Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200936.roa
File: AS200936.roa (raw, json)
Hash identifier: IcbJAGnsPMicOgkLem2SS3hhC2kg3qJt/f0x/92OOY8=
Subject key identifier: 4E:5F:23:E0:22:16:95:FE:AC:11:80:FE:47:CE:E7:71:85:7C:CA:CD
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 2412DE6D6237CC3A65B871D2C6B3C59D212BB8D8
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200936.roa
Signing time: Fri 09 Dec 2022 07:58:40 +0000
ROA not before: Fri 09 Dec 2022 07:53:40 +0000
ROA not after: Fri 08 Dec 2023 07:58:40 +0000
asID: 200936
IP address blocks: 2a0a:6040:d600::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:12:de:6d:62:37:cc:3a:65:b8:71:d2:c6:b3:c5:9d:21:2b:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 07:53:40 2022 GMT
Not After : Dec 8 07:58:40 2023 GMT
Subject: CN=4E5F23E0221695FEAC1180FE47CEE771857CCACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:00:ed:5b:06:2f:5e:1d:1e:9e:a1:71:35:
6e:dc:6d:69:15:a5:be:f7:27:68:fa:2d:1f:25:87:
5f:03:e1:fd:a3:b0:f6:f8:7e:14:0f:70:14:cd:53:
31:15:43:74:0a:0e:82:1e:54:d4:da:8b:c4:0e:d0:
7d:9f:e7:12:cc:d1:d9:87:5d:65:b1:9d:9c:a3:3a:
f1:cc:a6:0c:21:b2:9c:26:ed:7f:8f:01:6a:81:29:
1e:e2:f1:f9:ab:2e:0f:53:e6:c5:3f:82:45:7c:26:
14:3b:3b:4c:fe:0b:f5:f5:5a:98:86:8b:90:43:81:
e3:47:b7:85:00:c2:c8:4b:7d:d6:49:88:3c:68:87:
63:ce:33:58:e8:5c:18:a1:6e:9d:8a:e4:13:8d:20:
4f:8e:31:8b:45:a7:ff:bc:9c:27:c5:2e:b5:a7:50:
8f:27:de:ca:ea:2f:1a:9c:2f:6e:08:5d:a3:45:03:
64:bc:87:80:1e:45:13:a9:94:c2:43:3e:71:4a:b4:
38:12:8f:34:40:e2:f2:03:f4:d5:33:d4:86:2a:9a:
68:61:0d:83:0d:fa:b8:fd:b9:11:cb:47:b4:48:95:
ce:80:27:45:45:a0:c3:eb:d9:67:c1:c3:f0:79:97:
00:3a:46:33:73:5b:52:98:6c:f3:32:d7:e7:cb:41:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5F:23:E0:22:16:95:FE:AC:11:80:FE:47:CE:E7:71:85:7C:CA:CD
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:d600::/44
Signature Algorithm: sha256WithRSAEncryption
b1:a1:89:e5:4a:cd:c2:3a:18:05:32:a8:d5:43:10:e7:20:f9:
42:48:f9:a6:3f:7c:74:22:da:33:ba:5c:18:5b:f5:8d:cc:40:
06:50:9b:10:e1:7f:4d:34:7a:de:f9:36:2e:f1:9d:5c:47:c5:
24:1b:6d:58:13:ab:6a:12:c8:b2:7e:f9:16:59:80:9c:f1:59:
3e:85:fb:a9:d8:12:ce:00:7c:a1:b1:22:06:47:ba:9a:5e:ba:
46:bf:16:9c:5b:d5:93:16:d0:31:18:ca:12:d4:d4:86:fb:29:
87:3c:fb:0e:37:7e:97:b3:8e:0f:61:81:cc:2a:07:98:0a:6c:
27:8c:d6:00:a6:b9:e9:3e:9e:9a:8e:92:e7:03:d3:bd:08:15:
69:79:58:3d:78:c2:d2:5b:0f:9e:ee:56:3e:03:20:d1:89:c9:
5a:00:45:82:20:83:d7:e0:f3:43:e7:19:b0:f1:30:19:67:51:
e1:0b:7f:33:08:53:f2:6f:fe:50:89:f0:cd:47:fc:bb:8a:65:
38:cd:71:fa:3f:ef:81:82:85:41:ab:32:07:65:8d:fc:5d:e8:
d6:39:27:e2:39:4c:cb:9c:10:ca:73:fd:7c:18:77:9a:62:96:
af:56:6f:b7:c2:33:4b:d7:63:3c:e5:5a:9e:61:8d:63:20:b0:
4a:d9:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:27 2025 by rpki-client