Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200890.roa
File: AS200890.roa (raw, json)
Hash identifier: +hgBuTGb8OxuP5ObWZl2qrOYc3FcMQ4aKw8yWnNAK5A=
Subject key identifier: 07:DC:4B:48:D1:63:00:88:96:42:5A:81:15:DC:AF:F6:DA:32:E5:BF
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2A503B9DCF4233B6E58BD9E27E44749CF470F5C5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200890.roa
Signing time: Wed 21 Dec 2022 16:56:52 +0000
ROA not before: Wed 21 Dec 2022 16:51:52 +0000
ROA not after: Wed 20 Dec 2023 16:56:52 +0000
asID: 200890
IP address blocks: 2a06:a005:1b60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:50:3b:9d:cf:42:33:b6:e5:8b:d9:e2:7e:44:74:9c:f4:70:f5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:52 2022 GMT
Not After : Dec 20 16:56:52 2023 GMT
Subject: CN=07DC4B48D163008896425A8115DCAFF6DA32E5BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:e5:fc:6a:60:79:31:3f:f6:27:02:c5:44:
42:92:eb:d6:ce:35:ab:cd:e4:a1:4f:92:43:37:52:
7f:c2:db:6f:1f:80:cd:4b:69:14:d5:f7:21:3a:8d:
ee:73:54:eb:97:78:27:25:91:50:fd:f2:62:89:ef:
3f:85:8f:20:9c:43:21:f0:36:60:92:fb:71:18:6c:
e8:ae:41:59:af:73:ac:1f:16:06:de:5f:db:ef:9e:
c2:3c:ac:4b:bd:05:37:c8:74:e9:62:27:4a:82:3c:
6f:39:e7:0b:76:1a:11:58:55:fa:f3:70:f5:c9:9d:
87:70:50:fe:a9:3e:4f:32:cf:23:2e:b0:ab:dd:b7:
d8:66:fb:a8:e3:32:59:aa:ee:88:50:42:4c:ac:c0:
2a:a0:33:04:a6:3c:e9:23:f0:7d:de:4e:ab:50:4b:
ac:e1:b6:2c:61:ef:c5:11:c4:c7:00:b6:0f:8e:52:
37:32:fc:42:1b:54:c3:92:f2:3d:2a:47:f5:d0:5c:
5b:6b:38:04:ce:b6:57:75:08:b2:2d:0c:b1:dc:95:
ee:5b:ed:df:f4:8c:13:30:30:18:01:f0:2c:0a:d0:
fb:a4:f0:2b:f8:99:30:10:e8:5b:b4:55:c4:da:72:
db:3a:68:d9:03:6c:9f:69:06:89:23:26:18:32:a6:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:4B:48:D1:63:00:88:96:42:5A:81:15:DC:AF:F6:DA:32:E5:BF
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1b60::/44
Signature Algorithm: sha256WithRSAEncryption
18:fb:43:02:06:30:a7:d1:55:39:eb:96:21:a4:7a:53:62:19:
1c:f9:80:e1:53:db:fe:ec:d8:04:92:03:2e:b4:3c:a7:27:7e:
31:e1:2a:98:b6:b0:ec:18:49:54:be:72:e8:c6:25:34:d0:2a:
5f:5f:90:19:bf:4f:23:2e:e4:a1:a1:09:f7:cc:53:66:6f:1c:
f8:3e:a0:1b:5c:53:c6:19:bd:e4:81:11:db:ca:1d:0b:e2:17:
43:10:8f:6a:9a:8f:29:7d:3b:88:8c:07:3f:19:5a:64:71:36:
39:09:5d:ac:64:00:68:37:9f:b2:0b:87:f1:d6:b1:9d:69:29:
2d:9e:79:cc:9e:7b:2a:5b:9e:4a:5e:14:d9:96:d4:03:70:ca:
35:de:40:2d:3e:50:77:d3:e7:91:32:bc:c9:d0:6d:20:f7:13:
bc:83:ad:7b:ad:52:17:8e:46:b5:22:2f:01:7f:25:f7:8b:a1:
5d:78:3a:bd:c4:3f:0a:d5:d0:75:a1:79:60:0e:58:84:fe:5a:
9a:9f:ad:b5:44:b6:66:2e:7e:d9:65:3e:0e:ca:c8:6c:b9:ac:
3e:5a:d2:e6:e3:f5:03:f3:90:cd:42:e8:9f:b6:fe:52:16:9b:
9e:26:a1:02:2f:5f:54:6b:cd:38:e9:b1:05:b3:95:4f:b1:cc:
fe:6c:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:51 2025 by rpki-client