Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201251.roa
File: AS201251.roa (raw, json)
Hash identifier: 3Q5evuJuJ7N4ixzxwiaO++ygAitfNdb7zXueV9u8HgI=
Subject key identifier: B8:20:CE:28:B3:5D:1B:08:0B:0D:B7:6A:29:5F:6D:00:13:FB:B8:21
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 2AF9CF5B23E07F77245BAE4947B86D381D97925F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201251.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 201251
IP address blocks: 2a06:a005:22b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f9:cf:5b:23:e0:7f:77:24:5b:ae:49:47:b8:6d:38:1d:97:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=B820CE28B35D1B080B0DB76A295F6D0013FBB821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:5d:27:96:8b:0e:77:fc:a9:fc:7e:54:b4:
88:81:05:7f:62:05:94:42:d2:b0:39:1c:f6:d4:54:
67:63:d1:28:5d:4e:d6:d0:5a:79:7b:fa:d2:4c:59:
98:08:f7:72:cb:1a:d0:4c:fc:19:47:35:cc:b6:dd:
3d:54:86:ad:d5:71:ce:c2:a2:dd:02:44:8b:02:33:
dc:71:41:6f:bf:2f:9d:fe:70:bf:a7:cd:03:db:43:
5b:c6:c6:76:0a:53:2e:bf:d7:35:56:c7:9d:90:8c:
95:8e:4e:a1:66:76:11:24:d1:15:70:2b:56:a9:de:
2b:ea:8f:17:27:30:4a:e3:61:30:63:ae:c6:e7:56:
eb:e4:12:25:ec:05:50:af:00:09:ca:79:75:4a:62:
bc:19:d9:14:92:3f:8a:ba:9e:ec:18:12:36:f9:2b:
5c:a9:77:19:06:c2:49:38:48:38:0f:9c:e6:63:a6:
c9:3e:5a:55:44:97:1e:0a:c1:12:ce:34:8c:92:8a:
e0:dd:15:ef:04:95:e5:0d:0c:e5:25:b2:14:93:d0:
de:c1:05:6f:23:b6:7a:ad:25:28:15:4c:1d:d5:7e:
49:3a:7f:b8:61:2c:df:7c:19:a0:ef:31:80:ed:ed:
c6:dc:8d:83:29:e8:96:17:4d:e8:d1:41:db:7a:a9:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:CE:28:B3:5D:1B:08:0B:0D:B7:6A:29:5F:6D:00:13:FB:B8:21
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201251.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:22b0::/44
Signature Algorithm: sha256WithRSAEncryption
9d:00:44:1d:d7:44:e5:c0:2e:de:8b:11:78:26:f3:10:bd:02:
87:d5:6d:88:91:78:6e:06:44:2e:43:7c:3f:b9:47:8e:f6:f7:
c8:f1:93:1f:f7:26:ea:e2:a8:ce:4e:bd:1f:a9:dd:66:4b:f3:
86:3c:51:c0:b0:a6:c3:bf:f2:95:33:e1:cb:56:4c:5c:e4:55:
59:4d:39:aa:0a:fb:1b:1f:85:10:18:cc:b5:c3:54:c1:8e:c4:
a8:0f:57:2c:54:5a:f0:2e:16:82:d2:0f:eb:c6:a3:49:88:81:
00:ef:4d:0d:05:8b:0d:95:c7:1b:3c:02:2f:6a:8c:8c:34:85:
55:d0:66:1b:8f:47:3c:b0:07:18:c3:82:ad:23:5e:5d:7d:12:
7f:25:c8:0f:28:92:d0:13:86:01:2d:48:30:7e:9e:a9:8f:d8:
cd:c7:be:b7:60:ba:8c:c6:4e:ce:67:9e:76:db:01:b4:c0:68:
4e:66:be:8a:dc:8d:1f:b6:e9:d3:c5:ad:24:cb:bf:d2:60:4a:
3d:d9:54:7d:bb:df:2f:42:6a:41:f0:50:b9:45:24:b3:41:9d:
64:70:1c:ef:86:67:85:45:25:cc:03:77:b2:3f:16:f9:0d:1e:
17:4d:83:40:69:de:0e:c2:3c:6b:b3:95:18:ca:47:06:81:c6:
f8:f0:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:36 2025 by rpki-client