Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200895.roa
File: AS200895.roa (raw, json)
Hash identifier: jZukXbFQuPxdQ1NJYbCSuchCpIc/cv7z/WlhpeUAgjU=
Subject key identifier: 25:D7:A4:28:69:99:90:15:89:2A:58:38:B0:08:89:BD:B3:A6:C7:82
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 51FBB1BA75C68B1CA7D4AE48B061BFE10A00BAFC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200895.roa
Signing time: Fri 30 Dec 2022 06:05:46 +0000
ROA not before: Fri 30 Dec 2022 06:00:46 +0000
ROA not after: Fri 29 Dec 2023 06:05:46 +0000
asID: 200895
IP address blocks: 2a06:a005:1890::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fb:b1:ba:75:c6:8b:1c:a7:d4:ae:48:b0:61:bf:e1:0a:00:ba:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 30 06:00:46 2022 GMT
Not After : Dec 29 06:05:46 2023 GMT
Subject: CN=25D7A42869999015892A5838B00889BDB3A6C782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:86:0d:fb:31:93:2f:da:91:72:18:7c:b9:
3b:33:98:8f:5e:92:18:4e:b6:cb:0c:bd:83:b3:4a:
40:8e:5d:da:88:d7:46:e3:7e:3a:61:33:14:01:5b:
48:28:89:8c:57:f3:66:2b:1c:69:32:3c:6d:3e:78:
46:3c:e1:3c:d1:f4:76:c0:73:f3:5f:f0:ae:ec:43:
f1:38:1b:15:57:b8:32:0d:d0:4c:65:64:cc:bf:cb:
55:06:fc:f0:af:cb:01:a0:fb:be:96:83:f9:ac:a0:
26:e3:59:20:22:2f:25:34:87:9b:3a:a0:6b:34:b0:
fa:04:20:34:38:ef:bb:54:a8:f5:c6:14:d2:a5:f2:
96:3a:74:cc:6e:ad:9e:52:e9:ed:98:a5:80:d4:75:
af:2e:d0:62:c0:bb:fc:98:43:2f:2c:84:8d:85:e5:
6f:d0:59:58:d6:21:29:a9:9d:1f:68:0a:ac:77:be:
87:34:52:95:f8:a6:45:43:c8:1d:bd:ff:e5:d2:b7:
2c:e1:49:1e:f1:ed:a9:e4:49:82:4a:fa:f9:c1:01:
93:6f:94:65:79:5d:8e:a9:48:d6:ff:b9:ae:28:bd:
15:cf:dd:da:7a:b5:3c:b5:a0:50:6f:a1:a9:98:45:
c4:4c:f9:64:d7:2a:1f:cb:50:07:55:d1:03:ef:f3:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:A4:28:69:99:90:15:89:2A:58:38:B0:08:89:BD:B3:A6:C7:82
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1890::/44
Signature Algorithm: sha256WithRSAEncryption
3a:d5:bd:a3:00:92:08:c8:56:12:82:cd:65:f7:1c:50:1f:a2:
39:49:31:75:b7:fd:0e:4b:52:ed:14:5f:cd:06:3a:c9:fd:8b:
24:21:3d:0b:28:36:6d:6e:19:93:e3:f0:c5:da:9d:50:25:7c:
3d:3d:7b:10:ec:ed:66:0f:ef:be:94:4a:22:d1:b6:65:3f:0b:
29:dc:4c:53:da:f8:dd:df:c8:67:4d:ff:7f:c3:f9:25:dd:d3:
76:7c:04:3e:ee:5f:f0:ed:97:d5:df:f0:8f:fe:8a:5d:78:63:
de:42:cb:3b:8d:ed:47:fb:37:95:09:99:28:0c:f0:bd:fa:77:
c9:3c:83:cc:21:fd:56:b4:c1:e9:57:17:4f:75:78:71:c3:70:
e3:43:19:4b:4e:3b:66:b9:22:12:c1:13:29:cd:d9:4e:63:12:
a0:d1:fe:e7:4e:ed:2f:8d:e4:6d:4e:92:f0:5a:d0:2e:3b:1c:
23:a4:45:45:2a:71:42:28:d3:e3:8d:3f:ce:51:c5:71:b3:ef:
09:f9:32:a5:b5:9f:0d:1d:f6:e8:04:25:29:ff:f3:e3:81:76:
84:65:5d:ef:12:14:05:a8:ec:05:48:12:b1:f2:1c:67:68:b0:
9b:18:41:2b:03:c6:74:30:de:d3:b4:96:23:a9:06:23:d0:e6:
42:22:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:44 2025 by rpki-client