Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200882.roa
File: AS200882.roa (raw, json)
Hash identifier: 0XGfJDgioKx+HlW47Rp7AQFHWQ+ociqMMjZJmjkITFA=
Subject key identifier: C2:F6:7A:8B:0D:E0:43:F9:31:9F:21:14:F4:25:F7:E7:A2:1D:D8:F6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: A57A3D9B4DCBA0485E7209CC2168550CA07BA7
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200882.roa
Signing time: Wed 21 Dec 2022 16:56:44 +0000
ROA not before: Wed 21 Dec 2022 16:51:44 +0000
ROA not after: Wed 20 Dec 2023 16:56:44 +0000
asID: 200882
IP address blocks: 2a06:a005:2530::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a5:7a:3d:9b:4d:cb:a0:48:5e:72:09:cc:21:68:55:0c:a0:7b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:44 2022 GMT
Not After : Dec 20 16:56:44 2023 GMT
Subject: CN=C2F67A8B0DE043F9319F2114F425F7E7A21DD8F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:64:0b:4b:22:ec:e7:f5:be:8e:41:c5:1c:
c2:5f:31:7e:e6:33:19:3f:48:58:0b:d3:82:eb:54:
8e:31:36:b1:0b:69:4f:3a:84:54:4f:fc:58:8c:e7:
68:e9:ba:cb:8c:f1:9c:f4:8f:1f:64:a5:3b:a7:9f:
20:4a:17:8c:02:45:a0:48:a2:14:b7:a1:ce:37:c9:
9b:28:15:a8:05:d9:ac:91:97:4b:c8:bd:b7:49:88:
6b:ae:9a:31:4e:f8:9f:a1:d0:4d:ae:c5:71:fd:0b:
a1:5b:65:9c:7d:02:e7:66:17:9f:30:70:25:90:fd:
39:a0:a3:17:54:7a:75:4b:a1:fe:6f:1a:07:c6:04:
59:25:d2:2a:66:ff:6f:3e:c6:af:be:a6:26:40:dd:
18:9f:91:8d:15:31:bb:65:70:b8:91:84:f4:75:25:
da:22:0c:e9:ac:0f:e2:96:ff:af:2e:f2:2d:be:b0:
22:27:11:be:a2:c6:6c:1b:9f:6e:24:78:2d:6a:c3:
ee:7f:d4:c0:17:fb:5c:d9:2c:05:6a:49:6d:3e:56:
67:2e:53:8e:95:26:53:77:bb:78:82:ba:d2:33:65:
37:de:4f:24:d6:9a:2f:50:49:fb:4f:a4:dc:8e:df:
d8:6c:0d:bf:8c:4e:ad:5b:0a:4d:87:28:25:53:d7:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:7A:8B:0D:E0:43:F9:31:9F:21:14:F4:25:F7:E7:A2:1D:D8:F6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2530::/44
Signature Algorithm: sha256WithRSAEncryption
d0:ad:3b:18:3c:8e:d6:c9:b7:1e:52:6b:28:08:17:51:85:28:
75:50:56:a1:2b:77:07:91:9c:d6:8b:53:fe:ac:28:ac:e0:14:
61:af:b6:66:32:d2:40:22:a4:07:e1:d1:4e:79:c9:21:b0:1d:
ca:1f:54:e8:43:2d:c1:95:95:29:0b:1b:bd:73:13:fb:a6:45:
66:07:f6:8d:56:12:62:c2:c4:ee:72:da:3f:3c:36:7c:68:13:
13:63:45:f4:a3:aa:fc:ea:a6:9a:30:43:c4:84:6d:58:1a:1e:
f7:10:94:1b:31:26:88:87:31:8c:74:3c:5b:c5:fc:35:c5:0e:
b8:19:9e:0d:7b:71:98:9d:59:40:9d:a0:04:60:52:39:a3:a4:
ca:78:8b:17:19:f7:fd:0b:52:17:64:04:53:57:11:b1:7a:eb:
7e:c2:ac:d7:74:31:39:c2:2b:3f:ca:4f:74:d0:53:51:5d:9f:
38:c9:09:37:64:a3:1b:81:08:22:93:22:c7:85:44:0a:ae:84:
91:4f:50:4b:49:e9:25:49:17:5d:a9:8a:d6:3e:79:5e:75:0d:
70:9c:6f:83:3c:02:79:a9:93:c5:0d:98:e9:bc:24:5c:f2:d1:
d5:3c:07:f1:6e:c6:85:68:9f:38:20:7d:49:2e:6f:2f:79:e7:
3e:ec:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:49 2025 by rpki-client