9:71:43:83:72:48:80:84:bf:71:82:f9:d0:
fc:32:b4:68:63:54:04:c2:f0:7b:be:2b:6b:26:19:e4:12:b4:
7c:e4:73:ac:b4:b8:3b:e6:9b:a4:50:e8:9e:16:da:1a:9b:61:
e9:b2:56:b6:d1:41:33:d3:4d:d8:00:cb:06:a2:1c:4c:ec:14:
b9:f5:3c:9c:89:71:c5:63:a1:a8:e9:ea:09:2a:bf:4b:58:3a:
32:c1:14:81:10:19:0a:b2:e0:0a:cd:61:86:b0:77:e6:fe:2c:
9f:e1:99:98:36:03:14:c9:5f:2b:db:c6:af:5f:c7:4c:7b:27:
1d:0e:9a:a0:09:65:ce:87:52:97:81:07:79:f7:22:cc:d2:30:
01:92:cd:33:a2:81:d6:e2:d7:06:43:2c:ac:14:e7:72:6d:8e:
97:fd:c5:7a:62:eb:93:a1:dd:fb:fa:cf:61:1d:fc:8d:a9:3d:
61:de:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:44 2025 by rpki-client