Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200952.roa
File: AS200952.roa (raw, json)
Hash identifier: 4Ytq5D4+WrSvNmwDE0wInkptQOtm5ZtEvFp5y832LVg=
Subject key identifier: 79:6F:71:25:ED:34:03:78:3D:FB:9E:4E:77:69:6E:17:53:7C:BC:A9
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4D3B47F13475F5A3B9131C87272C3FBF1C85C3AA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200952.roa
Signing time: Wed 21 Dec 2022 16:56:53 +0000
ROA not before: Wed 21 Dec 2022 16:51:53 +0000
ROA not after: Wed 20 Dec 2023 16:56:53 +0000
asID: 200952
IP address blocks: 2a06:a005:2570::/44 maxlen: 48
2a06:a005:2630::/44 maxlen: 48
2a06:a005:2640::/44 maxlen: 48
2a06:a005:2650::/44 maxlen: 48
2a06:a005:2660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3b:47:f1:34:75:f5:a3:b9:13:1c:87:27:2c:3f:bf:1c:85:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:53 2022 GMT
Not After : Dec 20 16:56:53 2023 GMT
Subject: CN=796F7125ED3403783DFB9E4E77696E17537CBCA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:5c:1d:e5:ab:32:c7:9d:c9:7b:73:69:17:
b1:82:b9:15:38:0a:14:9b:a6:84:bd:7d:e1:75:40:
61:a5:a7:d3:61:fd:95:a6:95:1e:a9:f7:db:43:2b:
0e:78:b8:fd:9e:18:3a:09:dc:28:3d:1c:17:f9:8d:
5b:be:b9:3d:5b:bd:68:ca:d3:12:e4:6e:e7:b5:70:
41:65:c3:31:88:7d:45:54:b6:39:67:e1:c3:17:d2:
52:75:99:36:d4:46:3a:dd:3c:9a:b4:2b:e2:f8:69:
df:f9:85:7b:f4:7f:f0:5e:3c:dd:7b:be:42:9d:6d:
8e:b8:5e:8e:fd:56:b2:31:37:0a:b9:32:26:90:bc:
43:e6:81:97:ad:84:b0:d4:06:db:12:89:99:ea:a1:
87:ca:64:1f:5f:31:44:fa:bf:3a:e0:c0:42:d5:be:
34:b6:9d:25:a3:b1:a5:02:e9:0f:f8:ca:ab:a2:06:
88:86:e9:0e:a7:36:78:a4:36:3b:56:16:cc:c8:a3:
fa:20:53:c1:85:96:ac:dc:39:b3:64:2c:95:f1:5a:
d7:7d:d1:ba:c6:54:61:8c:99:31:d4:1f:85:b7:46:
06:28:e1:e2:b2:a9:58:82:69:07:05:c8:55:0a:63:
8c:ff:a0:90:a1:e3:66:bb:77:50:93:43:c0:67:08:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6F:71:25:ED:34:03:78:3D:FB:9E:4E:77:69:6E:17:53:7C:BC:A9
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2570::/44
2a06:a005:2630::-2a06:a005:266f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ca:d6:b8:f4:27:7f:58:ee:47:df:48:23:d1:83:9d:e9:bc:91:
79:ec:81:98:7e:ce:46:30:80:4b:a9:11:37:8e:60:84:b0:d2:
e4:c9:51:9c:0b:cf:e1:cc:f3:f1:a8:e9:92:a0:a9:78:d3:66:
58:e4:4a:5b:8c:e1:bf:9a:f7:ae:9c:41:22:41:0e:04:5f:76:
e4:71:e6:f6:0d:3b:2e:69:42:15:fa:6a:c9:da:e9:2f:60:d7:
96:d2:a3:3e:e7:2f:62:b7:ea:95:79:24:eb:64:07:38:61:61:
7d:be:ea:09:9b:c5:91:aa:89:a5:a9:05:0f:54:61:b3:54:42:
5a:07:80:dc:8f:d7:82:c2:8a:b1:03:23:bc:ab:b6:ba:ec:4c:
9b:a2:bd:22:cb:ae:99:aa:15:d3:06:f4:2e:61:43:d6:a9:c4:
99:87:56:60:27:67:ab:8a:b4:f5:8b:76:70:c3:49:61:ee:3b:
05:af:dd:17:9a:80:6d:3d:17:ee:94:55:52:ba:be:88:a9:b8:
15:7f:b6:92:3e:f4:24:2b:3a:1f:d3:11:d1:c0:c8:22:4f:2f:
da:82:f6:31:23:da:b3:f9:9f:ed:71:6a:1d:78:90:e0:03:62:
2d:5b:e2:34:00:b1:92:60:1a:47:c3:3c:2b:9f:cc:5d:6b:ad:
4d:ee:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:26 2025 by rpki-client