Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200885.roa
File: AS200885.roa (raw, json)
Hash identifier: cLy+77JvM4ETPQ5pxPxFawNpTD0YEXLfxY8otfVC/ug=
Subject key identifier: A3:BC:31:3C:10:0A:1A:A6:CC:F7:6D:C3:34:13:6F:AC:D0:60:0C:F2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 21E87569DE970350FB6BB0F6F7F2E3BAFCB510C3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200885.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 200885
IP address blocks: 2a06:a005:5::/48 maxlen: 48
2a06:a005:26d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e8:75:69:de:97:03:50:fb:6b:b0:f6:f7:f2:e3:ba:fc:b5:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=A3BC313C100A1AA6CCF76DC334136FACD0600CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:4b:57:e1:b1:b6:63:c8:d0:07:cc:25:44:
37:4c:2c:5a:bb:8e:08:c3:2b:8c:63:dd:4e:45:19:
8d:98:13:ea:3c:21:8d:f8:0b:42:68:6c:11:8c:07:
e7:32:28:58:aa:25:f1:de:70:36:4f:90:c2:10:cb:
52:77:14:36:f4:80:be:f1:62:2b:bb:6a:43:f9:ad:
60:a6:12:66:8a:0e:90:99:48:fd:64:72:f6:9e:a0:
cf:ad:cd:56:02:74:eb:b9:c3:fd:86:cf:b7:94:e9:
01:43:bf:85:db:73:b3:5f:13:51:94:8a:fc:a5:e8:
da:f7:63:b4:48:8f:fe:cd:3e:1f:5e:fa:3e:9a:59:
47:45:3c:ea:cd:ec:7c:be:18:bf:f1:33:ed:8f:20:
86:41:23:15:de:5d:36:99:cf:03:2c:c2:af:b7:6b:
56:e3:d5:62:0f:a1:ab:ee:5d:72:76:f6:23:36:9a:
ef:85:ff:1b:09:cd:91:60:d7:51:08:6e:a6:b0:f2:
d9:8f:0a:aa:e5:00:41:05:2d:41:2d:5a:a3:da:14:
df:c1:7b:fe:03:83:b3:c9:15:fa:3f:41:44:65:5d:
a9:1b:f6:2e:81:f3:71:8c:2a:eb:e5:97:e6:ef:9e:
60:6f:d1:29:36:e4:fc:4f:26:0f:64:f1:af:9b:f3:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:31:3C:10:0A:1A:A6:CC:F7:6D:C3:34:13:6F:AC:D0:60:0C:F2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5::/48
2a06:a005:26d0::/44
Signature Algorithm: sha256WithRSAEncryption
5f:3d:9c:65:95:13:da:fc:e6:68:29:30:b2:17:d4:5e:df:79:
50:f3:e8:cd:15:a1:71:79:c3:39:a6:e2:43:29:27:45:54:99:
d9:ea:6a:c0:0c:2c:7a:6d:61:fb:2d:15:60:51:51:21:0c:dc:
34:94:c8:e4:76:05:f7:2a:04:52:67:46:a9:89:44:d8:a2:1a:
f7:d1:86:66:7c:6b:fd:56:cb:e7:cd:d3:c6:97:ea:7d:8e:0f:
cd:d5:1b:50:67:44:44:6c:ca:f7:49:74:54:83:e1:72:06:ad:
74:d2:33:82:39:63:d4:41:5d:3c:06:61:ff:41:84:28:14:b5:
2b:62:7d:9e:85:1a:87:b5:29:d0:9f:47:f6:65:44:55:1c:5f:
92:4a:5a:18:b8:9b:a6:e5:f3:fd:e6:f1:09:f9:86:4a:65:94:
d1:71:11:92:34:5c:fe:b7:b5:9f:13:a2:78:d3:f6:05:43:8d:
ae:6c:dc:19:e8:38:90:0a:a9:ef:c5:06:5c:0e:90:1f:7e:e7:
da:ea:37:db:b0:6b:31:3c:cb:a7:07:f7:53:ae:7e:96:28:da:
46:08:d4:54:22:da:1b:65:3c:27:8e:2d:c7:20:ff:dc:b1:60:
e3:9a:40:f5:70:d7:68:5c:54:e5:c4:3b:fd:e3:de:cd:99:9d:
3e:0d:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:06 2025 by rpki-client