Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200949.roa
File: AS200949.roa (raw, json)
Hash identifier: R0bV+l7Y+NhOixtwNx97ExCwWyDWDEXpTSAM/HHXOJs=
Subject key identifier: ED:BD:B8:AD:F8:EF:9D:F0:F0:F5:6D:21:A4:9A:2E:98:B5:CA:34:6D
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 0FD795DFC442937288B4AB8473D1724A60A8189E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200949.roa
Signing time: Tue 27 Dec 2022 17:50:40 +0000
ROA not before: Tue 27 Dec 2022 17:45:40 +0000
ROA not after: Tue 26 Dec 2023 17:50:40 +0000
asID: 200949
IP address blocks: 2a06:a005:1880::/44 maxlen: 48
2a06:a005:2490::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d7:95:df:c4:42:93:72:88:b4:ab:84:73:d1:72:4a:60:a8:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 27 17:45:40 2022 GMT
Not After : Dec 26 17:50:40 2023 GMT
Subject: CN=EDBDB8ADF8EF9DF0F0F56D21A49A2E98B5CA346D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f2:c6:d9:14:98:cd:65:0b:76:6b:60:eb:a0:
59:cb:d9:ca:ef:30:71:d1:5c:00:54:3b:f8:5a:3d:
ec:b7:03:5e:c9:b7:27:1a:81:7e:ae:f6:c5:fc:c8:
fb:8c:d3:36:cf:51:11:f2:99:6f:19:9a:ee:83:2b:
b5:6e:7e:f9:f6:7c:7e:3c:ea:8c:55:d4:4f:55:a8:
37:d8:e7:f4:21:18:93:d7:ec:5c:cd:5d:5f:d1:10:
9a:eb:d5:96:cd:8b:03:15:cc:a5:a1:0a:4a:8e:2b:
b2:dd:35:67:9a:89:6f:84:9a:00:04:99:9e:15:76:
44:03:b5:ca:46:29:5f:a0:a0:2f:3d:f0:6a:d9:bc:
92:bf:fa:26:d5:fb:38:33:88:75:a7:b4:98:aa:53:
88:5e:5b:0d:b4:07:56:7c:e6:eb:43:b0:09:d9:8b:
6a:6d:c4:3a:7e:12:8f:e9:8e:3a:87:1a:89:0f:22:
f7:80:d9:45:ca:f8:f3:6d:10:8f:95:54:31:ce:b8:
d9:c5:b4:b5:9e:8b:a0:35:b0:e8:cc:f6:5b:c3:9f:
6d:ee:02:ef:cf:6d:01:a1:e1:94:04:7b:37:97:9d:
ad:d6:ad:bd:4f:31:f5:3d:3e:33:4f:de:e5:36:86:
d2:a4:db:8c:80:07:dc:c7:f8:9d:60:20:ba:ce:e3:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:B8:AD:F8:EF:9D:F0:F0:F5:6D:21:A4:9A:2E:98:B5:CA:34:6D
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1880::/44
2a06:a005:2490::/44
Signature Algorithm: sha256WithRSAEncryption
3c:5b:62:a3:ac:0b:3d:e1:4c:85:fa:02:a2:64:9f:14:c7:ee:
3e:b9:25:49:1c:4c:7e:75:b3:ab:ca:ca:1b:10:be:28:43:35:
98:b0:6e:3b:47:7b:a0:c3:1d:b6:48:b1:66:41:b8:3b:c9:03:
83:ca:e0:54:20:1c:29:65:c9:70:eb:78:6e:19:1a:cb:aa:82:
de:a0:9f:68:30:bb:7c:8d:89:38:53:1a:55:46:12:37:de:c2:
5f:b2:0f:2c:38:9d:ba:87:a5:23:6a:6e:68:61:c2:b0:58:39:
5e:c2:78:e8:ac:41:4d:87:98:da:21:5e:a8:fa:69:dc:1c:7e:
5c:ff:91:1b:42:de:15:17:4e:a4:04:74:1b:2e:fb:c1:a8:a3:
94:7e:e0:bd:78:8b:0b:9c:e7:ef:36:95:80:7d:90:ae:30:fa:
c7:f0:37:3f:2f:77:3d:22:4a:e8:ae:02:0a:08:fe:d0:06:fe:
68:d2:96:80:be:df:cf:f5:03:be:19:35:70:2b:4c:99:35:d1:
e6:a7:f6:91:39:a3:91:ff:b5:0e:85:8d:c3:bf:85:21:19:6c:
7e:d4:9b:2e:3d:9c:99:d3:2c:50:8c:e5:73:40:eb:77:89:a1:
50:c2:30:10:13:30:7e:1b:ab:56:c1:ab:60:ae:6d:36:c8:34:
cf:ad:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:23 2025 by rpki-client