Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200969.roa
File: AS200969.roa (raw, json)
Hash identifier: y/r7yXgr+sgtJRGrkKcy+xESDJnKmma9TmkdR/O59wY=
Subject key identifier: 63:9F:EB:77:C1:D3:7F:9B:54:DA:AE:6A:36:D8:CB:23:5D:AF:91:E6
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3A8634676106F256414905DBAF3FA423313E92E5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200969.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 200969
IP address blocks: 2a06:a005:2740::/44 maxlen: 48
2a06:a005:2750::/44 maxlen: 48
2a06:a005:2760::/44 maxlen: 48
2a06:a005:2770::/44 maxlen: 48
2a06:a005:2780::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:86:34:67:61:06:f2:56:41:49:05:db:af:3f:a4:23:31:3e:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=639FEB77C1D37F9B54DAAE6A36D8CB235DAF91E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:b9:7a:f7:07:88:7b:ef:2b:61:aa:3e:de:
ae:30:2a:03:8d:22:98:ad:49:dc:17:00:7e:86:e1:
60:3c:ce:79:b7:16:5b:a2:59:59:e3:2d:e3:2c:e0:
0d:2e:e2:04:14:3d:57:54:82:dc:7b:e4:d5:4a:55:
70:f6:9c:54:9d:6a:c2:2a:6e:e0:98:c1:98:d8:f7:
f7:af:63:92:e0:17:ae:08:29:34:84:5b:8e:35:4c:
3e:8c:89:0e:d8:7d:43:fb:85:e7:2f:5a:9e:53:7b:
8d:06:0c:38:6a:fe:18:f2:21:51:cb:35:04:8b:a9:
13:5c:91:60:74:36:9e:ef:55:77:74:be:f1:22:52:
14:c0:eb:4f:cc:47:c2:c5:ef:db:30:6c:8f:fc:c5:
f5:a1:c7:80:df:d3:ed:1b:bd:ed:0b:62:ac:49:3e:
e3:1c:d0:6f:7c:f9:6e:bc:a7:81:78:69:0f:4f:be:
ae:47:56:82:61:26:7c:b7:11:3c:79:5f:b1:77:c5:
08:15:a9:f0:9b:bf:89:3f:ab:47:29:4c:db:de:a5:
2c:44:30:c9:55:56:32:25:00:40:57:21:a2:34:d0:
01:08:b1:90:c7:c9:97:67:e0:c5:3b:52:24:24:79:
52:c6:38:54:34:af:ab:0c:ab:c1:16:62:5d:df:26:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9F:EB:77:C1:D3:7F:9B:54:DA:AE:6A:36:D8:CB:23:5D:AF:91:E6
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2740::-2a06:a005:278f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:1e:0e:a9:8e:d3:05:12:42:8b:d7:7c:ba:ea:a3:16:c6:df:
a0:03:b2:7e:6a:b2:ec:5c:b0:27:13:1d:bc:20:6b:90:b7:c0:
31:d8:71:f8:8a:12:25:84:1f:3b:30:d3:70:08:83:fd:76:5a:
67:25:05:51:a6:80:d4:1b:8d:33:6e:6b:bc:1e:36:72:4c:fc:
07:3f:4a:a5:25:66:8f:46:42:b1:c2:11:45:76:a7:b5:29:63:
70:b1:93:87:0b:ea:bf:15:73:08:2d:99:e1:48:74:b7:3d:4c:
cc:ae:db:4a:99:95:15:45:0d:80:13:68:d3:97:20:30:70:0f:
f8:c2:44:84:8e:0e:21:22:97:d3:f9:bd:c1:25:1e:41:38:75:
9a:a9:fc:7b:5a:41:e1:8c:67:af:e1:ab:a9:40:15:91:7c:06:
d9:dc:39:4c:7b:23:e3:29:4b:fc:45:58:d9:0f:c7:f9:b0:c7:
85:58:76:b0:c9:db:12:60:cc:4f:4c:eb:db:8a:d1:5c:f9:dc:
0c:c9:2a:be:04:1d:49:f1:5b:1b:b6:01:12:f6:bf:07:9b:fb:
d3:09:44:f4:16:32:3c:21:0e:68:fe:b7:23:c6:3e:e3:6a:95:
1e:5e:02:d6:51:cd:03:23:2d:60:c2:64:a6:eb:d0:70:ac:79:
71:1e:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:40 2025 by rpki-client