Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200993.roa
File: AS200993.roa (raw, json)
Hash identifier: RkM+A6uxZbcNIWBcgBAzTjyQLmRTHwHjj+8Cb3kWb2k=
Subject key identifier: 3E:68:17:56:23:9A:D0:83:D7:43:8F:10:B7:9B:99:45:91:55:30:F2
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 17E6827A07D8E03DDC52E721BE031CB0C2B033C3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200993.roa
Signing time: Wed 21 Dec 2022 16:56:42 +0000
ROA not before: Wed 21 Dec 2022 16:51:42 +0000
ROA not after: Wed 20 Dec 2023 16:56:42 +0000
asID: 200993
IP address blocks: 2a06:a005:1160::/48 maxlen: 48
2a06:a005:1d52::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e6:82:7a:07:d8:e0:3d:dc:52:e7:21:be:03:1c:b0:c2:b0:33:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:42 2022 GMT
Not After : Dec 20 16:56:42 2023 GMT
Subject: CN=3E681756239AD083D7438F10B79B9945915530F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:e6:18:ed:c3:f1:b5:65:fb:24:65:4d:24:
08:01:0f:13:11:0e:d7:0c:59:8c:50:cf:4f:0b:04:
0c:fd:50:1e:e3:ec:9c:ec:93:4b:b6:5d:af:45:bf:
64:2f:72:47:7c:94:75:25:ab:2d:ec:e7:4e:31:b6:
40:ff:78:0b:9f:fa:fc:04:02:d4:56:a3:3a:3c:9c:
6b:ff:6d:30:8a:93:2f:fd:9e:f3:09:bb:f5:7d:6d:
08:13:6f:a5:94:e1:89:3f:8e:cf:6f:77:8a:f2:a7:
71:18:be:3f:09:e5:69:6a:7c:e9:9d:23:bb:31:65:
de:a8:3a:67:f6:3f:31:48:dc:84:d4:db:42:c0:21:
7b:36:15:9c:4a:8d:a9:84:49:7f:49:c1:ab:92:4f:
f8:ba:ae:c2:01:a7:04:86:f6:00:65:e3:4b:86:17:
9a:5e:a7:07:84:27:8b:e3:60:67:6b:c8:e1:d2:5a:
d7:60:27:3b:f9:1f:49:a6:58:5a:f2:ff:ec:3d:1b:
5a:66:b1:d9:64:e4:04:d2:a1:15:08:9a:4e:6e:e4:
ac:a1:b8:e3:dd:6b:a9:3a:d4:90:87:67:a4:f0:8d:
3b:f7:e6:40:27:bb:d6:3c:bb:1c:d9:26:f3:0c:ab:
94:af:af:db:30:e3:56:7b:87:e5:aa:bf:b2:11:0c:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:17:56:23:9A:D0:83:D7:43:8F:10:B7:9B:99:45:91:55:30:F2
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1160::/48
2a06:a005:1d52::/48
Signature Algorithm: sha256WithRSAEncryption
c7:8b:5a:34:29:c1:01:08:7b:a4:0c:28:ba:89:dd:8e:41:d3:
49:12:0c:c1:38:7a:6e:a4:c7:63:51:d8:65:db:3f:b5:01:a3:
d1:32:03:c3:86:e6:19:9b:79:40:98:8c:56:b4:6e:ab:6e:e9:
b6:b9:c3:98:d9:73:44:06:c2:1c:94:41:c7:d9:cb:1c:34:a9:
d0:be:46:0a:cc:2d:6f:19:8f:1b:72:37:ac:05:81:83:db:21:
b1:13:2d:60:cb:87:54:d0:4b:65:6e:56:51:43:27:1c:7d:a0:
1f:1e:f3:20:9e:93:41:2a:e1:16:05:94:d0:aa:4d:7b:11:d1:
2e:b5:bf:2c:c6:eb:5c:6f:d3:5f:49:ec:93:4e:f2:89:43:e5:
97:4a:f2:44:ea:1f:ee:09:2c:bc:ee:a8:60:e6:1a:a7:4e:b9:
23:f6:1b:ca:2a:4a:83:9c:e9:2f:01:db:c2:cb:8b:74:8b:43:
48:fd:be:4b:98:76:e3:26:d1:54:1e:54:c6:f6:43:f2:b4:11:
23:f3:73:e9:78:29:54:ea:c6:10:e5:5a:70:9c:18:34:bb:39:
2b:f1:ce:ff:dd:99:b3:04:c9:6e:ad:d5:5f:3c:51:81:ca:94:
28:64:43:e3:fc:ed:34:91:d9:31:0d:9a:77:08:97:6e:19:82:
e2:61:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:59 2025 by rpki-client