Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200975.roa
File: AS200975.roa (raw, json)
Hash identifier: CvuA3PB0yAvEPRWL4yfPPXmPYI1tpKz+RkWY/3TCeTU=
Subject key identifier: 5A:4C:4C:AD:07:E5:78:AF:3D:F5:A7:5B:41:59:E1:9A:4C:49:77:31
Certificate issuer: /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial: 53A820980A801267A4ED97C81DC9CF2C0E4F8618
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200975.roa
Signing time: Fri 09 Dec 2022 07:58:40 +0000
ROA not before: Fri 09 Dec 2022 07:53:40 +0000
ROA not after: Fri 08 Dec 2023 07:58:40 +0000
asID: 200975
IP address blocks: 2a0a:6040:f500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a8:20:98:0a:80:12:67:a4:ed:97:c8:1d:c9:cf:2c:0e:4f:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Validity
Not Before: Dec 9 07:53:40 2022 GMT
Not After : Dec 8 07:58:40 2023 GMT
Subject: CN=5A4C4CAD07E578AF3DF5A75B4159E19A4C497731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:db:a1:02:84:ca:d1:c6:65:70:6b:c5:b8:
bb:7d:32:6f:3d:26:e7:8e:11:22:7c:53:c5:4f:b5:
c9:e1:36:1f:26:d2:ea:eb:5d:0a:53:df:fc:05:fb:
71:71:31:f9:75:e6:f6:d5:80:01:c2:3b:08:44:4b:
ee:8e:fa:7c:6c:29:64:5a:80:e5:11:ee:cd:57:5c:
d8:ae:a7:fd:4d:02:5a:f5:a6:03:bd:eb:60:39:f9:
a0:97:14:0a:f4:0e:a9:2f:d7:a3:92:b0:7e:63:ae:
8c:9c:d3:10:25:5e:66:4d:e6:fa:10:56:ab:ea:1e:
5d:67:8d:db:51:a6:de:ac:9a:fc:60:f6:9d:b9:c8:
ae:fe:ec:fa:78:c0:f9:fa:07:69:ad:96:3e:74:50:
c5:9f:80:73:f7:95:f9:86:68:57:c9:cf:5d:9f:75:
3c:d6:9f:6e:5e:b6:d2:05:82:21:51:1e:48:a2:b7:
7f:c5:6a:b4:ec:fe:20:a7:1d:98:fa:47:5a:5f:a3:
e1:9c:17:db:05:d7:06:7d:ff:dc:6e:cd:05:dc:cb:
3d:20:57:80:25:72:36:ff:cf:58:32:12:3b:38:36:
01:e5:47:42:c1:09:f8:67:c6:2e:cf:8f:b3:3d:7b:
e2:44:e3:f2:c3:5a:8e:cf:dd:0f:11:9b:43:c8:03:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:4C:AD:07:E5:78:AF:3D:F5:A7:5B:41:59:E1:9A:4C:49:77:31
X509v3 Authority Key Identifier:
keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:f500::/40
Signature Algorithm: sha256WithRSAEncryption
51:fb:ac:86:52:64:f8:b6:62:06:8a:6b:dd:f7:08:fa:4e:98:
be:45:0c:d8:40:70:2a:bd:04:e8:98:9b:eb:fd:6e:16:e0:ed:
5e:79:35:3d:df:52:0f:37:d3:a9:46:5a:ba:20:c5:44:4e:b3:
90:1a:00:18:19:fb:28:78:f0:79:5d:88:c3:fa:1c:2a:d9:83:
7a:4f:82:4e:64:bf:02:77:6f:26:00:79:2a:ad:c8:f0:8e:85:
2f:0e:b4:b4:b5:26:3d:4b:bf:2e:9e:6a:1f:dc:5d:c1:e8:4a:
d0:73:98:ab:5b:82:31:01:a3:d8:a6:ba:c2:f0:5d:15:85:e0:
53:c4:ff:9d:f3:c9:51:6d:6e:85:9f:5a:10:89:2a:59:84:b6:
99:18:f1:bf:28:2a:f8:98:5d:f9:84:70:42:c3:27:78:4b:58:
aa:39:e3:06:24:b5:02:b8:09:be:c4:79:e2:3c:a4:c1:db:88:
66:4e:76:77:36:ca:43:36:5e:82:03:88:c7:db:ae:bb:04:d3:
5f:64:cb:aa:70:15:bf:53:55:1f:a6:ae:7d:5a:4f:ec:4a:04:
e8:7b:bc:b8:ab:bc:9c:67:19:5a:b0:c9:31:15:ac:0f:a1:10:
dc:05:a7:88:3a:e4:e5:50:1a:be:2c:0d:bc:35:27:64:f7:27:
f5:70:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:40 2025 by rpki-client