Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201217.roa
File: AS201217.roa (raw, json)
Hash identifier: RouIr40drSDuw0jIfhYBhlC+TgRaI7e3XS6m9QegoQU=
Subject key identifier: AF:53:A1:94:46:1D:9C:18:85:52:24:81:76:61:02:34:37:98:4B:53
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 36FC22E226EBE19C8AF7A4DB0EBC91EF76D16EEC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201217.roa
Signing time: Tue 27 Dec 2022 11:43:07 +0000
ROA not before: Tue 27 Dec 2022 11:38:07 +0000
ROA not after: Tue 26 Dec 2023 11:43:07 +0000
asID: 201217
IP address blocks: 2a06:a005:8a0::/44 maxlen: 48
2a06:a005:1870::/48 maxlen: 48
2a06:a005:1c78::/48 maxlen: 48
2a06:a005:2470::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:fc:22:e2:26:eb:e1:9c:8a:f7:a4:db:0e:bc:91:ef:76:d1:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 27 11:38:07 2022 GMT
Not After : Dec 26 11:43:07 2023 GMT
Subject: CN=AF53A194461D9C18855224817661023437984B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:a8:28:4f:09:c4:88:01:ce:b9:ef:e4:5b:
c6:b5:a5:d4:b3:a8:f9:ff:40:67:ba:2f:58:11:c3:
bf:20:f3:39:a9:6f:0d:bb:53:37:fc:fc:85:f7:6c:
e6:b4:19:b0:81:c3:bd:c5:97:63:46:f9:6b:06:32:
99:7d:eb:fa:dc:8b:1a:03:e7:c1:68:12:b2:c5:80:
fd:37:8b:23:13:33:22:89:54:90:1b:77:a0:91:4d:
79:46:dc:09:cf:8e:9f:19:96:89:5b:65:01:3a:c2:
54:b6:7b:5e:60:4b:4c:b8:39:2a:e7:2f:21:43:67:
20:cc:2a:5a:4c:d0:70:b1:8f:bb:a4:6e:16:49:b0:
19:b6:64:60:89:c5:3e:b4:61:97:a3:32:7b:d3:be:
f9:ce:43:37:0a:8c:61:97:a3:9c:7c:11:00:e7:d8:
6d:fd:f4:c4:15:c1:61:60:11:ce:d0:f9:6f:f6:50:
55:f1:44:81:be:1a:7b:f1:16:a0:0d:aa:79:08:02:
8d:d6:35:c7:cd:ed:53:e2:b5:a4:a7:86:ca:1c:68:
17:60:7b:04:92:9e:95:b3:71:02:53:67:06:c7:87:
5b:51:2f:24:07:40:3c:3d:3f:ae:eb:98:71:cf:09:
d0:91:7a:ec:4f:7b:7b:3f:c1:e3:5b:f6:bc:20:c4:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:A1:94:46:1D:9C:18:85:52:24:81:76:61:02:34:37:98:4B:53
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8a0::/44
2a06:a005:1870::/48
2a06:a005:1c78::/48
2a06:a005:2470::/44
Signature Algorithm: sha256WithRSAEncryption
ce:10:9f:3a:6e:7d:bd:e7:f3:45:97:9e:b7:bd:67:59:24:a9:
b3:f0:21:af:1b:74:4c:2f:3a:58:e8:dd:03:71:a2:6a:f8:01:
34:86:2a:1a:fa:cc:38:d1:a2:eb:6f:32:ff:f5:4d:14:08:9f:
5a:89:35:a8:69:f9:d4:3f:83:b6:b9:7e:17:3a:1c:0a:b3:6d:
fc:10:24:44:a0:9c:e9:46:a6:c8:50:20:bf:3c:73:0c:82:42:
dd:c8:02:d5:78:2c:91:5f:f7:54:99:1e:56:4a:45:a2:cf:e7:
90:42:87:14:40:a3:b0:dd:76:01:62:28:fe:72:87:8c:76:d6:
81:d4:09:d5:e8:a4:c9:54:08:1b:41:a4:42:93:d6:44:66:62:
0c:2d:eb:34:96:03:2b:31:aa:34:87:06:76:94:f0:34:df:28:
8a:03:0b:91:a3:ba:ec:3d:8d:a7:56:09:49:37:b8:52:de:18:
dd:4b:a4:08:d9:8b:01:98:fc:d8:69:a9:d4:ec:57:26:a6:67:
29:8c:bf:35:10:1b:c0:45:d4:26:a1:30:e3:43:32:2f:95:6a:
43:a2:0b:cb:2f:2b:f6:57:43:e3:3f:84:a2:cd:8f:43:c5:f4:
cb:a6:6f:07:80:55:5e:f2:49:36:10:c3:b6:4e:0a:3a:2c:99:
ab:eb:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:35 2025 by rpki-client