Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200954.roa
File: AS200954.roa (raw, json)
Hash identifier: KuZCP03RB2Nu/MRzMI8U9Hd+ppU/GPg0OMI9CupLd08=
Subject key identifier: 82:7B:ED:5C:F1:06:9A:BF:AA:4E:C9:61:E1:30:E1:00:4A:DC:0C:C6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 74854F0A441D46BDB63B8403228F586942F4B248
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200954.roa
Signing time: Wed 21 Dec 2022 16:56:48 +0000
ROA not before: Wed 21 Dec 2022 16:51:48 +0000
ROA not after: Wed 20 Dec 2023 16:56:48 +0000
asID: 200954
IP address blocks: 2a06:a005:2100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:85:4f:0a:44:1d:46:bd:b6:3b:84:03:22:8f:58:69:42:f4:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:48 2022 GMT
Not After : Dec 20 16:56:48 2023 GMT
Subject: CN=827BED5CF1069ABFAA4EC961E130E1004ADC0CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:02:19:36:53:5a:ac:d4:99:9c:3f:a1:b6:
46:6b:4a:ae:60:6f:0a:1f:93:c6:f3:95:a1:ef:66:
62:93:41:8a:96:f2:47:92:57:8a:ab:30:ac:4e:84:
84:7a:21:32:0b:ea:77:7c:89:2c:76:7a:94:ff:3d:
43:45:fe:06:9c:fc:59:9d:18:f1:98:ee:22:05:26:
f9:5b:29:19:27:68:16:56:60:0b:80:7e:b7:99:d4:
c8:ac:3b:5c:e2:b6:fc:91:9f:24:14:3a:40:b4:1b:
bd:aa:6e:23:0f:40:b4:92:3e:38:77:36:98:b0:5b:
4c:10:a0:9a:2c:e8:5f:04:77:63:28:0a:61:66:1c:
89:0a:91:ab:a0:1a:3f:e8:62:a1:f5:ee:db:60:b5:
f2:99:e0:f1:4a:18:85:44:a3:5b:de:f4:af:c5:58:
c6:38:b1:72:9f:51:2f:56:ff:2b:06:de:38:f0:e6:
cb:c1:3e:24:32:2f:a0:d2:17:a5:c2:d2:a0:11:43:
c7:c8:8a:05:da:b3:6c:20:a8:01:eb:5d:60:3f:93:
0e:cb:6b:fe:5f:aa:bb:81:3b:20:3b:f9:36:9c:af:
13:25:a7:d0:bb:f3:e8:ab:39:50:20:36:55:75:42:
83:0e:09:13:49:07:b8:60:04:ee:83:f9:1c:fa:fa:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7B:ED:5C:F1:06:9A:BF:AA:4E:C9:61:E1:30:E1:00:4A:DC:0C:C6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2100::/44
Signature Algorithm: sha256WithRSAEncryption
db:07:e3:6f:9f:07:38:9f:ca:45:6e:7c:aa:94:4c:e7:2b:b0:
8f:ba:f2:29:29:f3:4e:02:e1:41:b2:d7:de:f1:34:ed:7f:92:
70:8a:0c:25:b3:a3:3f:03:5d:bf:f3:1a:d6:94:66:b5:68:29:
5c:8e:05:59:a1:98:72:0d:30:a5:6e:90:ad:84:1f:e2:05:09:
9f:1e:da:ee:51:7e:7c:14:9b:30:2a:75:c9:60:2f:49:35:ed:
53:70:9d:32:d3:d9:87:f2:bb:b8:c8:59:39:2c:02:3f:42:1b:
cd:c5:7d:c6:c5:fb:82:22:cb:e5:6c:91:e2:c0:cd:c7:1f:87:
28:a7:8f:88:d8:a4:2b:bf:74:3a:ef:cc:0b:56:9a:4e:4b:09:
0c:f3:04:f7:e7:58:d2:96:a6:fd:e9:91:ac:bd:c1:e0:00:87:
ca:83:79:eb:c5:c7:d8:57:b7:b1:41:5e:ed:9d:19:52:85:24:
ad:5b:39:dd:bd:9e:79:7e:89:c3:f1:09:40:89:a9:f7:e1:13:
ac:8c:94:fd:48:58:bb:e4:bc:09:6d:ea:7a:be:b8:f6:7d:ea:
09:aa:c5:2d:2e:22:89:13:7a:bb:4e:6f:5f:67:2f:5b:90:05:
cb:64:4e:4c:63:22:e3:4e:47:6b:33:85:bd:0f:30:c5:08:69:
de:ae:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:40 2025 by rpki-client