Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200897.roa
File: AS200897.roa (raw, json)
Hash identifier: o0yCWkjPnPb3U3bYoFDOi8uzGUmydC3s/Rq7b2vfpoU=
Subject key identifier: 70:40:10:9B:50:B6:21:28:52:A8:CA:A0:03:6E:6D:55:81:F5:96:C1
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 28C869292E7C11A183B6AC7D32846CCB1CFC8F8C
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200897.roa
Signing time: Wed 21 Dec 2022 16:56:51 +0000
ROA not before: Wed 21 Dec 2022 16:51:51 +0000
ROA not after: Wed 20 Dec 2023 16:56:51 +0000
asID: 200897
IP address blocks: 2a06:a005:5b9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c8:69:29:2e:7c:11:a1:83:b6:ac:7d:32:84:6c:cb:1c:fc:8f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:51 2022 GMT
Not After : Dec 20 16:56:51 2023 GMT
Subject: CN=7040109B50B6212852A8CAA0036E6D5581F596C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:62:b0:32:cd:0c:a6:37:35:2d:9c:66:f2:
81:79:bd:ab:90:66:f1:ce:d0:8c:59:c9:8f:3e:2a:
1f:8e:f0:6e:58:69:c5:a4:5f:8e:ea:68:9e:89:50:
48:42:b7:b1:37:34:c5:5b:09:d2:90:e4:8f:0d:2d:
5a:fc:31:53:07:ca:fc:84:37:b9:79:60:14:cf:80:
86:c9:b2:5e:47:a3:04:65:dc:5b:db:0b:75:e2:4d:
62:c3:2a:cf:c0:1b:a7:d8:fb:35:07:d3:4a:46:b1:
99:31:8a:33:0e:f5:59:9d:b3:b4:72:b8:64:8b:4b:
a9:d3:3a:d4:27:60:a4:22:c0:ec:a0:96:7a:b2:bc:
32:79:b3:f7:f3:56:fa:92:8d:aa:08:4e:91:30:1a:
b9:f6:7a:c5:c0:de:a8:57:4c:a1:af:33:2a:21:4b:
63:8a:56:41:e7:fd:d6:98:03:83:23:5b:6a:79:0f:
28:4f:cf:e7:ba:2c:8f:70:dc:98:93:a1:8c:49:a6:
c1:dc:45:5b:08:17:46:53:c1:ea:da:58:63:63:06:
0e:a6:df:63:83:b8:54:e7:a8:90:a7:7c:c7:83:a7:
fd:3c:b1:b8:e1:29:ce:60:78:a4:59:8c:55:5f:d7:
26:f5:75:a9:18:aa:e1:07:1d:4e:1a:d0:05:22:d6:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:10:9B:50:B6:21:28:52:A8:CA:A0:03:6E:6D:55:81:F5:96:C1
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b9::/48
Signature Algorithm: sha256WithRSAEncryption
bb:29:05:7a:e4:ce:32:75:3a:81:f5:c7:e5:7f:e5:5d:2d:40:
7e:3b:f5:fd:f1:ab:be:c0:b6:3d:cb:67:1a:65:6b:99:3a:5e:
76:c6:c8:d8:46:0b:18:54:c1:67:92:84:17:2b:eb:c3:a8:d0:
6a:5c:4f:b5:18:1c:33:6d:54:27:6a:4c:bd:d7:00:35:1d:65:
31:77:6b:8c:76:bf:60:aa:e5:57:66:69:b5:f6:e6:1b:b9:1b:
53:d3:c0:c8:63:0d:0a:38:27:48:eb:a1:86:ae:47:19:02:f7:
d5:ef:a6:e7:f4:25:92:01:29:f0:fc:83:a4:7a:20:f8:68:2a:
f5:3b:39:e7:bb:fd:2d:fe:26:19:85:98:e4:a8:58:29:bc:5d:
40:20:0c:34:a9:58:dd:11:7d:59:38:64:19:08:41:89:75:f5:
cc:08:88:48:51:85:a9:95:27:38:ee:15:91:f1:2c:f6:19:b0:
c4:a6:3c:6d:8d:88:c6:4f:8a:8f:de:94:d3:b8:ee:49:b4:3c:
30:a2:2e:18:76:ce:bc:97:92:02:38:ab:4c:6c:ac:cf:8a:53:
7a:db:43:63:a4:e3:6b:28:38:e0:f1:e1:bf:a6:dc:95:cc:05:
8d:64:45:0c:cf:5f:eb:dc:81:a0:69:ac:4f:02:40:c8:0a:ed:
a4:2f:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:29 2025 by rpki-client