Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200965.roa
File: AS200965.roa (raw, json)
Hash identifier: syEePBG6XuXl+79hbxuSgv8tf5xNOorjHdIqy518+XQ=
Subject key identifier: 28:B5:FE:DB:04:21:CA:C0:5B:34:E2:F9:81:24:83:7C:F7:80:81:73
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 153ECBA428C5F194AADEFA5F473A611C2C775BEB
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200965.roa
Signing time: Wed 21 Dec 2022 16:56:41 +0000
ROA not before: Wed 21 Dec 2022 16:51:41 +0000
ROA not after: Wed 20 Dec 2023 16:56:41 +0000
asID: 200965
IP address blocks: 2a06:a005:24a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3e:cb:a4:28:c5:f1:94:aa:de:fa:5f:47:3a:61:1c:2c:77:5b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:41 2022 GMT
Not After : Dec 20 16:56:41 2023 GMT
Subject: CN=28B5FEDB0421CAC05B34E2F98124837CF7808173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:90:4c:10:23:14:82:d8:6d:b6:fe:c7:4b:
99:77:66:5e:cd:a5:2c:2b:da:bb:7e:02:4d:95:af:
86:90:0d:12:45:92:50:cd:e7:1b:13:fa:74:1c:85:
de:00:98:0c:1b:2d:2d:64:cc:2b:fe:17:ef:ba:73:
01:99:48:ee:68:9f:b3:c9:54:11:25:81:d3:91:6b:
a5:30:a8:99:69:c9:1a:7f:c3:74:c3:f5:d9:42:f0:
a7:e1:c0:3d:9f:fe:10:11:f1:ae:06:88:a1:8c:ab:
e1:6c:fa:ae:45:ff:49:c5:c9:55:c3:0b:f1:bd:4c:
4c:5f:08:04:da:59:b6:68:fe:cc:d9:d4:d2:12:19:
6f:10:12:8e:7d:ec:23:6d:a7:20:a6:62:e8:2f:f2:
45:03:c1:28:3d:3e:ef:81:40:b6:3b:b0:66:6d:13:
2b:1a:8e:98:37:30:cd:82:11:70:70:a9:f1:1b:11:
6e:60:46:41:f8:d6:64:0c:de:38:2e:6c:72:47:12:
51:a3:f2:4c:bb:62:5b:bb:ab:58:dd:db:56:c7:99:
d3:a3:2e:7e:0c:2f:5f:28:9e:a6:7a:c2:34:5f:06:
f0:d1:af:d0:35:2a:f6:b0:46:af:e1:84:13:7e:b4:
21:c7:0b:b9:ff:88:4e:88:f2:2f:61:f6:c5:54:8c:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:FE:DB:04:21:CA:C0:5B:34:E2:F9:81:24:83:7C:F7:80:81:73
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24a0::/44
Signature Algorithm: sha256WithRSAEncryption
11:b6:18:5f:ff:13:88:0d:52:61:df:d8:f5:e2:94:8a:90:72:
c3:cf:f3:38:07:ea:6f:dd:91:3a:01:03:0e:25:09:cf:bd:25:
54:9d:f4:c3:39:39:d1:44:f4:9a:f4:0e:d8:88:23:e9:16:90:
61:06:47:c8:cb:99:a9:8e:ae:0d:ef:ac:ec:a4:34:85:7a:28:
14:78:20:54:c4:0b:94:72:e6:4c:be:0d:4d:c3:c8:a6:90:fb:
6c:ca:b6:f1:1d:88:92:87:e9:5f:7f:3b:d7:73:a3:ec:dd:ee:
d3:34:28:00:46:93:bc:10:69:80:31:2c:e8:d8:1b:47:32:a3:
7a:96:5c:4b:0a:2b:fd:0b:ba:dd:10:11:88:40:70:31:80:2e:
e3:7e:44:4e:c0:ca:14:fc:ee:5d:1c:db:fa:d8:1d:c5:4c:ae:
73:85:46:6f:4f:44:7a:2c:5e:82:36:54:db:9d:b7:14:81:81:
44:bc:5e:5d:f6:7d:d2:9a:7e:95:b2:25:2f:74:23:9d:95:10:
77:6f:43:a5:d6:b8:9b:d0:c4:1b:9f:ac:6c:24:a5:1e:9e:a6:
2b:33:f8:d6:65:40:f9:3d:a7:01:2b:4a:df:5d:d1:51:46:46:
7f:6c:9d:ff:5c:b7:37:3a:74:d3:46:db:c8:8c:4d:7f:3a:d6:
b9:1e:2b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:18 2025 by rpki-client