Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201398.roa
File: AS201398.roa (raw, json)
Hash identifier: 8Vh+SdOAmd2SFyyXmeyX5761KGEHzNbtnfT/nAeWakY=
Subject key identifier: 68:5F:4C:3D:AA:2C:B5:01:48:6A:A6:DD:18:BF:6A:E3:09:FB:AD:B4
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7961DAE19D81BAA8815865563F986A7143F7E3C7
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201398.roa
Signing time: Wed 21 Dec 2022 16:56:43 +0000
ROA not before: Wed 21 Dec 2022 16:51:43 +0000
ROA not after: Wed 20 Dec 2023 16:56:43 +0000
asID: 201398
IP address blocks: 2a06:a005:108f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:61:da:e1:9d:81:ba:a8:81:58:65:56:3f:98:6a:71:43:f7:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:43 2022 GMT
Not After : Dec 20 16:56:43 2023 GMT
Subject: CN=685F4C3DAA2CB501486AA6DD18BF6AE309FBADB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:c2:e9:49:32:92:36:38:cf:57:d5:68:3e:
1e:3a:41:a0:2f:fa:26:03:c7:80:03:47:a3:49:c6:
a6:0f:98:07:47:00:02:12:c5:f3:19:a7:65:b1:52:
bf:47:53:ef:a5:b7:23:63:53:5c:09:11:3a:de:47:
3b:eb:89:e7:56:d1:ab:9f:05:03:3c:f3:2e:69:7e:
0b:74:e6:b5:81:fe:76:52:31:47:41:4d:e2:f0:26:
3d:48:8d:d1:27:25:06:88:61:de:7f:44:3d:72:b9:
5b:99:85:40:02:2c:16:c5:55:15:77:77:95:3b:67:
fd:92:68:04:d2:0d:e7:8d:13:63:e5:9a:fe:55:f5:
75:ed:a6:6a:7d:a7:e8:68:4d:5e:7d:b1:74:d8:31:
c5:6d:44:53:1e:a7:e0:3d:f4:f6:5b:ab:c8:8d:b9:
d8:0d:10:f5:73:24:5d:e3:d4:2e:d6:e1:b6:95:56:
37:1c:10:20:84:88:e2:f3:ec:09:e1:ea:b3:d3:27:
74:38:50:ba:ee:05:60:1a:4e:3e:17:fa:30:35:7d:
77:a0:11:20:df:fc:19:ac:1b:e1:97:bb:26:9b:eb:
d2:0e:e8:e5:d9:45:a7:f0:a2:b0:b0:b5:59:d3:3b:
d6:a9:87:27:a7:3d:c7:cf:8b:1e:9a:ea:be:8f:ca:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:4C:3D:AA:2C:B5:01:48:6A:A6:DD:18:BF:6A:E3:09:FB:AD:B4
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108f::/48
Signature Algorithm: sha256WithRSAEncryption
e4:02:b1:bd:12:f4:17:97:dc:95:2a:06:77:9c:99:94:92:34:
bf:bc:29:75:6e:46:54:19:39:60:44:29:1a:e8:41:0f:46:87:
8a:90:98:8c:3f:6b:1b:a0:74:1a:99:20:77:f2:29:18:59:95:
38:cd:67:05:0a:6d:f9:25:b5:36:93:88:1e:39:b2:d2:83:4e:
68:3b:80:ba:43:6b:6f:d2:a8:4b:1c:4b:fd:0b:4e:fc:f4:9b:
66:2f:c1:2f:25:70:19:8b:00:ab:d4:cb:5d:ff:a8:aa:86:3c:
4c:a4:c5:91:b3:c5:75:ed:e4:fa:1f:48:5d:1d:3a:ac:fb:fc:
aa:99:18:b7:7a:be:d8:b8:07:30:1f:c6:e5:e2:6a:67:4a:ee:
89:3a:16:c7:5a:2c:de:8e:ba:a3:11:04:6d:6b:e5:22:7a:78:
67:62:38:61:e1:50:b3:50:fa:bb:06:41:20:74:58:66:07:87:
0b:c6:72:f0:4f:c4:ae:04:02:ab:b5:18:5c:a2:45:81:8e:90:
60:fc:86:47:4f:60:dd:f0:eb:51:50:f2:b4:a0:6b:fd:9b:3e:
ef:4f:74:d8:7c:ec:39:dd:f0:34:3b:2c:cf:10:b7:54:db:0a:
d6:4c:16:e0:68:0e:7e:eb:97:ec:5c:88:2d:2a:90:93:c1:75:
f2:89:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:48 2025 by rpki-client