Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200879.roa
File: AS200879.roa (raw, json)
Hash identifier: va4fbiO0RzPc/3cL/hPP+LG5Sr+XGWALwSOyKGsInVk=
Subject key identifier: A8:69:8F:A6:DE:17:84:F6:EE:F6:CB:24:2B:13:16:AD:F6:EB:58:3D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 732F55D3490BC31354E2B0A24D51AE5FBC63BAAC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200879.roa
Signing time: Sun 01 Jan 2023 09:51:30 +0000
ROA not before: Sun 01 Jan 2023 09:46:30 +0000
ROA not after: Sun 31 Dec 2023 09:51:30 +0000
asID: 200879
IP address blocks: 2a06:a005:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:2f:55:d3:49:0b:c3:13:54:e2:b0:a2:4d:51:ae:5f:bc:63:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Jan 1 09:46:30 2023 GMT
Not After : Dec 31 09:51:30 2023 GMT
Subject: CN=A8698FA6DE1784F6EEF6CB242B1316ADF6EB583D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:7c:b4:be:3a:ba:cd:a9:ad:2d:ed:c8:8c:
20:12:ab:57:00:a2:8f:50:85:d8:bb:36:f5:42:ce:
d5:6c:37:ec:4a:37:e6:19:47:a5:ee:51:38:b0:17:
59:09:ac:f2:cb:93:0b:2d:7d:a2:68:f5:e0:e6:78:
e8:d7:05:3d:e8:a3:a2:1a:e5:65:94:2a:ab:27:ee:
5a:3e:45:c2:83:b5:56:91:30:12:31:6e:5f:dd:ef:
31:3a:4a:f6:ef:ef:34:93:98:cc:24:d1:b2:79:e3:
ab:ec:b5:e8:5a:5e:0f:1b:68:d2:23:d0:8e:c2:4b:
e9:7a:69:e9:c6:f0:07:7a:c2:dc:88:cd:dc:79:f2:
3a:4d:18:75:3c:9e:c2:d5:53:a7:0e:55:d9:7b:be:
e2:8a:11:2c:d1:b8:8f:5a:68:f8:2e:98:3c:6b:cc:
cd:f0:cb:98:47:36:b0:a4:e0:fd:46:8b:b9:bb:f2:
f0:21:90:e9:7d:32:ea:1c:f3:73:21:4b:58:1d:d0:
0b:a1:e4:29:ba:a0:b8:c6:80:d3:95:69:6c:d4:7a:
35:0c:d3:3f:5e:85:97:9b:00:90:f9:c1:a0:eb:3c:
86:e8:02:dc:39:91:8d:78:70:55:58:ee:09:d9:c4:
8f:cc:fb:56:07:46:40:b5:de:7b:65:f3:7f:45:2e:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:69:8F:A6:DE:17:84:F6:EE:F6:CB:24:2B:13:16:AD:F6:EB:58:3D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6::/48
Signature Algorithm: sha256WithRSAEncryption
d9:ef:76:33:42:2e:70:e3:40:ca:c2:f8:59:5d:9d:25:9d:b0:
db:aa:d2:3c:85:b4:6e:17:30:9f:5c:74:2f:d2:6f:27:b9:50:
df:71:ea:18:e4:5f:d4:61:9c:55:1d:07:e6:b9:8d:9e:ba:63:
62:40:78:39:22:f6:87:66:18:52:e7:a2:67:04:70:d5:81:2a:
3b:67:5d:0f:c2:3c:8f:4d:c3:18:e4:bc:ed:d4:af:e3:a3:be:
ce:bd:5b:4c:b9:e8:13:1b:75:bb:15:2a:b3:cb:af:8d:cb:9b:
8d:dc:88:aa:f7:7d:ad:8e:2b:c6:f0:b9:22:f8:a1:bb:e2:27:
a1:cf:56:19:c4:6f:41:c2:0c:1f:85:46:0f:b8:b9:9e:6f:64:
83:7a:19:1e:89:03:7a:bf:29:24:7e:8a:db:2a:ca:0e:c7:62:
07:68:1c:ff:e2:97:90:e2:fd:a4:56:58:8a:db:6d:4a:30:35:
90:7c:68:f8:59:e3:90:3a:a8:c7:8a:ad:68:fa:e9:02:f5:56:
79:e7:b3:61:ea:4e:00:0b:bf:91:10:d2:1c:ab:f1:78:ef:90:
c9:00:ac:b5:51:d3:03:fd:60:eb:16:1c:62:05:4a:45:32:be:
85:a2:d8:ba:7b:cf:54:33:64:44:a3:d9:73:02:99:79:e1:0d:
95:89:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:43 2025 by rpki-client