Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201412.roa
File: AS201412.roa (raw, json)
Hash identifier: XIOfJCRcK6XzJDZIkWx29oP67u3wNYtuJyuy7UFnfYo=
Subject key identifier: 01:D8:E8:29:76:23:21:BE:26:17:78:A3:0B:94:88:CA:FC:D3:F4:CD
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 44F5A058D4100DFA9DE5FC5191EBC5BF9407BFB0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201412.roa
Signing time: Wed 21 Dec 2022 16:56:50 +0000
ROA not before: Wed 21 Dec 2022 16:51:50 +0000
ROA not after: Wed 20 Dec 2023 16:56:50 +0000
asID: 201412
IP address blocks: 2a06:a005:437::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f5:a0:58:d4:10:0d:fa:9d:e5:fc:51:91:eb:c5:bf:94:07:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:50 2022 GMT
Not After : Dec 20 16:56:50 2023 GMT
Subject: CN=01D8E829762321BE261778A30B9488CAFCD3F4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:b6:c4:ec:32:d1:41:7d:42:6a:ca:a3:cf:
12:c2:ee:e7:6c:45:e4:7e:6f:ec:09:16:6b:7c:a4:
a3:56:df:66:db:51:d6:82:a4:5f:16:18:00:fe:26:
42:48:56:7e:73:31:a4:b4:be:c0:9e:20:cd:bc:3b:
70:84:ef:77:84:e5:a6:3a:63:10:15:ce:3a:13:de:
29:3c:28:92:ff:4d:43:a8:8e:6e:c8:94:e0:36:55:
9f:03:06:b9:66:39:d4:10:e3:bd:58:7d:01:49:3b:
3d:b6:5b:7f:44:e1:b2:c1:53:c8:24:7d:31:6b:ed:
80:ba:2f:56:94:68:94:6d:94:41:45:43:71:a9:f1:
9e:64:04:74:16:73:6c:6b:2e:d3:48:56:29:c6:d0:
43:c7:8d:ba:5c:38:3f:07:b1:5f:6f:84:87:e2:33:
66:0d:a5:44:0a:a1:c0:7c:6e:8a:3d:2c:66:06:34:
7c:59:60:65:e0:ff:05:b2:a5:78:5d:29:ec:55:a5:
88:6a:b4:d0:78:d8:58:44:e2:0c:84:5b:f0:cb:73:
c1:22:e4:2c:60:16:29:f1:08:85:55:55:f0:c0:1f:
37:26:9d:58:b4:c6:69:2c:bb:02:48:fb:5f:6a:c8:
b4:54:10:ba:2b:4e:ee:f6:da:9d:8f:4a:b7:aa:24:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:E8:29:76:23:21:BE:26:17:78:A3:0B:94:88:CA:FC:D3:F4:CD
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201412.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:437::/48
Signature Algorithm: sha256WithRSAEncryption
73:b1:ae:ab:08:11:8d:1e:a3:ab:8c:da:06:28:a7:f3:7c:19:
f2:86:f4:de:c9:67:82:95:96:68:f9:7d:f8:be:51:2f:1d:06:
87:a5:b4:29:a9:15:20:c0:91:c4:a7:ca:43:cb:84:d9:06:d5:
7b:4a:55:f6:3b:88:11:8d:5e:30:81:ea:1b:90:7a:5d:64:61:
53:92:cc:57:14:08:9e:bc:57:0c:9f:b7:bd:ab:24:e6:65:b0:
cd:e6:48:82:73:57:90:56:ab:d5:44:36:97:19:b3:98:e0:c5:
d1:7f:66:b4:f6:d2:ac:55:18:3a:bd:2c:ac:06:86:9e:bd:9a:
24:f8:02:03:83:fc:67:13:a8:ec:19:af:23:e9:37:94:25:ea:
5d:3c:6b:81:e4:e4:4d:11:f0:95:f2:44:76:98:2e:ff:9b:b0:
d0:df:1a:9e:73:73:64:76:46:48:6e:77:6c:28:72:64:12:1b:
08:e9:fc:e5:ae:dc:3f:63:74:53:91:1d:da:ab:aa:35:0e:55:
48:6b:4d:82:e3:09:e6:2f:86:28:f1:c7:64:4c:c9:a1:9d:7a:
8e:e4:e2:47:f1:c9:27:0b:9e:2f:60:10:c7:a4:c2:26:1d:70:
6c:88:33:a4:b1:12:a2:f9:15:f1:35:23:6e:41:69:69:a6:f5:
e6:fe:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:31 2025 by rpki-client