Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200957.roa
File: AS200957.roa (raw, json)
Hash identifier: FF3iGNr/zsgBbQmcZgh6zUpmXJp8QgSm7etHtGB/J4E=
Subject key identifier: 45:35:CE:FC:CE:11:94:F8:11:98:F2:31:13:16:C0:6C:F2:A4:59:9B
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 37B5C40CDEF91F29FE0768F943D86A16A8EA020D
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200957.roa
Signing time: Fri 09 Dec 2022 07:58:41 +0000
ROA not before: Fri 09 Dec 2022 07:53:41 +0000
ROA not after: Fri 08 Dec 2023 07:58:41 +0000
asID: 200957
IP address blocks: 2a0a:6040:efef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b5:c4:0c:de:f9:1f:29:fe:07:68:f9:43:d8:6a:16:a8:ea:02:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 07:53:41 2022 GMT
Not After : Dec 8 07:58:41 2023 GMT
Subject: CN=4535CEFCCE1194F81198F2311316C06CF2A4599B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:20:51:06:08:8a:27:2f:96:48:d7:fd:22:
9f:25:4a:39:9f:76:96:4f:a3:6a:23:7c:d8:10:ec:
58:1a:0b:f2:fd:5f:5a:a4:90:6a:df:7e:19:9a:9e:
9e:3a:5c:61:38:ab:d5:e9:c7:26:f0:35:9e:5f:25:
fc:f5:3c:74:fa:f7:f5:57:1a:63:90:2c:19:82:fb:
83:b2:ef:a0:de:e6:e3:d3:25:9a:84:4e:be:7e:13:
71:b6:1f:9e:50:6d:c1:cc:e5:fd:63:c6:62:05:41:
b4:39:3b:1a:5a:95:51:ad:7c:c2:9a:cc:e8:50:31:
41:25:05:40:2a:68:7a:7f:b4:2f:fd:e4:22:36:81:
87:cf:69:e7:83:14:83:ce:91:d0:c6:cc:46:9e:17:
23:da:99:34:4c:6a:7e:31:d8:ee:e0:90:2d:ef:e6:
fc:ff:8f:22:89:00:7b:9f:e5:c9:25:37:a3:e6:ca:
65:e7:81:d4:6a:15:e2:2e:7d:1c:c5:84:10:5a:be:
c3:6f:d6:dc:21:e9:33:2e:95:6b:08:4e:fa:34:46:
c4:e9:7f:44:6d:99:46:eb:00:bf:83:a8:fa:d4:4e:
b7:15:63:5a:c4:ae:4b:ee:ee:71:ed:46:4c:06:fd:
60:5a:b9:b5:f2:d8:77:c2:ae:e8:e8:a5:68:8f:f3:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:CE:FC:CE:11:94:F8:11:98:F2:31:13:16:C0:6C:F2:A4:59:9B
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:efef::/48
Signature Algorithm: sha256WithRSAEncryption
44:84:8e:b9:92:c4:d4:58:9a:00:9c:cc:62:5a:54:87:72:3a:
04:8b:41:33:68:96:85:69:8f:33:e7:89:83:01:f3:fc:df:a9:
9c:c8:52:25:4e:06:ee:4e:76:f6:14:b5:37:e0:89:77:0d:b7:
af:31:48:bd:f3:28:c0:28:50:92:75:f4:57:cd:da:42:45:dd:
32:d3:a2:1b:5b:80:09:6c:3c:62:8a:ae:ae:12:fa:30:b7:7d:
35:34:f4:2b:07:8a:04:d3:95:92:14:84:a9:56:f2:b9:98:bc:
3c:18:6e:80:be:1d:42:b9:fa:dc:5f:84:45:69:b6:f3:dc:69:
6e:59:e4:18:ad:ce:93:10:8c:39:0f:17:a5:fe:e4:31:88:f7:
06:96:e5:45:16:e3:19:3f:2a:9f:8a:ea:9d:69:d7:f3:c5:de:
f6:18:b7:f2:e0:91:e3:42:20:37:7e:f8:25:9a:58:81:bd:02:
0a:a2:ce:fc:c7:d4:03:e1:7c:91:d5:79:b0:92:8d:3d:ef:f8:
4e:0f:1e:21:90:13:9a:b2:5d:cd:04:41:e9:ea:ae:32:d4:20:
14:25:82:6d:0c:62:80:6a:a0:3f:10:d1:42:20:7b:76:f4:a5:
3d:15:0b:7e:c1:20:6d:51:1e:f7:29:1a:55:00:75:1c:4f:4b:
92:e0:8e:31
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUN7XEDN75Hyn+B2j5Q9hqFqjqAg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVjOGM5OTAwYjU2YmJkYjAzNmE0MzQxMDU5ZTE3MDU0
MDFkMGEzNTAeFw0yMjEyMDkwNzUzNDFaFw0yMzEyMDgwNzU4NDFaMDMxMTAvBgNV
BAMTKDQ1MzVDRUZDQ0UxMTk0RjgxMTk4RjIzMTEzMTZDMDZDRjJBNDU5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDiBRBgiKJy+WSNf9Ip8lSjmf
dpZPo2ojfNgQ7FgaC/L9X1qkkGrffhmanp46XGE4q9XpxybwNZ5fJfz1PHT69/VX
GmOQLBmC+4Oy76De5uPTJZqETr5+E3G2H55QbcHM5f1jxmIFQbQ5OxpalVGtfMKa
zOhQMUElBUAqaHp/tC/95CI2gYfPaeeDFIPOkdDGzEaeFyPamTRMan4x2O7gkC3v
5vz/jyKJAHuf5cklN6PmymXngdRqFeIufRzFhBBavsNv1twh6TMulWsITvo0RsTp
f0RtmUbrAL+DqPrUTrcVY1rErkvu7nHtRkwG/WBaubXy2HfCrujopWiP81oXAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQURTXO/M4RlPgRmPIxExbAbPKkWZswHwYDVR0j
BBgwFoAUdcjJkAtWu9sDakNBBZ4XBUAdCjUwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvNzVDOEM5OTAwQjU2QkJEQjAzNkE0MzQxMDU5RTE3MDU0MDFE
MEEzNS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjakprQXRXdTlzRGFrTkJC
WjRYQlVBZENqVS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAw
OTU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgpgQO/vMA0GCSqGSIb3DQEBCwUAA4IBAQBEhI65ksTU
WJoAnMxiWlSHcjoEi0EzaJaFaY8z54mDAfP836mcyFIlTgbuTnb2FLU34Il3Dbev
MUi98yjAKFCSdfRXzdpCRd0y06IbW4AJbDxiiq6uEvowt301NPQrB4oE05WSFISp
VvK5mLw8GG6Avh1CufrcX4RFabbz3GluWeQYrc6TEIw5Dxel/uQxiPcGluVFFuMZ
Pyqfiuqdadfzxd72GLfy4JHjQiA3fvglmliBvQIKos78x9QD4XyR1Xmwko097/hO
Dx4hkBOasl3NBEHp6q4y1CAUJYJtDGKAaqA/ENFCIHt29KU9FQt+wSBtUR73KRpV
AHUcT0uS4I4x
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:10 2025 by rpki-client