Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201341.roa
File: AS201341.roa (raw, json)
Hash identifier: L4vXJSr0LOErdWPAbYBXiPFyhdhgMVG1KxxV6eFDbv0=
Subject key identifier: AF:52:2D:C0:20:71:B5:95:13:18:AF:27:B3:DF:E1:7B:CB:3E:A3:87
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 4EB43EB9661B7B0AEB70D6E10E81AE5EDB7D3642
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201341.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 201341
IP address blocks: 185.121.160.0/24 maxlen: 24
185.121.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b4:3e:b9:66:1b:7b:0a:eb:70:d6:e1:0e:81:ae:5e:db:7d:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=AF522DC02071B5951318AF27B3DFE17BCB3EA387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:c4:0f:ff:23:b8:9b:58:a1:cc:11:0a:77:
3f:66:15:5c:ba:07:d8:68:67:19:c6:af:97:85:6d:
d5:84:99:c2:9c:22:f0:8a:4d:7d:2d:43:e1:0b:e9:
7a:03:3a:2d:e6:58:4e:0a:26:ef:54:3e:a4:66:0f:
42:98:68:6e:44:e1:6d:79:60:17:0c:27:46:bd:50:
48:ae:41:9c:09:25:2f:7c:ff:f5:fe:68:35:98:50:
b8:92:1c:56:33:08:09:83:14:18:fb:57:d7:e0:a0:
ea:0f:98:84:fe:99:b1:a4:ec:ad:ec:be:5b:b3:e1:
59:03:22:70:02:1b:89:b4:03:c8:14:f5:9b:16:0f:
fd:5e:e9:5b:95:9e:8f:47:7d:06:d8:e5:8a:e0:63:
78:e3:29:25:86:29:4b:04:8f:9a:81:57:15:d0:b1:
62:0f:55:e6:e1:65:33:83:5e:ef:9b:c1:77:41:ac:
a3:40:a9:cf:6c:8e:97:4a:71:63:44:2e:b3:e6:19:
f5:18:36:74:78:c0:3b:4c:ea:2e:e4:e8:d2:a9:1d:
79:5f:60:7e:f8:d4:44:e1:3e:48:87:6e:9a:dc:ab:
42:e1:2a:1b:1d:f8:fd:15:50:35:bd:db:00:8d:44:
7d:4b:14:be:eb:bb:a2:b2:0e:7d:af:1a:ad:eb:aa:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:2D:C0:20:71:B5:95:13:18:AF:27:B3:DF:E1:7B:CB:3E:A3:87
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/23
Signature Algorithm: sha256WithRSAEncryption
17:f5:2c:ca:74:b8:c6:a7:67:89:67:a7:f6:86:f7:9d:67:1c:
5c:4c:70:55:dc:eb:d0:b6:b9:d2:27:bd:2e:34:38:0e:24:5f:
7b:18:cc:9a:21:8f:d6:5c:f2:8c:6b:0d:34:90:a7:bd:e5:e6:
55:93:b3:b2:87:aa:d7:d7:c8:4c:e7:84:d0:22:76:98:e1:50:
44:2a:00:c0:2b:7c:97:e0:b7:86:28:56:35:9f:d4:3d:e4:8e:
7e:ce:ad:47:17:c5:0e:8d:33:99:08:6e:c2:40:1d:08:5a:4c:
c2:15:3f:35:04:e5:48:5b:87:81:1a:28:8e:34:da:22:67:09:
bd:a3:5f:06:d9:78:7d:30:93:62:3c:59:19:9e:62:1e:f8:95:
6c:11:78:5b:87:f5:30:3d:38:62:56:f8:2d:db:7b:0f:8b:6f:
01:9d:14:c7:24:e5:f7:40:c9:a2:1f:6b:b7:3a:d1:ca:30:d7:
b5:e2:ca:13:88:b1:ef:41:50:35:6f:66:74:0a:69:aa:b1:5e:
9a:8e:5f:48:a9:40:a4:3c:08:cd:77:82:9a:7b:f4:1f:af:35:
4d:df:fb:b8:2a:07:dc:85:f1:82:0f:ee:c5:69:5b:cb:57:db:
5f:8c:88:52:ae:5c:88:32:62:33:69:46:f6:b2:60:f3:f4:73:
38:65:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:44 2025 by rpki-client